Apple Wins Lawsuit Over Group FaceTime Eavesdropping Bug

Back in January, there was a major FaceTime bug that allowed a person to force a FaceTime connection with another person, providing access to the user's audio and sometimes video even when the ‌FaceTime‌ call was not accepted.

The bug led to a lawsuit from Houston lawyer Larry Williams II, who claimed that the vulnerability allowed an unknown person to listen in on sworn testimony during a client deposition.

groupfacetime
Williams filed his lawsuit in January, just a day after the bug was publicized, and yesterday, a court ruled in Apple's favor and dismissed the case. The court did not find Williams' argument that the ‌FaceTime‌ vulnerability was "unreasonably dangerous" to be valid, nor did the court believe that he provided sufficient evidence to prove that Apple knew of the defect.

Williams's petition does not allege facts about any available alternative design. He fails to allege facts about the iOS 12.1 software as to whether the defect that allegedly allowed a third party to "eavesdrop" on his group FaceTime call was "unreasonable" for the product's ordinary use. Williams's generalized allegation that the iOS 12.1 software was "unreasonably dangerous" and caused him injury falls short of the Rule 8 threshold.

Williams's petition recites the pleading elements, but it does not allege facts that could show Apple's knowledge of the defect or that Apple could reasonably have foreseen that an unknown third party would listen to Williams's group FaceTime call without his permission.

Williams's claim also fails because he did not state facts that could show that Apple's alleged negligent design or manufacture of the iOS 12.1 software proximately caused his injury.

In the lawsuit, Williams had requested unspecified punitive damages for negligence, product liability, misrepresentation, and warranty breach.

The ‌FaceTime‌ eavesdropping bug was perhaps one of the most serious issues that have affected Apple products in recent history.


There was no way to avoid the malicious ‌FaceTime‌ calls, which exploited a Group ‌FaceTime‌ vulnerability. Apple disabled Group FaceTime server side and kept it unavailable until an update could be released to fix the issue.

The vulnerability was officially addressed in iOS 12.1.4, released in February, and Group ‌FaceTime‌ remains unavailable on all versions of iOS 12 released prior to 12.1.4. Full document on Scribd.

Popular Stories

iPhone SE 4 Thumb 1

iPhone SE 4 With Apple's Own 5G Modem 'Confirmed' to Launch in March

Tuesday November 19, 2024 12:12 pm PST by
Barclays analyst Tom O'Malley and his colleagues recently traveled to Asia to meet with various electronics manufacturers and suppliers. In a research note this week, outlining key takeaways from the trip, the analysts said they have "confirmed" that a fourth-generation iPhone SE with an Apple-designed 5G modem is slated to launch towards the end of the first quarter next year. In line with previo...
airtag purple

AirTag 2 Rumored to Launch Next Year With These New Features

Sunday November 17, 2024 5:18 am PST by
Apple released the AirTag in April 2021, so it is now three over and a half years old. While the AirTag has not received any hardware updates since then, a new version of the item tracking accessory is rumored to be in development. Below, we recap rumors about a second-generation AirTag. Timing Apple is aiming to release a new AirTag in mid-2025, according to Bloomberg's Mark Gurman....
Magic Mouse Next to Keyboard

No, Apple CEO Tim Cook Didn't Say He Prefers Logitech's MX Master 3 Over the Magic Mouse

Sunday November 17, 2024 3:03 pm PST by
While the Logitech MX Master 3 is a terrific mouse for the Mac, reports claiming that Apple CEO Tim Cook prefers that mouse over the Magic Mouse are false. The Wall Street Journal last month published an interview with Cook, in which he said he uses every Apple product every day. Soon after, The Verge's Wes Davis attempted to replicate using every Apple product in a single day. During that...
Generic iOS 18 Feature Real Mock

Apple Releases iOS 18.1.1 and iPadOS 18.1.1 With Security Fixes

Tuesday November 19, 2024 10:10 am PST by
Apple today released iOS 18.1.1 and iPadOS 18.1.1, minor updates to the iOS 18 and iPadOS 18 operating systems that debuted earlier in September. iOS 18.1.1 and iPadOS 18.1.1 come three weeks after the launch of iOS 18.1. The new software can be downloaded on eligible iPhones and iPads over-the-air by going to Settings > General > Software Update. Apple has also released iOS 17.7.2 for...
at t turbo indicator iphone 16 pro max v0 8hrh7w5f3w1e1

AT&T Turbo Indicator Showing Up in iPhone Status Bar for Subscribers

Wednesday November 20, 2024 3:42 am PST by
AT&T has begun displaying "Turbo" in the iPhone carrier label for customers subscribed to its premium network prioritization service, according to reports on Reddit. The new indicator seems to have started appearing after users updated to iOS 18.1.1, but that could be just coincidence. Image credit: Reddit user No_Highlight7476 The Turbo feature provides enhanced network performance through ...
iPhone 17 Slim Feature Single Camera 1 Redux

'iPhone 17 Air' Rumored to Surpass iPhone 6 as Thinnest iPhone Ever

Monday November 18, 2024 1:07 pm PST by
In a research note with Hong Kong-based investment bank Haitong today, obtained by MacRumors, Apple analyst Jeff Pu said he agrees with a recent rumor claiming that the so-called "iPhone 17 Air" will be around 6mm thick. "We agreed with the recent chatter of an 6mm thickness ultra-slim design of the iPhone 17 Slim model," he wrote. If that measurement proves to be accurate, there would be ...
bug security vulnerability issue fix larry

Make Sure to Update: iOS 18.1.1 and macOS Sequoia 15.1.1 Fix Actively Exploited Vulnerabilities

Tuesday November 19, 2024 10:52 am PST by
The iOS 18.1.1, iPadOS 18.1.1, and macOS Sequoia 15.1.1 updates that Apple released today address JavaScriptCore and WebKit vulnerabilities that Apple says have been actively exploited on some devices. With the JavaScriptCore vulnerability, processing maliciously crafted web content could lead to arbitrary code execution. The WebKit vulnerability had the same issue with maliciously crafted...

Top Rated Comments

nepalisherpa Avatar
72 months ago
While the bug was nasty, it did not warrant a lawsuit. He was just looking to get rich quick.
Score: 45 Votes (Like | Disagree)
bluespark Avatar
72 months ago
Apple did not "win" the lawsuit. The court dismissed the complaint on a "without prejudice" basis. For non-lawyers, that means that plaintiff's complaint had defects, but he's allowed to correct those defects and re-file.

A "win" would be a dismissal with prejudice. That's not what happened here.
Score: 25 Votes (Like | Disagree)
miniyou64 Avatar
72 months ago
The entire legal system is a joke.
Score: 20 Votes (Like | Disagree)
fmillion Avatar
72 months ago
I have many things I dislike about Apple, but I'm also a software developer and I know from hard experience that even the best testing strategies and the most stringent code reviews cannot catch EVERY bug. I'm in total agreement with this decision.

This is one of the problems with our world today. As soon as something goes wrong, there's a line of people waiting to accuse you of negligence and malice. It's a wonder anyone actually gets ahead in the world today.

Even if someone - a single person or a very small group - within Apple deliberately introduced a bug that could be misused, it's hardly fair to blame the entire corporation. To make a claim like this you'd have to be able to claim that Apple, as a company, deliberately and with full knowledge introduced and pushed a bug that allowed eavesdropping. And you'd also have to be able to say it was Apple's own decision (i.e. not because of government coercion). Even though I disagree with many of Apple's business practices, I can't believe the company would approve that willingly and knowingly.

We need to stop assuming everyone is out to get us, that everyone is deliberately acting against us. Sometimes mistakes are made. Sometimes you have to fix your mistake. But it's not fair to accuse anyone of malice when the fact is that it was just a mistake.

Of course, the problem with our legal system - and with any system for that matter - is that unless someone stupidly admitted in a recording or letter that they were acting maliciously, you cannot prove what was going through anyone's head.
Score: 17 Votes (Like | Disagree)
gnasher729 Avatar
72 months ago
The entire legal system is a joke.
Please explain why you think that. Do you disagree with the judgment?
[doublepost=1557513703][/doublepost]
But Apple DID say "what happens on your iPhone stays on your iPhone" and that's a lie
A phone call obviously doesn't stay on your phone.
Score: 17 Votes (Like | Disagree)
Kaibelf Avatar
72 months ago
Of course.
Jussie Smollett and Laurie Loughlin are also innocent.
And Harvey Weinstein is still a free man.
What are you even talking about? The guy lied and made up some story by trying to stage an eavesdropped deposition AFTER the bug was reported.

Sadly true. Clearly this judge was purchased by Tim Cook. A real judge would have forced Apple to pay up.
I suppose you have evidence to back up your defamatory bribery accusations against the judge and Mr. Cook? Or are you just lying?
Score: 16 Votes (Like | Disagree)