{"id":51291,"date":"2026-03-18T15:32:12","date_gmt":"2026-03-18T19:32:12","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=51291"},"modified":"2026-03-30T13:26:02","modified_gmt":"2026-03-30T17:26:02","slug":"the-secure-design-of-the-macbook-neos-on-screen-camera-indicator","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2026\/03\/18\/the-secure-design-of-the-macbook-neos-on-screen-camera-indicator\/","title":{"rendered":"The Secure Design of the MacBook Neo&rsquo;s On-Screen Camera Indicator"},"content":{"rendered":"<p><a href=\"https:\/\/daringfireball.net\/2026\/03\/apple_enclaves_neo_camera_indicator\">John Gruber<\/a> (<a href=\"https:\/\/mastodon.social\/@daringfireball\/116240048619564995\">Mastodon<\/a>):<\/p>\n<blockquote cite=\"https:\/\/daringfireball.net\/2026\/03\/apple_enclaves_neo_camera_indicator\">\n<p> One might presume that the dedicated indicator lights are significantly more secure than the rendered-on-display indicators. I myself made this presumption in the initial version of <a href=\"https:\/\/daringfireball.net\/2026\/03\/the_macbook_neo\">my MacBook Neo review<\/a> last week. This presumption is, I believe, wrong.<\/p>\n\n<p>Later last week Apple published, and <a href=\"https:\/\/daringfireball.net\/linked\/2026\/03\/12\/macbook-neo-on-screen-camera-indicator\">I linked to<\/a>, a <a href=\"https:\/\/support.apple.com\/guide\/security\/mac-on-screen-camera-indicator-light-sec75a2d237d\/1\/web\/1\">small update in their Platform Security Guide<\/a>, which states:<\/p>\n\n<blockquote>\n  <p>MacBook Neo combines system software and dedicated silicon\nelements within A18 Pro to provide additional security for the\ncamera feed. The architecture is designed to prevent any untrusted\nsoftware&#x2009;&mdash;&#x2009;even with root or kernel privileges in macOS&#x2009;&mdash;&#x2009;from\nengaging the camera without also visibly lighting the on-screen\ncamera indicator light.<\/p>\n<\/blockquote>\n<\/blockquote>\n\n<p><a href=\"https:\/\/daringfireball.net\/2026\/03\/apple_enclaves_neo_camera_indicator\">Guilherme Rambo<\/a>:<\/p>\n<blockquote cite=\"https:\/\/daringfireball.net\/2026\/03\/apple_enclaves_neo_camera_indicator\"><p>[The] software-based camera indicator light in the MacBook Neo runs in the secure exclave part of the chip, so it is almost as secure as the hardware indicator light. What that means in practice is that even a kernel-level exploit would not be able to turn on the camera without the light appearing on screen. It runs in a privileged environment separate from the kernel and blits the light directly onto the screen hardware.<\/p><\/blockquote>\n\n<p>Previously:<\/p>\n<ul>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2026\/03\/18\/apple-exclaves\/\">Apple Exclaves<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2026\/03\/04\/macbook-neo\/\">MacBook Neo<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2024\/05\/09\/apple-platform-security-guide-may-2024\/\">Apple Platform Security Guide (May 2024)<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2021\/12\/20\/monterey-shows-orange-microphone-dot-on-video-projectors\/\">Monterey Shows Orange Microphone Dot on Video Projectors<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2020\/07\/16\/dont-close-your-macbook-with-a-camera-cover\/\">Don&rsquo;t Close Your MacBook With a Camera Cover<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2019\/02\/11\/on-covering-webcams\/\">On Covering Webcams<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2018\/11\/05\/macbooks-t2-will-prevent-eavesdropping-on-your-microphone\/\">MacBook&rsquo;s T2 Will Prevent Eavesdropping on Your Microphone<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2015\/06\/04\/micro-snitch-1-0\/\">Micro Snitch 1.0<\/a><\/li>\n<li><a href=\"https:\/\/mjtsai.com\/blog\/2014\/03\/02\/isight-spying\/\">iSights Spying on Their Users Without Warning<\/a><\/li>\n<\/ul>\n\n<p id=\"the-secure-design-of-the-macbook-neos-on-screen-camera-indicator-update-2026-03-20\">Update (<a href=\"#the-secure-design-of-the-macbook-neos-on-screen-camera-indicator-update-2026-03-20\">2026-03-20<\/a>): <a href=\"https:\/\/federated.saagarjha.com\/notice\/B4OWO3zAZZuJPGVWmu\">Saagar Jha<\/a>:<\/p>\n<blockquote cite=\"https:\/\/federated.saagarjha.com\/notice\/B4OWO3zAZZuJPGVWmu\">\n<p>The indicator light is still software and this still means it is susceptible to compromise as all software is, in a way that a hardwired indicator cannot be. Sophisticated exploits achieve privileges beyond the kernel&rsquo;s all the time.<\/p>\n<p>The solution they picked does make it non-trivial to bypass and it is a good choice if a hardwired indicator is not available. However it is still substantially less secure than having one, and Apple knows it.<\/p>\n<\/blockquote>\n\n<p id=\"the-secure-design-of-the-macbook-neos-on-screen-camera-indicator-update-2026-03-30\">Update (<a href=\"#the-secure-design-of-the-macbook-neos-on-screen-camera-indicator-update-2026-03-30\">2026-03-30<\/a>): <a href=\"https:\/\/www.schneier.com\/blog\/archives\/2026\/03\/apples-camera-indicator-lights.html\">Bruce Schneier<\/a>:<\/p>\n<blockquote cite=\"https:\/\/www.schneier.com\/blog\/archives\/2026\/03\/apples-camera-indicator-lights.html\">\n<p>It&rsquo;s really well-designed, and important in a world where malware could surreptitiously start recording.<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"<p>John Gruber (Mastodon): One might presume that the dedicated indicator lights are significantly more secure than the rendered-on-display indicators. I myself made this presumption in the initial version of my MacBook Neo review last week. This presumption is, I believe, wrong. Later last week Apple published, and I linked to, a small update in their [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"2026-03-18T19:32:16Z","apple_news_api_id":"b3091f25-e7b9-4f36-90c5-152102e321e6","apple_news_api_modified_at":"2026-03-30T17:26:06Z","apple_news_api_revision":"AAAAAAAAAAAAAAAAAAAAAQ==","apple_news_api_share_url":"https:\/\/apple.news\/AswkfJee5TzaQxRUhAuMh5g","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[2902,31,2741,30,2895,2742,355,1679],"class_list":["post-51291","post","type-post","status-publish","format-standard","hentry","category-technology","tag-exclaves","tag-ios","tag-ios-26","tag-mac","tag-macbook-neo","tag-macos-tahoe-26","tag-privacy","tag-secure-enclave"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/51291","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=51291"}],"version-history":[{"count":3,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/51291\/revisions"}],"predecessor-version":[{"id":51402,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/51291\/revisions\/51402"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=51291"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=51291"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=51291"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}