Security researchers investigating the WebcamGate scandal found that some Apple laptops’ iSight cameras could be activated without illuminating the physical indicator light. By changing the camera device’s firmware RESET register to 0x00c8, an attacker could bypass the camera’s standby state and defeat what Apple had marketed as a hardware interlock. The affected laptops could run multiple operating systems, so the vulnerability’s exposure and available mitigations varied by platform. The researchers released an iSightDefender kernel extension to reduce the attack surface under macOS.
The flaw’s personal consequences were illustrated by the sextortion of Miss Teen USA Cassidy Wolf. Wolf received emails containing nude photographs taken without her knowledge and said the webcam light never turned on. The FBI arrested Jared Abrahams, who admitted infecting victims’ computers and recording women while they undressed; the source also connects him to sextortion of other female victims. The disclosure renewed calls for Apple to use a physical camera switch or stronger privacy protections. The supplied source reports no financial damages, Apple settlement, or specific legislative outcome.
