iOS 18.6 Privacy Breach: Apple’s Sneaky TCC Access Exposed!
Discovering undocumented TCC access in iOS 18.6, Joseph Goydish II uncovers a silent system feature that grants access to critical privacy domains like Contacts, Camera, and FaceID without user interaction. It’s like finding out your fridge has been secretly eating your snacks—unsettling and leaving you questioning the privacy guarantees of your iPhone.
Hot Take:
*Oh Apple, you sneaky fruit! While we were busy admiring the new shades of the iPhone, you were off playing hide and seek with our privacy settings. It seems like iOS 18.6 comes with an invisible friend named ‘preflight=yes’ who can see our contacts, listen to what we say, and even take a peek through the camera lens—all without asking for permission. Looks like Apple’s ‘there’s an app for that’ just got an upgrade to ‘there’s an invisible daemon for that’!*
Key Points:
- iOS 18.6 allows undocumented access to multiple privacy domains via ‘preflight=yes’.
- Access happens without user interaction or permission prompts.
- Services affected include Contacts, Camera, Microphone, FaceID, and more.
- Access is not visible in Privacy Settings and involves internal Apple daemons.
- Potential violation of privacy regulations like GDPR/CCPA.