Uber's iOS app allowed it to copy iPhone screen, says report
Apple allowed ride-hailing service Uber to use a tool that could record a user’s iPhone screen, security researchers alleged.
According to a report in Gizmodo late on Thursday (October 5), researchers said Apple allowed Uber's iOS app to copy the phone screen to improve functionality between the app and Apple Watch.
Uber said the tool was no longer in use after researchers discovered the tool, and added it will be removed from the app.
"It looks like no other third-party developer has been able to get Apple to grant them a private sensitive entitlement of this nature," Will Strafach, a security researcher and CEO of Sudo Security Group, was quoted as saying.
The concern is that Uber, or a hacker breaking into its network, could monitor activity on an iPhone user's screen, stealing passwords and other personal information.
"Entitlement" is a code that app developers can use for anything from setting up push notifications to interacting with Apple systems like iCloud or Apple Pay.
"The 'entitlement' isn't common and would require Apple's explicit permission to use," the researchers were quoted as saying.
Apple is yet to respond to this.
The "entitlement" first appeared in Uber's app when Apple Watch was launched in 2015.
Earlier this year, media reports said former Uber CEO Travis Kalanick tried to flout the rules laid by Apple on the App Store.
According to a report in The New York Times, Apple CEO Tim Cook convened a meeting with Kalanick in 2015 when he found Uber was directing employees to help camouflage the ride-hailing app from Apple's engineers.
The reason was to keep Apple from finding out that Uber had been secretly identifying and tagging iPhones even after the app was deleted and the devices erased -- a fraud detection manoeuvre that violated Apple's privacy guidelines.
"So, I've heard you've been breaking some of our rules. Stop the trickery or Uber's app would be kicked out of Apple's App Store," Cook had reportedly warned Kalanick during the meeting.