@caladri Overload the kernel driver for the iSight and look at who is calling? Isn't that kernel module open with closed firmware? SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique