Is it unnecessary to cover one's webcam on Linux?

Cross-posted to: sh.itjust.works/post/15859195


From other conversations that I’ve read through, people usually say “Yes, because it’s easy on Windows”, or “Yes, because they simply don’t trust the webcam”. But neither of these arguments are enough for me. The former I feel is irrelevent when one is talking about Linux, and the latter is just doing something for the sake of doing it which is not exactly a rational argument.

Specifically for Linux (although, I suppose this partially also depends on the distro, and, of course, vulnerabilites in whatever software that you might be using), how vulnerable is the device to having its webcam exploited? If you trust the software that you have running on your computer, and you utilize firewalls (application layer, network layer, etc.), you should be resistant to such types of exploits, no? A parallel question would also be: How vulnerable is a Linux device if you don’t take extra precautions like firewalls.

If this is the case, what makes Windows so much more vulnerable?

memfree,
@memfree@lemmy.ml avatar

If you trust this source, it turns out that it is pretty easy to see your camera feed even if your camera is off: techxplore.com/…/2024-02-camera-hackers-spy-camer…

I read about it on lemmy, too. I guess I – or one of us – should have cross posted it here from its .world source: lemmy.world/post/12081766

Edit to add excerpts:

Results vary on how far away someone would have to be in order to eavesdrop on these different devices. For some, a peeping Tom would have to be less than 1 foot away; for others, they could be as far away as 16 feet.

For consumers, Fu says a plastic lens cover might not be guaranteed to protect you—infrared signals can still get through them––but it is a good first step to battling this kind of cyberthreat.

dukatos,

If you are running zoom, teams, skype or similar software, cover it.

possiblylinux127,

Better yet, use them in a VM or don’t use them at all.

Helix,

TL,DR: no

Patches,

ITT: Yes.

excitingburp,

All software has bugs, including Linux. Some bugs can lead to security escalation. Those bugs are called vulnerabilities. Like bugs, all software has vulnerabilities - including Linux.

Your webcam can be accessed by hackers on Linux, on Windows, on MacOS, on BSD, it doesn’t matter.

possiblylinux127,

If they have that level of access you are in trouble

shootwhatsmyname,
@shootwhatsmyname@lemm.ee avatar

Honestly, I don’t think anyone can actually say 100% for sure that your webcam can’t be accessed. We don’t know what we don’t know—new exploits are discovered every day—thus it’s worth the extra 2 seconds to cover and uncover it.

BearOfaTime,

No. It’s necessary

nexussapphire,

Especially if you own a smartphone. You’re carrying 4x+ cameras and a wiretap with you at all times.

I thought about this one day when I was in the bathroom and used autorotate with face detection. I practically had the camera facing towards my crotch while it was on.

electricprism,

There’s this youtuber that goes around and films people in public, its funny because people get mad but most people in cities are already being filmed hundreds of times a day.

The message is the same, if you are worried about X vector you should really think about YZ first for it to make sense.

possiblylinux127,

Face ID is one of the sillyness things in my option

nexussapphire,

Yeah, when my new iPad broke and I had to go back to my old iPad. I forgot how much more convenient the fingerprint reader was compared to face I’d.

On the iPad at least if you had it standing up on its own or flat on a table it was no bueno for face I’d. You know, like showing recipes or a big e-reader while learning to code from an e-book. I miss that big screen, it was like carrying a nice netbook screen with me everywhere.

JackGreenEarth,

Doesn’t Pegasus spy on you from the hardware?

PoliticalCustard,

If I’m not using my cam, it’s not plugged in. If I am not chatting, my headset’s physical button has the mic deactivated. That’s two potential vulnerabilities I just don’t have to think about.

hellfire103,

I do, for three reasons:

  1. Hackers. It’s unlikely that anyone would hack my webcam, but there’s always a chance. Maybe I’m paranoid, idk.
  2. Hardware exploits. Three of my laptops are too old for me to update the firmware with fwupd, so I cover the webcams in case there’s some critical hardware-level vulnerability which could be exploited; or in case one of the three-letter agencies are in there.
  3. Consequences. Despite the incredibly low chances of anything happening whatsoever, the possible consequences are too bad for me to want to risk it.

I’m paranoid, aren’t I…

Awe,
@Awe@lemmy.ml avatar

And for me: 4. It makes it a lot harder to accidently turn my camera on in meetings (a different form of privacy)

Kolrami,

Also, it’s incredibly low effort to cover it. There’s no subscription plan for covering a webcam.

amju_wolf,
@amju_wolf@pawb.social avatar

Security is always applied in layers. If you aren’t inconvenienced by it, it’s a really solid layer to use. Doesn’t matter how ‘paranoid’ you are, it’s a solid strategy.

fuckwit_mcbumcrumble,

It’s a hardware issue not a software issue. If your laptop can run its webcam and not have the light turn on then it’s bad hardware. Software might get around one exploit, but that doesn’t fix what’s a hardware issue.

TootSweet,

The way I would look at it is:

  • If you aren’t sure you can trust your computer, you should probably cover your webcam.
  • Your level of risk tolerance can vary, so what a person would consider trustworthy may differ from person to person. (For some, maybe any proprietary software makes the computer untrustworthy. For others, maybe they feel smart enough to make good decisions about what software is trustworthy and they just don’t download anything that sets off their spidey sense. Or whatever.)
  • If you’re taking extreme measures to ensure your machine is trustworthy, you’re probably going much further out of your way than covering your webcam anyway. If you’ve picked a lot of the higher branches clean anyway, you probably ought to go ahead and pick that remaining low-hanging fruit.
  • Regarding Windows specifically, some would probably call Windows systems less trustworthy on some combination of that a) Microsoft is assholes that might themselves use webcam data in evil ways and/or b) Windows is more targeted by crackers and malware.
Valmond,

I wouldn’t put it past Microsoft trying to spy on you, just changing some line in that 11 pages thing you click “OK” to because you don’t have an alternative.

possiblylinux127,

The Windows threat comes from other places

Jako301,

That wouldn’t hold up in court, not even in the fucked up pro corp system the US has.

Besides, they don’t need to take any photos, they already know pretty much all your habits and interests without taking a major risk.

poVoq,
@poVoq@slrpnk.net avatar

If this is the case, what makes Windows so much more vulnerable?

As with most exploits: they go for where the most and easiest targets are.

As a Linux user it is very unlikely that anyone will try to hack your webcam, even if Linux were similarly vulnerable as Windows.

tapdattl,

I dont think the covering of webcams with tape on windows is necessarily about a malware or an exploit watching you, but more about windows itself monitoring and selling off everything you do.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • DreamBathrooms
  • ngwrru68w68
  • tester
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • InstantRegret
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • mdbf
  • tacticalgear
  • JUstTest
  • osvaldo12
  • normalnudes
  • cubers
  • cisconetworking
  • everett
  • GTA5RPClips
  • ethstaker
  • Leos
  • provamag3
  • anitta
  • modclub
  • megavids
  • lostlight
  • All magazines