In addition to whether a webcam can be turned on without the indicator light, I was wondering if disabling the device in Windows' device manager is a good option.
Of course when your system is compromised already, it's possible (and probably trivial) for an attacker to turn the device on, and back off when he is done. But just about the theory, is there any way to use the cam without having to enable it first?
Additionally, can hardware management be protected, so that an attacker cannot turn a device on without knowing a password? Or if Windows can't, can Linux or OS X?
Most of this question is hypothetical, but I just wonder. Thanks!