Jamulus.app would like to record this computers screen

[BigScottRocks]

Good Morning,

BigScottRocks from the IP Rockers, not a newbie to Jamulus, been using it for about three years now. Last night I had this dialogue box popup on my iMac. Nothing new was installed on iMac, and I have been running this version of Jamulus since it was released. The only thing I can say I did different was Jam on this public server, I normally jam in Private. Here's the details.

iMac running macOS Monterey version 12.6
Jamulus version 3.9
Qt version 6.3.1

Any ideas on this one. First time I've ever seen this message. I clicked on "deny"" and continued to jam.

[pljones]

I clicked on "deny"" and continued to jam.

I'd click "deny" on it, too. I'm not a Mac user and I've no idea why that permission would be needed by Jamulus.

It's certainly somewhat worrying. @ann0see or @emlynmac, can you shed any light on it?

[emlynmac]

No clue. My guess would be something in QT is now triggering the permissions request.

[ann0see]

No. Actually I don’t know why this comes up. It might be related to the accessibility feature (audio alerts?) otherwise, could you please send us a hash from the app? Hopefully it’s not compromised.

[BigScottRocks]

Here you go. Please let me know if you need anything else to diagnose.

bigscottrocks@Scotts-iMac Downloads % md5 jamulus_3.9.0_mac.dmg
MD5 (jamulus_3.9.0_mac.dmg) = 0a7eaceb5fd72576fade047ddeb32775

bigscottrocks@Scotts-iMac ~ % md5 /Applications/Jamulus.app/Contents/MacOS/Jamulus
MD5 (/Applications/Jamulus.app/Contents/MacOS/Jamulus) = a4e6cb8e9c034928fcc4405e285bb3b2

[rdica]

I went looking for, but could not find posted md5 or shasums of the tarballs and pkgs.

[hoffie]

bigscottrocks@Scotts-iMac Downloads % md5 jamulus_3.9.0_mac.dmg
MD5 (jamulus_3.9.0_mac.dmg) = 0a7eaceb5fd72576fade047ddeb32775

bigscottrocks@Scotts-iMac ~ % md5 /Applications/Jamulus.app/Contents/MacOS/Jamulus
MD5 (/Applications/Jamulus.app/Contents/MacOS/Jamulus) = a4e6cb8e9c034928fcc4405e285bb3b2

I can confirm both these hashes (by downloading and md5sum'ing the (extracted) files.

[ann0see]

I went looking for, but could not find posted md5 or shasums of the tarballs and pkgs.

We don't publish them at the moment. macOS should be ad hoc signed and not open if there's a hash mismatch.

[hoffie]

• Can you clarify when exactly that dialog appeared? Right after connecting? At some later point?
• Was it upon receiving a chat message by chance?
• Do you have accessibility features enabled in your Jamulus settings?
• Can you reproduce this issue?

I have a hard time coming up with ideas about possible reasons. The Qt6 switch might be a clue, but I don't think it even has a Mac permission API at all, so if it does cause it, it does so via some internal mechanism.
I haven't found any hints about Mac-side bugs around such dialogs.

I've also checked the .plist files and don't see any relevant references. I haven't found permission requesting code in the qtmultimedia module either.

[BigScottRocks]

See below answers to your questions.

Can you clarify when exactly that dialog appeared? Right after connecting? At some later point? I had been jamming for at least 15/220 minute when the message popped up.
Was it upon receiving a chat message by chance? I was not watching chat, so not sure on this one.
Do you have accessibility features enabled in your Jamulus settings? I do not have accessibility options on
Can you reproduce this issue? I tried by joining same server, had someone type in chat, but thus far I cannot reproduce.

[dcorson-ticino-com]

This is scary.
Jamulus never tries to record a screen shot as far as I know and I don't see any reason why it would want to ever.
Have you done a virus scan of your compi?
Don

[BigScottRocks]

Yes, computer is clean. I run Symantec End Point and its up to date.

[ann0see]

Hmm, I think I vaguely remember getting a message like that around the time I tested the accessibility improvements with audio alerts and somehow expected it. @chigkim do you remember anything?

@BigScottRocks Can you reset Jamulus' screen record permissions (https://apple.stackexchange.com/questions/384230/how-do-i-reset-screen-recording-permission-on-macos-catalina#384231)?

[richard-dicaire-angi]

To get bundle ID:
https://stackoverflow.com/questions/39464668/how-to-get-bundle-id-of-mac-application

mdls -name kMDItemCFBundleIdentifier -r /Applications/Jamulus.app
or
osascript -e 'id of app "Jamulus.app"'
both of which return: io.jamulus.Jamulus

[BigScottRocks]

I have reset Jamulus' screen record permissions. Will wait till the popup happens again.

Successfully reset ScreenCapture approval status for io.jamulus.Jamulus

[ann0see]

Successfully reset ScreenCapture approval status for io.jamulus.Jamulus

Great. If it shows up again, please write here.

[ann0see]

Maybe related keepassxreboot/keepassxc#5224

keepassxreboot/keepassxc#3609

[chigkim]

That's strange. I never got a notification about screen recording for Jamulus.  Why would Jamulus need to record screen?

[ann0see]

Why would Jamulus need to record screen?

I assume it's not a screen recording but a permission needed which you only get if you request screen recording permissions.

[chigkim]

As far as I know, accessibility features should not trigger screen recording permissions, and I never got one before.

[ann0see]

I think I could now reproduce it: right click on the mixerboard and on what's this. This gives "Jamulus would like to record your screen" message!

[pljones]

Whu...?????!

[BigScottRocks]

I was able to reproduce the screen recording dialogue box. I don't see anyway to attach the new screenshot I grabbed but here is how to reproduce. Right click anywhere within the main jamulus mixer window. You will get one option, "what's this" Click on "what's this" , it will generate the screen recording security dialogue box.

[ann0see]

Ok. Even 3.4.3 shows this issue.

3.3.6 too.

Edit: Even the first supported version by Monteray (3.3.5) shows this issue.

[pljones]

🙄 I'm glad "What's this?" is so widely used... Oh well.

Still, if it's reliably triggered, it should make pinning down the trigger easier - i.e. why it happens for that widget rather than others, for a start.

[ann0see]

The question is if it’s only one widget. I doubt that it’s only the mixer board.

[chrisrimple]

CAN REPRO using Jamulus 3.8.1 on Mac M1 running macOS Monterey 12.6. CANNOT REPRO using Jamulus 3.8.1 on Mac Intel running macOS Mojave 10.14.6.

[Rob-NY]

Reproduced on Jamulus 3.8.2 (QT 5.15.2) on Mac Mini running Big Sur (11.7). Once you deny it will not pop up again unless cleared by going to Settings->Security & Privacy->Screen Recording (unlock for changes) and remove the Jamulus entry entirely. I can reproduce this anywhere "what's this" appears -- not just on the mixerboard. Got it when clicking what's this on Reverb, Jitter literal, Delay literal, etc.

[ann0see]

Thanks @Rob-NY @chrisrimple
I'd conclude that newer OS show this behaviour regardless of the Jamulus version. It might be a Qt bug.

[hoffie]

Given that the behavior affects both Qt5 and Qt6 builds but seems to have been introduced by a Mac version change, I'd rather suspect a strange interaction here. Maybe we can find another Qt application to try in order to rule out anything Jamulus-specific?