The Flaw Was in When the Check Ran
There is almost no technical sophistication here, which is what makes it instructive: the protection checked whether the indicator was obstructed only at the instant recording started, and never rechecked. So the bypass was the most obvious one available — press record normally, then cover the light. The camera kept running while the only signal telling bystanders "these glasses are filming" disappeared. Himel said the update will increase the reliability of the white LED lights, with the specific behavior being that the camera now stops working if the light is covered during a recording. It is already rolling out to some users. One side effect is worth knowing: ordinary users who brush the LED while adjusting their frames will also interrupt the recording. That is the unavoidable cost of moving the check from once to continuous.
The Second Time in Two Months
This is not isolated. The mandatory update earlier this summer added hardware-level tamper detection: if the LED circuit is physically damaged or destroyed, the camera is permanently disabled until repaired — aimed at people who had drilled the LED component out entirely. Less than two months later, the same class of problem reappeared in a different form. Criticism has focused on that cadence: each fix arrives after someone finds and publicizes the exploit rather than before. Engadget also reported a thriving market in cheap accessories that defeat the recording light without detection — meaning the path closed in software remains open physically.
Beyond Code, Meta Is Also Working on Awareness
The same day, Meta launched a billboard campaign in Los Angeles explaining what the recording light means, on the stated reasoning that not everyone is familiar with the light or knows when someone is recording. That admission exposes the soft spot in the whole design: an indicator light is a protection that depends on bystander recognition, and a lit light nobody understands is not far from a covered one. Meta also says several businesses offering LED-disabling services have shut down, and accounts promoting those modifications have been removed from its platforms. The practical implication for readers is narrow but clear: privacy on this class of device currently rests on a find-it-then-patch-it cycle, with the defense being an indicator that can be physically obstructed. In settings like meeting rooms or clinics, factoring in whether anyone is wearing camera glasses is more reliable than trusting the light.
via: Engadget, 9to5Google, Android Central