If you care about security you might want to move the iPhone Camera app

2025-12-2818:28260163blog.jgc.org

There's a quirk in the iPhone Camera app that can drive a security conscious iPhone owner crazy: if you hover your finger over the Camera ap...

There's a quirk in the iPhone Camera app that can drive a security conscious iPhone owner crazy: if you hover your finger over the Camera app icon without actually opening the app, the camera starts operating. That causes the little green dot indicator on the iPhone to turn on and then after a few seconds disappear. This can easily make a security-conscious iPhone user worry that some app is nefariously using the camera.

Because hovering a finger on the Camera app icon is enough, it's easy to activate the green dot while swiping between screens or even just holding your phone. This was driving me nuts and I thought some app was using the camera when I didn't want it to.


I enabled Apple's App Privacy Report (under Privacy and Security) in Settings and, sure enough, it confirmed that the little green dot was happening because the camera was being used by the Camera app. Merely swiping while accidentally touching the Camera app's icon was enough to add an entry in the App Privacy Report.

The solution was moving Camera app away from where I was liable to brush it with my fingers or thumb. That reduced the errant green dots to almost zero and reassured me that nothing untoward was happening.
One of the big problems in security is people get used to odd behaviour they can't explain and end up overlooking a real problem masked be the things that "always happen". The accidental green dots could have been hiding actual nefarious use of the camera. Better to be tidy and eliminate the false positives.

Read the original article

Comments

  • By mabedan 2026-01-0119:597 reply

    Quite sure it's done in order to speed up the camera app performance and reduce the time to first photo time. The camera module requires some tenths of a second to boot up and it makes sense to start that process at the earliest indication of user's interaction. In this case, a touch-down is a good indication, even if user ends up swiping instead of touch-up. The same thing happens in the lock screen, if you hold your finger on the lock screen and move 1 pixel to the left, the camera module starts up even if you don't finish your swipe to camera gesture.

    • By dgoldstein0 2026-01-029:23

      Wouldn't surprise me either. I know a guy who worked at Apple on iOS perf and the one time he was telling me about it years ago, it was "camera app doesn't start fast enough, so we reworked memory management". Apple really cares about the camera.

    • By gregoriol 2026-01-0210:472 reply

      We should sue Apple for this: their Camera app gets an unfair advantage here compared to third-party camera apps.

      • By isodev 2026-01-0212:23

        Yup, all the gimmicks I have to do in my app to distract users from the camera loading...

      • By rangestransform 2026-01-0216:111 reply

        No thanks, the time from locked to first capture is already too long on my 15 pro

        • By Nevermark 2026-01-0219:24

          The point of the suit would be for the camera to operate faster in all apps.

    • By jgrahamc 2026-01-0121:58

      Yeah, makes total sense why they'd do it, but in my case it was increasing "alert fatigue" (why is my camera on?) and so I moved it.

    • By dfgfddfg 2026-01-029:002 reply

      I bet this is in the new version 26. That version is so garbage and I regret updating. 95% of the time, when I open the phone, it doesnt unlock my phone with face and I have to enter PIN. Sometimes I cant take photos also. In the browser, when I touch the address field nothing happens and I can go on and on and on. Just leave the shit as is, people. Its like if I have a screwdriver in my workshot and every other month, when I come back to use it, you change some bullshit, so I have to operate it slightly different. Fuck that

      • By reddalo 2026-01-0210:20

        No, I confirm that this camera behavior also happens on iOS 16. But I agree that iOS and macOS 26 are the worst thing Apple made in a long time.

      • By t0mas88 2026-01-0318:43

        Also happens on iOS 18

    • By andai 2026-01-0212:203 reply

      I think ChatGPT has a similar feature. I was amazed how the reply starts coming in literally the moment I press enter. As far as I can tell that is only possible if all the previous tokens I submitted have already been processed. So when I actually submit the message, it only needs to update the inner state by one more token.

      i.e. I think it's sending my message to the server continuously, and updating the GPU state with each token (chunk of text) that comes in.

      Or maybe their set up is just that good and doesn't actually need any tricks or optimizations? Either way that's very impressive.

      • By port3000 2026-01-0212:36

        The 'flash' / no or low-thinking versions of those models are crazy fast. We often receive full response (not just first token) in less than 1 second via API.

      • By ibaikov 2026-01-0317:49

        Support systems often do this - they stream message and agents already see what you are typing. I know a few banking apps that do this.

      • By altbdoor 2026-01-030:48

        > I think it's sending my message to the server continuously

        It is, at least I see it for the first message when starting a new chat. If you open the network tools and type, you can see the text being sent to the servers on every character.

        Source, from spending too much time analysing the network calls in ChatGPT to keep using mini models in a free account.

    • By throwawaymobule 2026-01-0213:26

      IIRC, apple has a patent from years ago for keeping a camera module in a semi-active mode when the phone isn't entirely idle to make starting it faster.

    • By bongripper 2026-01-020:07

      [dead]

  • By jmward01 2026-01-027:117 reply

    I'm at the point where I want a pop-up for every time my phone wants to use location/camera/mic/contacts. Or at least more options to require this for individual system services/apps.

    Also, while we are at it, why can't I disable network access entirely for some apps? If I have a game that doesn't need the internet then it doesn't need the internet and I don't want it to have access to the internet, ever. I have been putting my phone in airplane mode just to use some of the apps and not have them phone home. This is a clearly missing (intentionally not added?) privacy feature.

    • By gyomu 2026-01-027:162 reply

      > why can't I disable network access entirely for some apps

      Agreed, the only reason we don’t have a streamlined version of Little Snitch (very flexible network monitor) built in to the OS is that it’d destroy billions of revenue for the advertising industry.

      • By lostlogin 2026-01-029:023 reply

        > it’d destroy billions of revenue for the advertising industry.

        Excellent.

        What hidden consequences am I missing? I don’t see a downside.

        I spent too much time fortifying devices and blocking their shit from getting in.

        • By luplex 2026-01-029:101 reply

          you're missing the fact that OS developers like ads, because they want the OS to be a platform where devs can make money.

          • By lostlogin 2026-01-029:16

            I avoid ad supported apps, so if those devs move to companies that I support, it might actually help me?

            If it damages the the OS, that’s a problem for me on a Mac/ios but not so much with Ubuntu.

            It’s not that long ago that I was paying for OS updates (that seems wild, I had to go and check). If it went back to that and I had no ads, it would be a straight win.

        • By why-o-why 2026-01-0217:41

          About 5 years ago I purged as many apps as I could. I still have some I need for my job, especially on my work-issued iPhone, but excluding those apps I have exactly 5 apps on my phone. Everything has a website.

          I've heard that native apps are more secure than webapps, but in my experience Firefox is a more reliable steward of security, and App permissions are too obscure to really understand: it is harder to make a malicious webapp than it is to make a malicious native app. Is that a fair statement?

        • By gyomu 2026-01-029:28

          > I don’t see a downside.

          You don't, Apple does :)

      • By j16sdiz 2026-01-0210:551 reply

        The same API needed for Little Snitch can be used for surveillance. See Facebook/Onavo.

        • By kuekacang 2026-01-0211:51

          I'm sure no API and only built-in control is more favorable. Digressing, built-in mixer is nice to have too.

    • By ulrikrasmussen 2026-01-0210:251 reply

      > Also, while we are at it, why can't I disable network access entirely for some apps?

      This is possible in GrapheneOS and is super nice. I use a keyboard app that I like but disable network access to ensure that it doesn't send private data anywhere.

      • By jech 2026-01-0213:161 reply

        It's also possible in LineageOS and its derivatives.

        But it's not very useful in practice: if an application doesn't need networking for its core functionality, then there usually is an open-source equivalent that does not use the network in the first place. The few applications that lack a good open-source equivalent (public transportation, proprietary messaging protocols, banking) don't do anything useful without network access.

        • By upboundspiral 2026-01-0213:351 reply

          Being able to block network access gives me peace of mind regardless if the app is proprietary or open source. Humans are fallible and life can get in the way (maybe the app has old dependecies with vulnerabilities, or any other random thing that I don't want). Being able to set the permissions I want only has upsides.

          • By jech 2026-01-0222:272 reply

            Oh, fully agreed.

            What would be more useful, however, would be the ability to selectively block network connections: for example, to allow the public transportation app to access its API endpoint, but not the advertising and tracking endpoints. I don't think LineageOS allows that, and I don't know if Graphene does.

            • By rchaud 2026-01-031:37

              You can do that on websites with Firefox and UBO. Unfortunately not many transit authorities consider the website as a firsr class citizen anymore.

            • By upboundspiral 2026-01-051:53

              Sounds like you want dns that blocks advertsing endpoints. Something like pihole or some other service.

    • By walterbell 2026-01-028:331 reply

      > disable network access entirely for some apps

      NetGuard can do this via "local VPN" on GrapheneOS/Android, https://netguard.me/

      iOS Lockdown app provides device-wide adblock by destination host, but not per-app outbound rules.

    • By xuki 2026-01-0210:53

      > why can't I disable network access entirely for some apps

      Apple kind of do this in China. Each app on Chinese iPhone needs to ask for permission when they access WiFi for the first time. Combine with cellular blocking, you can effectively block internet access for an app.

    • By lostlogin 2026-01-029:04

      > I'm at the point where I want a pop-up for every time my phone wants to use

      I’m in the EU on holiday. It’s amazing how quickly you get used to the damn cookie popup that appears on every single site. Having it for apps wouldn’t seem likely to be more intrusive.

    • By why-o-why 2026-01-0217:38

      FWIW: Me too. I want 100% transparency and I have no problem clicking a dialog every single time. My credit card company sends me a lot of alerts and I have no issue spending 5 seconds skimming an email if it means not getting scammed.

  • By pirates 2025-12-2822:243 reply

    > if you hover your finger over the Camera app icon without actually opening the app, the camera starts operating iOS 18.3, cannot recreate this. If I long-press the icon then yeah obviously it triggers, but just “hovering” does nothing for me. In addition, if I put my finger on the camera app icon and then swipe pages it doesn’t trigger the dot either. Is this a new thing in 26.x?

    Edit: actually there is a timing sweet spot on the swiping that I can get to do it, but still nothing with just pure hovering

    • By arachnid92 2025-12-291:254 reply

      I couldn’t get it to trigger until I opened the camera app and made sure to switch to the front facing camera before exiting. After doing that I was able to consistently trigger the indicator when swiping across and long-pressing the icon.

      EDIT: it also only seems to happen if the camera icon is on one of your Home Screen pages. I haven’t been able to reproduce the behavior when swiping across the icon while in the App Library. Wonder why they decided to do it that way? Do most people keep a camera icon on their Home Screen? That would be baffling to me. Why clutter your Home Screen when you can so easily access the camera from the lock screen or by using the physical camera button on newer iPhones?

      • By BugsJustFindMe 2025-12-2915:325 reply

        > Why clutter your Home Screen when you can so easily access the camera from the lock screen

        Half the time since updating to iOS 26 on my 13 mini, if I try to activate the camera from the lock screen the app opens but the camera fails to start and the view just stays black, and then I have to exit and try again. It's quite annoying. This does not happen with the camera app after unlocking the phone.

        • By DHPersonal 2025-12-2918:011 reply

          Do you also have the slow-motion bug where every second or so a frame or two gets dropped, resulting in stutters in the video?

          • By BugsJustFindMe 2025-12-2919:101 reply

            Hmm, I don't think so, but I do get the awful indoor lighting flicker when shooting slow-mo at 240fps that completely ruins indoor videos, and it really seems like Apple could just fix that if they cared at all.

            • By snailmailman 2026-01-0119:412 reply

              I’m pretty sure that’s because the lights are actually flickering. The lights are the issue not the camera.

              Rooms with these lights give me migraines. I can always tell when lights in a room are like that, and I use the 240hz slow motion on my phone to double check or figure out which specific lights are the issue.

              I hate these lights and I don’t understand why places use them.

              • By BugsJustFindMe 2026-01-022:27

                > I’m pretty sure that’s because the lights are actually flickering.

                I didn't say it wasn't. I said I bet that Apple, the company that can zero-shot high resolution synthetic 3D views from flat photos, could make the flicker not show in the video if they tried so that slow motion videos shot indoors aren't completely ruined by AC flicker.

              • By swiftcoder 2026-01-0120:482 reply

                > I’m pretty sure that’s because the lights are actually flickering

                They are, but the camera stack should be detecting and compensating for that - it's pretty easy to detect, since it should be a fixed 50/60Hz depending on geographic location. You typically have to implement this filtering on all manner of light sensors.

                • By dagmx 2026-01-022:06

                  It’s not just about matching the frequency but also the phase.

                  This is easier when your lights are all in phase and also in a single frequency, but you might also have bulbs that are at different frequencies (120 vs 60) or electric hookups that go out of phase.

                  It’s a very tricky problem to solve and to the best of my knowledge, nobody truly has. Film lights do clever and expensive tricks to match phase but that’s not feasible in a domestic setup.

                • By withinboredom 2026-01-0121:081 reply

                  Um. 240 is a multiple of 60.

                  • By isoprophlex 2026-01-0212:151 reply

                    Yes, so you either get a strobe on/strobe off every two frames if you're in 60 Hz country, or a slower crawling flicker in 50 Hz land. Migraine-inducing either way. Also, your phone won't shutter at exactly 60.00/50.00 Hz (mains freq. is pretty stable, usually stable to at least the first decimal) so you'll see a jittered, jumpy phase drift on top of that.

                    • By swiftcoder 2026-01-0214:04

                      Yep, and this breaks all sorts of computer vision setups. We had to compensate for it on the cameras that track the Oculus controllers, since folks are often playing under indoor lighting

        • By saagarjha 2026-01-024:271 reply

          Mine does this too. I wonder if it’s exclusively an iPhone 13 mini thing because I don’t understand how it shipped.

          • By niij 2026-01-025:10

            There are so many bugs in iOS 26 I've personally experienced. I'd believe anything at this point.

            I keep opening my phone "favorites" section and it erroneously reports no favorites. They either eventually load after seconds+ or I have to force close to get them to show.

        • By SoftTalker 2026-01-021:311 reply

          In don't understand accessing anything from the lock screen. It's locked, nothing should operate.

          • By azinman2 2026-01-023:232 reply

            It’s a special mode called secure access. You cannot actually access any existing data from it; but taking camera photos is a primary action that people use their phones for. Why wouldn’t you want to accelerate that?

            • By SoftTalker 2026-01-0218:16

              I suppose. I rarely take photos with my phone. It's really one of the least used features of the device for me. When I activate the camera from the lock screen it's always unintentional and it's an annoyance. It would be nice to at least have the option to disable that.

              Edit: I discovered that in iOS 26 you can disable the "swipe" activation of the camera on the lock screen. I've done that and it should remove one of my major annoyances with the phone.

            • By gruez 2026-01-024:44

              Not to mention with this feature, I don't have to hand an unlocked phone to a stranger if I want a photo taken.

        • By drawfloat 2026-01-0320:51

          I have this in iOS 16 so it’s not new (and not fixed it sounds like) sadly.

        • By ComputerGuru 2026-01-025:56

          iPhone 13 regular here, same problem. I reported it repeatedly during the iOS 26 betas but they don’t give a damn.

      • By supermatt 2025-12-297:502 reply

        > Why clutter your Home Screen when you can so easily access the camera from the lock screen

        Because if using the phone then you need to access the lock screen to use the camera?

        That means hitting the power button twice (slowly so you don’t trigger the wallet) and then a long press on the camera.

        Alternatively it’s just a swipe and a tap if it’s on the home screen.

        • By arachnid92 2025-12-298:191 reply

          Fair enough, but then I can think of an even better place to put the icon: the control center that is a single swipe away from any screen in the OS. This is all moot in newer iPhones tho, as the physical camera button in the lower right is the easiest and fastest way to get to the camera.

          Anyhow, this is all just personal preference, of course. Anyone is free to put a camera icon anywhere they please. I just personally can’t stand clutter in my home or lock screens, so I tend to keep the number of apps there to a minimum and access everything else either via Spotlight or Control Center widgets.

          • By supermatt 2025-12-298:33

            Yeah, control centre also works, but that requires using 2 hands to do comfortably.

        • By fnoff 2025-12-2912:181 reply

          I swipe down to see the notifications/lock screen, then right to access the camera.

          • By supermatt 2025-12-2914:53

            sure, but with typical one-handed operation you cant reach the top of the screen to swipe down.

      • By snorbleck 2026-01-0123:20

        > Do most people keep a camera icon on their Home Screen? That would be baffling to me.

        probably. it is a TikTok world after all. or, pretty sure it's on the home screen by default and no one probably bothers to move it.

      • By kgen 2026-01-0121:27

        Because it's on the homescreen in the default layout and a large number of people don't change their defaults?

    • By crazygringo 2026-01-0315:32

      "Hover" doesn't exist on touchscreen devices, in the physical sense of holding your finger above the screen without touching.

      It only exists with a pointer, when you're using some kind of mouse or trackpad.

      So it's ambiguous and confusing language. They should have said "when you hold your finger down on".

    • By myrandomcomment 2025-12-2823:57

      No issue making this happen on IOS 26. Camera was lower left icon exactly where I touch go swipe, holding phone in left hand.Put finger down and swiped, green light on. Moved it to the right side.

HackerNews