Posted by : Unknown
Tuesday, 4 February 2014
A new bug in Google Chrome, allows
malicious sites to activate your microphone, and listen in on anything
said around your computer, even after you’ve closed those tabs. The bug works even if you are not using
your computer, but take any phone calls and conversations around your
laptop. Malicious site can change your Google chrome into a listening
device and record and compromise conversations in your home of office as
long as Chrome is running.
The core of the problem is Chrome's
microphone permissions policy. Once the user has given an HTTPS-enabled
site permission to use your microphone in Chrome, every feature on the
site has complete permission. Chrome does not give any visual indication
that Speech Recognition is turned on which allows it to go undetected.
The only solution to the problem is if the user manually revokes the
microphone permission. The bug was first reported in September
by developer Tal Ater and nominated for Chromium’s Reward Panel.
Google's engineer's were able to isolate the problem, but even after 4
months the solution has not reached the desktop users.
A Google spokesperson said, "we’ve
re-investigated and still believe there is no immediate threat, since a
user must first enable speech recognition for each site that requests
it. The feature is in compliance with the current W3C standard, and we
continue to work on improvements."
Google recently removed two chrome extensions
that were forcing users to watch pop-up ads. The internet giant removed
"Add to Feedly" and "Tweet This Page," after getting receiving numerous
complaints from users about the ads. Google stated that extensions
violated the company's Terms of Service.
- Back to Home »
- google , search engine , updates , user , web browser , website »
- Chrome Bug Allows Sites to Listen to Your Offline Conversations