Android apps can use your camera without you knowing - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>MobileDevelopment - 移动开发

Android apps can use your camera without you knowing

Android apps can use your camera without you knowing# MobileDevelopment - 移动开发

c*e2014-05-25 07:05

1 楼

一直想问工业界大侠,
在美国找3D artist 的工作容易吗?
Trained in US School?
Degree?
portfolio?
working experience?
Location?
Salary?

z*n2014-05-25 07:05

2 楼

By Russell Holly May. 22, 2014 10:00 am
camera
Clever manipulation of Android’s internal rules for using the camera has
revealed that it is possible for apps to use your camera without ever making
you aware that it’s happening, effectively creating situations where a
malicious app could take pictures or video and send them to a remote source.
Digital security has never been a hotter issue than right now, and mobile
security is at the forefront of that discussion. With smartphones capable of
reporting your precise location while we use apps on potentially insecure
networks that do everything from banking to social networking, your
smartphone and tablet are prime examples of how easy it truly is to trade
secure computing for convenience.
We operate under the belief that the creators of the operating systems and
services are doing their best to make sure our data isn’t out there for
anyone to use, but like everything else when it comes to digital security
there’s no such thing as a 100% guarantee. One research project in
particular has discovered that the camera permissions in Android have the
potential to be exploited.
Szymon Sidor recently published a blog post where it is explained in great
detail how the camera permissions on Android can be manipulated to take
photos without the user seeing what is going on. Ideally, the camera should
only take photos when the viewfinder is present on the screen. After all,
you’re unlikely to ignore the camera app just opening on its own and taking
photos right in front of you. The key to making this work is finding a way
to obscure the camera viewfinder somehow, and after several attempts Sidor
figured out that the size of the display could be manipulated all the way
down to 1px.
On a modern Android phone, 1px on a 1080p display at 440ppi is nothing, and
would be next to impossible to see even if your were looking right at it.
Through this manipulation, he found that the app he built could take photos
and email them off the device with the user staring right at the screen and
never know it was happening.
Like all Android permission manipulations of this nature, there’s plenty of
ways to make sure this doesn’t happen on your phone or tablet. The obvious
things are to make sure you have side-loading off on your phone at all
times, and when you install an app from the Play Store pay attention to the
permissions that the app is asking for. If the app has no need for your
camera, it shouldn’t be asking for permission to use your camera. Android
also has a system log that lets you know what background processes are
currently active, and what apps are asking to use them. This is a lot more
technical, but the end result is the same. If you have a simple app
installed, it shouldn’t be asking for background processes.
Ultimately something like this should be fixed by Google, because there are
no legitimate reasons for an app to have a one pixel viewfinder when using
your camera app. This is the kind of thing that can be fixed with relative
ease now that it has been pointed out.

i*e2014-05-25 07:05

3 楼

entry level很容易. 不过现在经济不好, 可能招人也少了.
主要还是作品, 其他不重要.
CG的大本营还是加州.
工资看你水平.

【在 c********e 的大作中提到】

: 一直想问工业界大侠,
: 在美国找3D artist 的工作容易吗?
: Trained in US School?
: Degree?
: portfolio?
: working experience?
: Location?
: Salary?

A*n2014-05-25 07:05

4 楼

工作难找啊。以前还不时有猎头来电话，现在发出resume,经常连email都没人回一个

J*s2014-05-25 07:05

5 楼

network也挺重要的，有时候公司招人先让熟人推荐，找不到才去网站贴广告

【在 i*******e 的大作中提到】

: entry level很容易. 不过现在经济不好, 可能招人也少了.
: 主要还是作品, 其他不重要.
: CG的大本营还是加州.
: 工资看你水平.

c*j2014-05-25 07:05

6 楼

我觉得不是有时候... 是大部分时间
即使贴了广告也是有内线的优先

【在 J*****s 的大作中提到】

: network也挺重要的，有时候公司招人先让熟人推荐，找不到才去网站贴广告

s*y2014-05-25 07:05

7 楼

手头活细的，就是铁饭碗，degree的没所谓（除办h1b需求除外），除了LA这个大本营
外，NYC马马虎虎，Portland算第二重镇。 salary因“艺”而异啦。

b*n2014-05-25 07:05

8 楼

三番怎么算都比portland多吧

【在 s****y 的大作中提到】

: 手头活细的，就是铁饭碗，degree的没所谓（除办h1b需求除外），除了LA这个大本营
: 外，NYC马马虎虎，Portland算第二重镇。 salary因“艺”而异啦。

s*y2014-05-25 07:05

9 楼

sorry，我应该写CA，最后写成LA了～是，三藩比P多，但P那几家含金量很高啊。

【在 b****n 的大作中提到】

: 三番怎么算都比portland多吧

i*e2014-05-25 07:05

10 楼

Portland, OR?
能推荐几个公司吗?
在东部呆烦了,想去portland

【在 s****y 的大作中提到】

: 手头活细的，就是铁饭碗，degree的没所谓（除办h1b需求除外），除了LA这个大本营
: 外，NYC马马虎虎，Portland算第二重镇。 salary因“艺”而异啦。

s*y2014-05-25 07:05

11 楼

我只把在Portland几家顶尖的列出来了，包括了后期studio和agency，资料不是很全，
有些非常好的local studio我名字不太记得了，所以很抱歉不能提供一份很详细的列表。
Parliament
Nir
Wieden+Kennedy
Sliktricky
Mojo studio
Deepplay
Second story interactive
Gridplane
有哪位比较熟悉OR那边情况的，也劳烦补上，多谢。

【在 i*******e 的大作中提到】

: Portland, OR?
: 能推荐几个公司吗?
: 在东部呆烦了,想去portland

i*e2014-05-25 07:05

12 楼

en. 谢谢。
我去AWN animation industy database search 了一下，还不少。
http://www.aidb.com/index.php?ltype=list&cat=loc&loc3=North+America&loc2=United+States&loc=OR
在美国的可以按照州找：
http://www.aidb.com/index.php?ltype=list&cat=loc&loc3=North%20America&loc2=United%20States

表。

【在 s****y 的大作中提到】

: 我只把在Portland几家顶尖的列出来了，包括了后期studio和agency，资料不是很全，
: 有些非常好的local studio我名字不太记得了，所以很抱歉不能提供一份很详细的列表。
: Parliament
: Nir
: Wieden+Kennedy
: Sliktricky
: Mojo studio
: Deepplay
: Second story interactive
: Gridplane

w*u2014-05-25 07:05

13 楼

湾区的含金量也不低吧

【在 s****y 的大作中提到】

: sorry，我应该写CA，最后写成LA了～是，三藩比P多，但P那几家含金量很高啊。

J*s2014-05-25 07:05

14 楼

Pixar + ILM
含金量不可能更高了吧

【在 w*******u 的大作中提到】

: 湾区的含金量也不低吧

s*y2014-05-25 07:05

15 楼

恩，想了想这两家用含金量来衡量太屈就了，人那是鸡蛋里的导弹，手机中的战斗机，
茶话会里的春晚，大片里的《建国大业》。
近几年对Pixar越来越不感冒，技术玩得兴起把艺术忘家里了。
btw, 这版班主是ILM的？～

【在 J*****s 的大作中提到】

: Pixar + ILM
: 含金量不可能更高了吧

b*n2014-05-25 07:05

16 楼

加PDI

【在 J*****s 的大作中提到】

: Pixar + ILM
: 含金量不可能更高了吧

w*u2014-05-25 07:05

17 楼

还有tippett
另外EA或者索尼那边这种工作也不少吧

【在 b****n 的大作中提到】

: 加PDI

J*n2014-05-25 07:05

18 楼

ding

h*m2014-05-25 07:05

19 楼

mark~~~~~~~~~~~~~~~~~

d*g2014-05-25 07:05

20 楼

前辈是哪个专业的？最近投了几家大公司一点回音也没有。。。

表。

【在 s****y 的大作中提到】

d*g2014-05-25 07:05

21 楼

有说说IL.NY,LA那里游戏公司情况的吗

d*g2014-05-25 07:05

22 楼

很多公司都不sponsor;(

【在 d******g 的大作中提到】

: 有说说IL.NY,LA那里游戏公司情况的吗