Bug P2
Status Update
Comments
he...@gmail.com <he...@gmail.com> #2
I am not sure I understand the use case. how can the benchmark be code to real world scenario when it's not possible to do right now ? which scenario is it ?
In any case, since this would be for benchmarking, this would clearly not be available through the public DSL. We should find a semi-private way of doing this (maybe the private variant API object could offer that functionality for instance or a property).
Description
Steps to reproduce:
Install WhatsApp on an Android device.
Grant microphone permissions to WhatsApp.
Use WhatsApp to make a call or record a voice message.
Revoke the microphone permissions for WhatsApp in the app settings.
Force stop/close the WhatsApp app.
Check the device's microphone usage in the Live Permission Indicator (green dot) or monitor app activity.
Notice that WhatsApp is still using the microphone even though permissions have been revoked and the app has been closed.
This is a serious security issue as it allows WhatsApp to access the microphone without the user's knowledge or consent. It could potentially be used for malicious purposes such as eavesdropping on conversations or recording audio without the user's permission. I urge the Android Security Team to investigate this issue and work on a fix as soon as possible.
Component used: App info, App Permissions, Live Permission Indicator
Version used: WhatsApp Version 2.23.7.78, Android Version 13, Build No. TQ2A.230405.003.E1