Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

SaturnsLament

macrumors newbie
Original poster
Nov 14, 2023
7
0
Hello:

I've posted this question and two other places, one of which being Apple Support Discussions forum, and so far no one seems to know what's going on here. I've decided to see whether you all have a guess. I have debated whether this is an iOS or macOS issue, because technically it's the former. But because macOS software is reporting the activations, I leaned on macOS relevance. You should know I am operating macOS Sonoma v. 14.2, which is still in public beta. I am going to report this in the feedback app, in case its just an issue with the beta version of the software.

Below is a log from Micro Snitch, an Objective Development app that monitors and logs FaceTime and iPhone camera activations. This is a small portion of the log, which extends back days and days and days. As you can see, every couple of minutes, Micro Snitch is reporting that my iPhone camera, microphone, and desk view cameras are being activated. Some activations are occurring for as long as twelve minutes, and some are far more brief. All activations occurred while the iPhone is not connected by wire to my MacBook Pro, on which Micro Snitch is installed.

To be clear, I do not use FaceTime, and I have Continuity Camera turned off (as a security risk--and potentially institutionalized malware). There is no option to disable 'desk view camera,' that I can find, in either iOS or macOS, and since my iPhone is not tethered to my MacBook, desk view should not be an issue at all.

I currently have the flu, so each activation in the log below occurred while I was asleep and both devices were asleep. When my MacBook Pro is asleep, it makes loud knocking sounds every couple of minutes, trying to push through notifications that the cameras and microphone have been activated.

The question is: why?


Nov 14, 2023 at 12:33:57 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:33:57 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:33:58 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:33:58 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:33:58 PM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:34:20 PM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:34:20 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:34:20 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:34:21 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:34:21 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:34:21 PM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:35:55 PM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:35:55 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:35:55 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:35:56 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:35:56 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:35:56 PM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:36:35 PM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:36:35 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:36:35 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:36:36 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:36:36 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:36:36 PM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:36:56 PM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:36:56 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:36:56 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:39:28 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:39:28 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:39:28 PM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:40:30 PM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:40:30 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:40:30 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:40:31 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:40:31 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:40:31 PM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:41:52 PM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 12:41:52 PM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:41:52 PM: Video Device disconnected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:56:43 PM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 12:56:43 PM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 12:56:43 PM: Audio Device connected: J.J.’s iPhone Microphone


Example of longer-duration activations:


Nov 14, 2023 at 11:10:25 AM: Video Device connected: J.J.’s iPhone Desk View Camera

Nov 14, 2023 at 11:10:25 AM: Video Device connected: J.J.’s iPhone Camera

Nov 14, 2023 at 11:10:25 AM: Audio Device connected: J.J.’s iPhone Microphone

Nov 14, 2023 at 11:27:40 AM: Audio Device disconnected: J.J.’s iPhone Microphone

Nov 14, 2023 at 11:27:40 AM: Video Device disconnected: J.J.’s iPhone Camera

Nov 14, 2023 at 11:27:40 AM: Video Device disconnected: J.J.’s iPhone Desk View Camera


Again, I was asleep at all times reported--as were my devices. The one other thing that I've noticed is that when spinning up a VM in Parallels Desktop 19, my computer also reports that the FaceTime camera and microphone are activated, which I find odd. If it's a security feature, I'd suspect you'd be able to find logs of captured photos. But then, microphone recordings as well? I am going to ask Parallels, but I suspect all these issues may be connected.

One comment, I have tried to catch an actual indication that the iPhone microphone or cameras are indeed activated. By the time I open the phone, there are no indicators. That may be because there are no true activations or because some of the activations occur for seconds.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.