Are You Really Muted?: A Privacy Analysis of Mute Buttons in Video Conferencing Apps

04/13/2022
by   Yucheng Yang, et al.
0

Video conferencing apps (VCAs) make it possible for previously private spaces – bedrooms, living rooms, and kitchens – into semi-public extensions of the office. For the most part, users have accepted these apps in their personal space without much thought about the permission models that govern the use of their private data during meetings. While access to a device's video camera is carefully controlled, little has been done to ensure the same level of privacy for accessing the microphone. In this work, we ask the question: what happens to the microphone data when a user clicks the mute button in a VCA? We first conduct a user study to analyze users' understanding of the permission model of the mute button. Then, using runtime binary analysis tools, we trace raw audio flow in many popular VCAs as it traverses the app from the audio driver to the network. We find fragmented policies for dealing with microphone data among VCAs – some continuously monitor the microphone input during mute, and others do so periodically. One app transmits statistics of the audio to its telemetry servers while the app is muted. Using network traffic that we intercept en route to the telemetry server, we implement a proof-of-concept background activity classifier and demonstrate the feasibility of inferring the ongoing background activity during a meeting – cooking, cleaning, typing, etc. We achieved 81.9 using intercepted outgoing telemetry packets when a user is muted.

READ FULL TEXT
research
10/26/2022

Annotating Privacy Policies in the Sharing Economy

Applications (apps) of the Digital Sharing Economy (DSE), such as Uber, ...
research
07/27/2017

Mining Device-Specific Apps Usage Patterns from Large-Scale Android Users

When smartphones, applications (a.k.a, apps), and app stores have been w...
research
12/16/2019

AppStreamer: Reducing Storage Requirements of Mobile Games through Predictive Streaming

Storage has become a constrained resource on smartphones. Gaming is a po...
research
06/09/2021

Auditing Network Traffic and Privacy Policies in Oculus VR

Virtual reality (VR) is an emerging technology that enables new applicat...
research
04/13/2021

The AppChk Crowd-Sourcing Platform: Which third parties are iOS apps talking to?

In this paper we present a platform which is usable by novice users with...
research
11/20/2019

Privacy-Preserving Payment Splitting

Widely used payment splitting apps allow members of a group to keep trac...
research
10/18/2022

Comparison of Popular Video Conferencing Apps Using Client-side Measurements on Different Backhaul Networks

Video conferencing platforms have been appropriated during the COVID-19 ...

Please sign up or login with your details

Forgot password? Click here to reset