cover the light and the camera dies

Meta has turned the recording LED into a safety interlock. The consent of everyone in the room is now enforced by firmware, which means it is also revocable by firmware.

Meta shipped an update on 27 August for the Ray-Ban, Oakley, and Meta AI glasses. If you cover the capture LED while recording, the recording stops.

The gap it closes is small and stupid in the way real security gaps usually are. The previous fix refused to start a recording with the light obscured. So people started the recording with the light visible and then put a thumb, or a sticker, or a bit of electrical tape over it. There were tutorials. Earlier this summer a mandatory update — v26 internally — added hardware tamper detection, because some fraction of buyers had gone further and physically drilled the LED out, and now a damaged LED circuit disables the camera permanently until the glasses are repaired.

Meta says it will keep shipping updates like this so the light can reliably tell bystanders when they are being captured.

Read that as an engineering document rather than a press statement and it says something specific: the LED has been reclassified from an indicator to an interlock.

the guard and the machine

An indicator reports state. An interlock enforces it. A microwave does not merely warn you the door is open; it will not emit with the door open. A press brake will not cycle with the guard swung away. The whole discipline of machine guarding rests on the observation that a warning label is defeated by anyone in a hurry, and that the only guard which survives contact with production is one wired so the machine cannot run without it.

Meta has now built the same relationship between the camera and the light, and gone one step past the microwave: break the interlock badly enough and the machine bricks that function until service. That is not a warning. That is a mechanism that assumes the operator is adversarial, because the last two years established that some meaningful number of them are.

Bruno Latour used to argue that we hand our moral obligations to objects and then stop noticing they are obligations at all. The door-closer does the politeness we could not be trusted to do. The speed bump is not a request to slow down; it is the request converted into suspension damage, and it never gets tired, never makes exceptions, and never has to argue with you. He called the speed bump a sleeping policeman and meant it fairly literally — the rule moved out of the person and into the road surface.

The recording light is that transfer, applied to a norm that has no other enforcement. There is no practical law against filming me on a sidewalk. There is no realistic way for me to detect a camera in a pair of glasses at conversational distance. The single mechanism standing between a bystander and covert capture is a two-millimeter white LED and, as of Thursday, the firmware that refuses to run the sensor without it.

whose protection is it

Here is the part that keeps this from being a straightforwardly good story.

That LED is the only component of the product oriented toward someone who did not buy it. Everything else — the cameras, the mics, the assistant, the battery — serves the wearer. The light serves the person across the table, who has no account, no settings page, no purchase, and no standing. They are the only user of that feature and the only party with no ability to configure it, verify it, or keep it.

Because the protection is firmware, it exists at Meta’s discretion. It arrived in an update and can leave in one. Nobody outside the company can audit whether the interlock is present in the build on the glasses in front of them, and the bystander cannot check the version. The reason the tightening happened is that reporters and hobbyists kept publicly demonstrating the bypass, and the reason it will keep happening is that they keep looking — which makes the actual enforcement mechanism journalism, with firmware as the delivery vehicle.

That is a decent outcome. It is not a durable one. A protection you depend on and cannot inspect is a promise with better latency, not a guarantee.

I would still rather have the interlock than the label. The honest way to describe what happened this week is that a company was pushed, repeatedly and in public, into making its device slightly harder to use against people, and it worked, and the mechanism that made it work has no legal existence at all.


Sources: Engadget ↗ · Android Central ↗ · Cybernews ↗ · Tech Times ↗ · Latour, “Where Are the Missing Masses?” ↗