1

I could always take DSLR picture of the phone.

I'm curious how does the screenshot prevention work under the hood.

Of course patented, rocket science, secret sauce - surely there are more people are interested in the inner workings of the hack.

1

It's a security theater. It's a way to sell people products based on the appearance of security, without really adding any security.

I'd be really wary about any security claims made by products that touted such security theater. And yes, according to security researcher Quarkslab, the actual security implementation in Confide seems to be severely lacking to the claims made by the app. The encryption, while using the technologies similar to those used for end to end encryption, is effectively broken and doesn't really provide the same security property as a properly implemented end to end encryption.

With that out of the way:

how does the screenshot prevention work under the hood.

They're simply checking for events/conditions that happens to coincide with a screenshot. I'm not familiar with the exact implementation on Confide, but detecting screenshot in iOS, while not straightforward, isn't that difficult. According to chpwn:

How to detect screenshots on iOS (like SnapChat)

The process is pretty simple, and relies on a quirk of iOS: taking a screenshot cancels all touches on the screen. Because of that, anything that you want to protect will require you to have the user to touch the screen to see. If that works for your purposes, the general solution is to simply intercept the touch cancellation, and quickly remove any sensitive information from the screen.

No, Confide wasn't the first to figure out a way to detect screenshot in iOS. I very highly doubt that their patent is worth anything other than marketing talk.

  • Cancelling touches, is it that simple? Or maybe listening to some other events related to pressing the buttons... I’m not likely to use the app, I’d much rather communicate in public as I have absolutely zero trust to my (probably already hacked) devices. – Mars Robertson Jan 15 '18 at 13:15
  • 1
    This was true before 7—no longer the case. iOS only lets you know after the fact. – D_N Dec 12 '18 at 11:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.