HOW TO: Spy on the Webcams of Your Website Visitors

[deepblueeve]

A dude from Stanford... u_u I wish I could go there for a Ph.D!!!

[sadisticyellow]

informative! that's creepy, and thanks for telling us. we'll have to be more careful with our in-built webcams and microphones from now on. :s

[tarounterburger]

wow. fuck adobe flash

[iLoveChildrenNoPedo]

@tarounterburger and little children...

[weissertiger2]

Wer kommt alles von SemperVideo?

[Torieisaunicorn]

Is this only mac? 0_0

[YourNamelessStalker]

Wow, that is creepy...

[Alisachhan]

I was just about to say the same. Heyyy cutie! ;D lol

[grandmahands510]

Will the light turn on showing that your webcam is on or is there no way to tell?

[theatakesphotos]

Oh my gosh why are you so good looking?

Also thank you for the interesting and kinda really horrifying info!

[minirachelx3]

sorry not bothered to watch the whole thing but is he a hacker and does this only for macs?

[rabbitseverywhere]

So each time Adobe reminds us to upgrade to a newer version, we should still do it right? Sorry, I am completely computer illiterate.

[rainingcrystalx]

you remind me of mac miller

and google chrome ftw

[FreeTheFeross]

@rainingcrystalx Haha, why do I remind you of Mac Miller?

[rainingcrystalx]

@FreeTheFeross Hmmmm something about your eyebrows and facial structure. You also kinda remind me of Rob Pattinson... ahhh teen culture references. Haha but I like you better than both of those people because you're also smart...

[iLoveChildrenNoPedo]

@FreeTheFeross because you are sexy

[TheSlappygoose]

Damn! GJ!

[cheesemon]

I can't believe anyone would fall for clicking around like that, but from what I've seen, if you add a $5 Starbucks card incentive . . :P

[iinspectra]

@cheesemon Well, I guess that's not the point, because like you said, no one would really fall for that. The point was that the capability to do something like this is there, so a website can easily incorporate the clicking thing into any other, more involving, game or function.

[PureCX]

so smart :) well done bro

[omaheavy]

You're the fucking master while Adobe are fucking bastards...!!!! I hate flash from the first day it was launched. Now that Steve Jobs has died, i'm afraid of that Adobe recover some good reputation... Please, don't allow him to do it!!! ;D

[idontfkinknow1234]

@omaheavy Shut up you fucking hipster faggot, you realize without flash youtube wouldn't exist?

[KillerCheebo]

this is what retards get for using mac

[blahh557]

@KillerCheebo You don't even know what you're talking about. "This is what retards get for using mac"? This is a vulnerability in Adobe's software, it has nothing to do with the OS. This is just one of the hundreds that keep appearing in Adobe's laughable products.

[ciavarella1292]

@KillerCheebo Cmon man. As a PC man myself its not just Mac zombies that have webcams.

[Downie250]

Thanks for this good and clear explanation!

[superb150]

@freethefeross Really good explanation, i just tested and found something strange, when using Flashblock, even when unblocking the ieframe, the time the page reloads flashblock still not showing anything, so it could be a temporal fix for now.

[stupidjunk878]

hot hacker!

[valwit]

the reason why it works on mac only, is probably in the fact that on windows since a few versions adobie provides a controll panell for the flash settings, so there's nothing going over the adobe settings website. chrome works a bit different so no joy here too.

[SexMoooT]

haha Old gap

[Internalsufferings]

Wouldn't you see your webcam light go on if it was accessed?

[darkgcn14]

which is why you should have no script and a windows PC. Macs blow

[Almsaeed]

You are originally from where? I would guess, Palestine .. Good Job Firas.

[MrPunchinurface]

@Almsaeed His name is Feross Aboukhadijeh.

[amora27omar]

u know it s not a great discovery ,, since whenever ur cam went on a flash light will turn on and u ll be able to notice that ,,,

and second :: there is no way an internet flash game would do this cause of the hard way to create a pattern makes the user click on the exact location of the flash settings buttons ,,,

so all in all it s not that brilliant discovery but thx anyway !!

[JeremyVisser]

@amora27omar I bow down to your clearly superior knowledge. Feross is a fool. Everybody, amora27omar is the new expert in town!

That armchair comfortable, btw?

[ashamrad]

genius attack

[necopost]

Doesn't Noscript blocks this kind of attack?

[markdesign]

I think this vulnerability only works in the older flash player 10.2 and below.

[thewiredrabbit]

Thank you so much, Feross! Sharing on FB, Google+, email! GREAT!

[tigerborn62]

Thank you and thank you for being handsome. :)

[FreeTheFeross]

@tigerborn62 Aw shucks. :) You flatter me.

[biteme2367]

So, what you are saying is that this only affects those using Mac without Chrome?

[2741718]

Does the webcam light go on when the cam is on too?

[Excelsoft]

@2741718 some dont

[tk291100]

nice tip lol

[TheSantoshempire]

hmmmm cool.