A major FaceTime bug has been exposed which can allow someone to hear or see the person they are calling — without them actually accepting and picking up the call.
According to a report by 9to5Mac, the bug can be exploited by using the group calling feature in Facetime. Here are the steps to reproduce it:
- Start a Facetime video call with the person you want to snoop on
- As soon as it starts ringing, swipe up from the bottom to bring up the option to add more people to call
- Click on add person and enter your own phone number
- A group call will start with you and will be able to hear the other person, without them ever accepting the call in the first place
It is not limited to audio only, you can also snoop in on the video of the other person if they interact with the phone. A very easy way for them to transmit their video is the press the power button during this whole process. When they do this, you will be able to both hear and see the other person, and all they will be able to see is the option to accept or deny the call.
Here’s a video showing the bug in action:
— Benji Mobb™ (@BmManski) January 28, 2019
This is a huge security flaw and will be a big source of embarrassment for Apple. In a statement released after the bug went viral, Apple said:
“We’re aware of this issue and we have identified a fix that will be released in a software update later this week”
To protect users until a patch is released and the bug is fixed, Apple has halted the group call functionality in FaceTime for all users.