Linux Mint Ubuntu Debian How To Disable Webcam Automatically Onboot To Prevent Spying and Privacy Violations

It is well known hackers, the NSA, CIA and other groups have created malware to secretly turn on your webcam and microphone on your phone, tv etc.. But fortunately on our computers and laptops we have some options.

Most webcams use the "uvcvideo" kernel module / driver.  You can disable this in two ways on boot. I recommend both just as a failsafe. 

Disable it on rc.local once your system boots automatically

Add the following to /etc/rc.local:

/sbin/rmmod uvcvideo

Even if the kernel module was loaded during boot this will unload it.

Disable it from loading at all in blacklist.conf

Edit /etc/modprobe.d/blacklist.conf

blacklist uvcvideo
 

Now of course note a hacker who gains access as root/admin could still load this driver and spy on you but it is a reasonable amount of privacy.  To increase security you should use electrical or duct tape over your microphone and webcam itself.

As a more invasive mode you could also edit your initramfs and kernel not to even contain the driver (but the issue is that on kernel upgrade the uvcvideo driver will be back).

You could also use a cronjob like this every minute:

sudo crontab -e

*/1 * * * * /sbin/rmmod uvcvideo

This would try to unload the driver every minute just in case something malicious did activate it again. 

 


Tags:

linux, mint, ubuntu, debian, disable, webcam, automatically, onboot, violationsit, hackers, nsa, groups, malware, secretly, microphone, etc, fortunately, laptops, webcams, quot, uvcvideo, kernel, module, failsafe, rc, sbin, rmmod, unload, loading, blacklist, conf, edit, modprobe, hacker, gains, admin, electrical, duct, invasive, mode, initramfs, contain, upgrade, cronjob, sudo, crontab, malicious, activate,

Latest Articles

  • VMWare Pro Workstation Nic Disconnected and No IP Using NAT
  • Linux How To Create A RamDisk
  • mdadm force resync when resync=PENDING solution
  • Proxmox Breaks Storage/LVM Backing If Killing QEMU-IMG
  • Proxmox trying to acquire lock... TASK ERROR: can't lock file '/var/lock/qemu-server/lock-102.conf' - got timeout
  • Debian 9 SSH root password authentication failure password not working problem / solution
  • QEMU / KVM How To Manually Create Basic Virtual Machine VM
  • Linux wlan0 check all wireless clients
  • PHP Issues With Decoding Strange Smart Quotes And Non-Standard ASCII Characters
  • /etc/iproute2/rt_tables default settings file in Linux Centos 6,7 and most other NIX's
  • bind named error solutions named[2169]: error (no valid DS) resolving / error (broken trust chain) resolving / : error (no valid RRSIG) resolving 'com/DS/IN':
  • iptables how to log ALL dropped incoming packets
  • How To Edit Linux Based NM Network Manager Connection Settings Without GUI
  • Linux Disable IPV6 Centos / Debian / Mint Howto
  • Linux use growisofs to burn a larger file on a BD-R / Bluray Disc
  • Linux partprobe/partx cannot access last and 4th partition
  • DRBD Errors Caused By Physical Corruption
  • mdadm: add new device failed for /dev/sdb4 as 3: Invalid argument solution
  • Linux named / bind how to dump, view and clear the cache!
  • Centos 6 / 7 / 8 How To Change Default nameservers in /etc/resolv.conf when using DHCP / dhclient