蘋(píng)果Facetime應(yīng)用有竊聽(tīng)漏洞

A newly discovered bug in Apple's FaceTime softwarelets Apple users listen in on the people they arecalling, and even see through their front-facingcamera, without them picking-up the call.

新發(fā)現(xiàn)的蘋(píng)果手機(jī)FaceTime軟件(蘋(píng)果手機(jī)內(nèi)置的一款視頻通話(huà)軟件)漏洞使蘋(píng)果用戶(hù)可以竊聽(tīng)他們所呼叫之人，甚至在他們沒(méi)有接電話(huà)的情況下，通過(guò)他們手機(jī)的前置攝像頭看到他們。

The bug was quickly recreated by people acrosssocial media. CNN confirmed the bug multipletimes in its own tests.

人們迅速地在社交媒體上重新了這一漏洞。美國(guó)有線(xiàn)電視新聞網(wǎng)(CNN)通過(guò)多次測(cè)試證實(shí)了這一漏洞。

Apple said in a statement Monday night that it has identified a fix for the problem and willrelease it in a software update later this week. In the meantime, Apple's website indicatesGroup FaceTime is unavailable, and the company confirmed it has started disabling theGroup FaceTime feature for all users.

周一晚上蘋(píng)果公司在一份聲明中表示，該公司已經(jīng)找到解決這一問(wèn)題的辦法，并將于本周晚些時(shí)候發(fā)布軟件更新。與此同時(shí)，蘋(píng)果公司表示，群聊版FaceTime已經(jīng)無(wú)法使用，該公司證實(shí)它已開(kāi)始禁用所有用戶(hù)的FaceTime群聊功能。

The bug works on iPhones and iPads running iOS 12.1, and Apple PCs running macOS Mojave, which have the recently added Group FaceTime feature.

使用iOS 12.1操作系統(tǒng)的蘋(píng)果手機(jī)和蘋(píng)果平板電腦以及使用macOS Mojave操作系統(tǒng)的蘋(píng)果電腦都存在這一漏洞，最近蘋(píng)果公司為這些設(shè)備開(kāi)啟了FaceTime群聊功能。

When the bug is activated, the person who initiated the call is able to hear the live audio on theother person's phone, even though the recipient has not accepted the call. And their screengives no indication that their conversation is being transmitted. In some cases, the bug canalso show live video of the other person if they press a volume button to dismiss the call.

當(dāng)蘋(píng)果手機(jī)的這個(gè)漏洞被觸發(fā)，發(fā)起呼叫的一方則能夠聽(tīng)到被呼叫一方的現(xiàn)場(chǎng)音頻，即使被呼叫方?jīng)]有接電話(huà)。而且，他們的手機(jī)屏幕并不會(huì)顯示他們的對(duì)話(huà)正在被直播。在某些情況下，如果被呼叫方按下音量鍵來(lái)拒接電話(huà)，該漏洞還可以直播視頻。

CNN editor Brian Ries successfully used it on friends, family members and a colleague, and inone instance was even able to see video of the people he was calling.

CNN編輯布萊恩·里斯成功地利用該漏洞偷聽(tīng)了朋友、家人和一位同事的電話(huà)，有一次甚至還能夠看到被呼叫方的實(shí)時(shí)視頻。

 

 

To avoid falling victim to the bug, please disable FaceTime on all your devices until Apple'ssoftware updates have been released.

為了避免成為這一漏洞的受害者，在蘋(píng)果手機(jī)發(fā)布軟件更新之前，請(qǐng)禁用你所有設(shè)備上的FaceTime功能。