in

Firefox on Android: Camera remains active when phone is locked or the user switches apps

special feature

Securing Your Mobile Enterprise

Mobile devices continue their march toward becoming powerful productivity machines. But they are also major security risks if they aren’t managed properly. We look at the latest wisdom and best practices for securing the mobile workforce.

Read More

Mozilla says it’s working on fixing a bug in Firefox for Android that keeps the smartphone camera active even after users have moved the browser in the background or the phone screen was locked.

A Mozilla spokesperson told ZDNet in an email this week that a fix is expected for later this year in October.

The bug was first spotted and reported to Mozilla a year ago, in July 2019, by an employee of video delivery platform Appear TV.

The bug manifests when users chose to video stream from a website loaded in Firefox instead of a native app.

Mobile users often choose to stream from a mobile browser for privacy reasons, such as not wanting to install an intrusive app and grant it unfettered access to their smartphone’s data. Mobile browsers are better because they prevent websites from accessing smartphone data, keeping their data collection to a minimum.

The Appear TV developer noticed that Firefox video streams kept going, even in situations when they should have normally stopped.

While this raises issues with streams continuing to consume the user’s bandwidth, the bug was also deemed a major privacy issue as Firefox would continue to stream from the user’s device in situations where the user expected privacy by switching to another app or locking the device.

“As is the case with dedicated conferencing apps, we provide a system notification that lets people know when a website within Firefox is accessing the camera or microphone, but recognize that we can do better, especially since this gets hidden when the screen is locked,” a Mozilla spokesperson told ZDNet this week when asked about the root cause of the bug.

“This bug [fix] aims to address this by defaulting to audio-only when the screen is locked,” Mozilla said. “[The fix] is scheduled for release at the platform-level this October, and for consumers shortly after.”

“Meanwhile, our next-generation browser for Android, now available for testing as Firefox Nightly, already has a prominent notification for when sites access this hardware as well,” Mozilla added.

Firefox Nightly, also codenamed Fenix, is expected to replace the current Firefox for Android version when it exists its development stage. Mozilla devs focused Fenix development on privacy features.


Source: Information Technologies - zdnet.com

Report: CIA most likely behind APT34 and FSB hacks and data dumps

US imposes visa restrictions on Huawei employees, other Chinese tech workers