New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Texas Software Engineer Daven Morris Also Reported FaceTime Bug to Apple One Day Before it Made Headlines

Friday February 8, 2019 4:30 am PST by Joe Rossignol
In a support document outlining the security content of iOS 12.1.4, Apple credited both 14-year-old Grant Thompson of Catalina Foothills High School in Tucson, Arizona and Daven Morris of Arlington, Texas with reporting a major Group FaceTime bug to the company that allowed users to eavesdrop on others.


Thompson and his mother are widely known for being the first people to discover and report the bug to Apple, over a week before it made headlines on January 28, but nothing was known about Morris until now.

The Wall Street Journal today shared a few details about Morris, noting he is a 27-year-old software engineer who reported the bug to Apple on January 27, several days after the Thompsons but one day before it made headlines. He apparently discovered the bug a week earlier while planning a group trip with friends.


Apple on Thursday said it will compensate the Thompson family for finding and reporting the bug and make an additional gift toward Grant Thompson's education. Apple hasn't disclosed the exact sums of the donations. It's unclear if Morris will also be compensated by the company for reporting the bug.

In a statement issued to MacRumors, Apple apologized for the bug a second time and assured customers that it has been fixed in iOS 12.1.4, as has a previously unreported vulnerability in the Live Photos feature of FaceTime:
Today's software update fixes the security bug in Group FaceTime. We again apologize to our customers and we thank them for their patience. In addition to addressing the bug that was reported, our team conducted a thorough security audit of the FaceTime service and made additional updates to both the FaceTime app and server to improve security. This includes a previously unidentified vulnerability in the ‌Live Photos‌ feature of FaceTime. To protect customers who have not yet upgraded to the latest software, we have updated our servers to block the ‌Live Photos‌ feature of FaceTime for older versions of iOS and macOS.
Apple has reenabled its Group FaceTime servers, but the feature will remain permanently disabled on iOS 12.1 through iOS 12.1.3.

Widely publicized last month, the FaceTime bug allowed one person to call another person via FaceTime, slide up on the interface and enter their own phone number, and automatically gain access to audio from the other person's device without that person accepting the call. In some cases, even video was accessible.

We demonstrated the bug in a video at the time:


Apple already faces a lawsuit in Texas, a proposed class action lawsuit in Canada, questions from a U.S. Congress committee, and an investigation by New York officials over the bug and its serious privacy implications.

Tags: FaceTime, FaceTime Listening Bug
[ 38 comments ]

Top Rated Comments

(View all)

Avatar
neuropsychguy
9 months ago

And this is only what we know, could you imagine other ppl doing the same who didn’t have the opportunity?
I’ve got this feeling: macOS is long gone! :(

I'm sorry but I don't understand your comment. I read it 5 times and am not sure what you're saying.
Rating: 9 Votes
Avatar
x-evil-x
9 months ago
Who cares who supposidly “discovered” the flaw first. Really do we need an article for this?
Nobody cares
Rating: 6 Votes
Avatar
Baymowe335
9 months ago
Who cares?

Apple clearly states they don’t confirm bugs publicly before fixes are availabale and that makes sense.
Rating: 5 Votes
Avatar
x-evil-x
9 months ago

And this is only what we know, could you imagine other ppl doing the same who didn’t have the opportunity?
I’ve got this feeling: macOS is long gone! :(

My nephews sister who is 3 years old discovered it first. You heard it here first.
Rating: 5 Votes
Avatar
az431
9 months ago
Is there going to be an article about each and every person that discovers a bug?

Someone found a bug, reported it, and Apple fixed it. Let's move on.
Rating: 4 Votes
Avatar
Rogifan
9 months ago

Who cares who supposidly “discovered” the flaw first. Really do we need an article for this?
Nobody cares

No it doesn’t matter but this kid and his mother got plenty of national attention over it. I see no problem with reporting on the fact someone else made Apple aware of this too.
Rating: 4 Votes
Avatar
yaxomoxay
9 months ago


I’ve got this feeling: macOS is long gone! :( I was one of those weirdos that liked Windows 8’s fresh air.


as painful as it is to admit it, at this point in time I slightly prefer Windows 10 over macOS - in terms of usability.
Rating: 3 Votes
Avatar
Goompa
9 months ago
And this is only engineers that made it to the media, could you imagine other ones doing the same who didn’t have the opportunity/ didn’t want to hesitate letting apple know about the issue?

I’ve got this feeling: macOS is long gone! :( I was one of those weirdos that liked Windows 8’s fresh air.
Rating: 3 Votes
Avatar
DNichter
9 months ago
I am not sure why this matters. It's a bug, it's fixed. Issues will always occur, but Apple at least has a good reputation for quickly addressing it. That's all I ask.
Rating: 3 Votes
Avatar
evilrobot
9 months ago
Developer went through proper channels to document and present a bug to Apple. (boring story).

A kid stumbles onto bug trying to set up a Fortnite game. Mass populous clutches their pearls and fans themselves. (amaaaaazing story).
Rating: 3 Votes

[ Read All Comments ]