The app is called rolling notifier and it is again access to the limitcam that proves vulnerable. The author of this app (cbbotdev) is very unsophisticated and makes mistakes in other parts of the code, but he still nonetheless sets it up so that an alt account (clickdickpic) is silently given access to the limitcam when it enters a room running the app.
A screenshot of the app code showing the backdoor routine:
A screenshot of the app code showing the backdoor routine:
