TheSenLive

Uber's app can secretly spy on your iPhone


Apple gave Uber access to a powerful tool that allows the ride-hailing giant to record everything on your iPhone's screen even if the Uber app is only running in the background, security researchers discovered.

It's one of many "entitlements" that allow developers to tap into features of an iPhone or iPad that are normally off limits to most app developers, unless they have been granted special permission by Apple.

According to Uber, it received permission from Apple to use the private entitlement.

While the code may have helped Uber push out an app to hail a vehicle from an Apple Watch, it also could have been used to steal people's passwords and other personal information.

What we do know, though, is that Uber prepared its Watch app within the four-month window and was featured prominently during Apple's March 2015 keynote about the Watch.

Referring to the piece of code, an Uber spokesperson told BuzzFeed that the company is "working with Apple to remove it completely ASAP".

Strafach told Gizmodo that although he looked for indications that the entitlement had been used for malicious purposes, he was unable to find any evidence of such activity.

The existence of Uber's access to special iPhone functions is not disclosed in any consumer-facing information included with Uber's app, despite giving the company direct access to features so powerful that Apple nearly always keeps them off limits to outside companies. "It's not connected to anything else in our current codebase and the diff [sic] to remove it is already being pushed into production", a spokesperson told ZDNet. According to security researchers, Uber's iOS application has the permission to record users' screens, and anything on it including passwords, messages or any other critical information.

"Essentially it gives you full control over the framebuffer, which contains the colors of each pixel of your screen".

Apple expert and jailbreak author Luca Todesco told ZDNet that it was an "extremely risky use case". This may have lead to passwords and other sensitive information getting stolen by a hacker or the brand itself. Apple didn't comment. It wasn't immediately clear how Apple missed to see the potential abuse of the API, and how often does the company treat certain third-party apps differently for its own advantage. Uber was reportedly caught tracking iPhones even after the app was removed from the device.

Given the history of Uber, it would not be wrong to say that the company may have used it to track the frequency at which the customer opens other ride-hailing apps. The special Apple permission uses features found in iOS11.

The finger pointing really needs to be aimed towards Apple - why on earth would they give a company like Uber this much power?

Related Articles

  • Canada Cancels Plans to Build Pipelines

    Canada Cancels Plans to Build Pipelines

    The Honourable Jim Carr, Minister of Natural Resources says in a statement that the decision to pull out was business-related. It was supported by the governments of New Brunswick, Saskatchewan and Alberta, but opposed by Quebec.
    Kate Winslet Joins 'Avatar' Universe With Director James Cameron

    Kate Winslet Joins 'Avatar' Universe With Director James Cameron

    Deadline reports that Cameron offered Winslet the role of Ronal, a new character whose exact nature remains unspecified. Currently, Canadian director James Cameron is working on a potential total of eight movies, virtually simultaneously.
    'Monopoly Man' photobombs former Equifax CEO during hearing on massive data breach

    'Monopoly Man' photobombs former Equifax CEO during hearing on massive data breach

    It's the second appearance of Rich Uncle Pennybags in the Senate in as many days. Monopoly character from the board game for aspiring tycoons.
  • PepsiCo Earnings Beat Estimates

    PepsiCo Earnings Beat Estimates

    Pepsico, Inc . (NYSE: PEP ) is -2.65% below its 200-day moving average, providing a measure of resistance for long positions. Several other hedge funds and other institutional investors also recently made changes to their positions in the company.
    Celebrate Taco Day with $0.50 Mini Tacos

    Celebrate Taco Day with $0.50 Mini Tacos

    How much do you spend on tacos compared to everyone else? $1 tacos at the 1517 Westheimer Road restaurant. Guests that sign up for Del Taco's Raving Fan EClub are also eligible to receive two free chick tacos.
    New trial denied for Steven Avery

    New trial denied for Steven Avery

    The court later determined he should remain in prison while Wisconsin appeals the overturning of his conviction. The case was the focus of Netflix's 2015 documentary which spawned conjecture about the pair's innocence.
  • Google Teams With Nest To Make Your Smart Home More Dynamic

    Google Teams With Nest To Make Your Smart Home More Dynamic

    In other, smaller yet convenient upgrades, the Google Assistant can now play well with Spotify voice commands. Now, Google Home multi-user support is now rolling out to all countries on which the Home is being sold in.
    Las Vegas shooting suspect's father was once one of FBI's Most Wanted

    Las Vegas shooting suspect's father was once one of FBI's Most Wanted

    Cazes did sell the bump stocks four years ago, but doesn't carry them in his store anymore. Regardless of who's trying to buy - the governor of Washington wants it off the market.
    Would you want to live in the City of Amazon, Ga.?

    Would you want to live in the City of Amazon, Ga.?

    Amazon then sent replacements, which were sold to someone else involved in the criminal scheme. Amazon , Georgia , could become a reality.
  • Sen. Gillibrand blasts Congress after Las Vegas shooting

    Sen. Gillibrand blasts Congress after Las Vegas shooting

    But Trump, asked Tuesday whether Las Vegas would prompt him to embrace gun control, instead praised police for their response. House Democrats have asked Ryan for a bipartisan committee to study ways to reduce gun violence, but have been told no.

    HUGE WWE Hell In A Cell 2017 Predictions You Need To Know

    During the segment, Owens was cutting a promo in the ring while McMahon was walking through the crowd to get back to ringside. The Phenomenal One then promised that short cuts won't win Corbin the United States Championship at Hell in a Cell .
    Walmart Acquires Parcel To Test Same-Day Delivery In NYC

    Walmart Acquires Parcel To Test Same-Day Delivery In NYC

    The move also means Walmart has finally found a home in NY , where it's been blocked in its efforts to open stores for years. Parcel's seven full-time employees and 45 to 50 part-time workers will join the Walmart team, Kaplan told CNN Tech.

Comments