←back to thread

369 points zeech | 1 comments | | HN request time: 0.001s | source
Show context
diggernet ◴[] No.43800281[source]
> "Apps were automatically taking screenshots of themselves and sending them to third parties. In one case, the app took video of the screen activity and sent that information to a third party.”

> Out of over 17,000 Android apps examined, more than 9,000 had potential permissions to take screenshots. And a number of apps were found to actively be doing so, taking screenshots and sending them to third-party sources.

Which permission is that, and how do you detect which apps are doing that and stop them?

replies(6): >>43800465 #>>43800497 #>>43800516 #>>43800613 #>>43800669 #>>43808386 #
grishka ◴[] No.43800669[source]
There is a permission to record the screen. It requires user consent and there's an icon in the status bar while it's being used. It's impossible to use this covertly.

What I believe the article is speaking about, is an app taking screenshots of its own windows. This is obviously possible and obviously requires no permissions whatsoever. Just make a screen-sized bitmap and do

    getWindow().getDecorView().draw(new Canvas(bitmap));
It does sound believable that third-party advertising/marketing/tracking SDKs, which many apps are chock full of, could be doing this.
replies(1): >>43800680 #
daveguy ◴[] No.43800680[source]
> It's impossible to use this covertly.

*Unless there's a zero-day that allows it.

replies(2): >>43800692 #>>43800821 #
grishka ◴[] No.43800692[source]
If you're going to exploit a privilege escalation vulnerability from your app, why not just grab the most interesting parts of the /data partition while you're at it?
replies(2): >>43803875 #>>43808233 #
1. daveguy ◴[] No.43803875{3}[source]
Sure why not. I wasn't implying that a zero day that allows surreptitiously recording the phone screen is the only shitty thing that can be done with your phone with a zero day.

Also, it is possible for a zero day to break specific privileges (like screen record without notification) rather than root.