A newly discovered FaceTime bug could pose an eavesdropping problem, and Apple says it will have a fix out later this week.
The bug allows iPhone users to call another device via the FaceTime video chat service and hear audio on the other end before the recipient has answered the call. That is, it can turn any iPhone into a hot mic without the user’s knowledge.
That represents a major security concern for Apple at a time of heightened sensitivity to cybersecurity threats. As it turns out, the news broke on Data Privacy Day.
The bug was reported by 9to5Mac and confirmed independently by CNET. 9to5Mac also confirmed that it was able to replicate the bug when making a FaceTime call to a Mac.
We were able to re-create the bug in the CNET offices during a regular FaceTime call. Here’s how it happens: After starting a FaceTime session with an iPhone user, swipe up from the bottom of the screen to add another user to the call and add your own phone number. While the phone is still ringing, you’ll be able to hear audio from the recipient’s phone, even though that person hasn’t accepted the call.
The Verge noted that if the recipient rejects the call by pressing the power button, video will also be broadcast from that person’s phone. CNET re-created this, getting a second or two of video from the recipient’s phone before the call was disconnected.