Feeds

Google Chrome has voice-snoop bug, claims developer

Sneaky microphone switch-on popunder demo published

Intelligent flash storage arrays

A frustrated developer claims that Google is sitting on a bug that would expose voice search to eavesdroppers, and has released exploit code on github.

Tal Ater, whose speciality is speech recognition, claims in this blog post that a site can plant script in Chrome that will allow an attacker to turn on the microphone of a visitor to a site – and leave it open for as long as Chrome remains open.

He has posted the code to github.

When it's working right, Chrome's voice search allows a visitor to any site to ask for voice control, at which point the microphone is turned on – and the user gets a clear indication that this has happened, Ater writes. This choice is also remembered for the future.

However, he says, a malicious site could exploit this by opening "popunders" that users aren't aware of. Here's his description of how this works:

“When you click the button to start or stop the speech recognition on the site, what you won’t notice is that the site may have also opened another hidden popunder window. This window can wait until the main site is closed, and then start listening in without asking for permission. This can be done in a window that you never saw, never interacted with, and probably didn’t even know was there.”

The popunder can also be disguised as (for example) a banner ad – and it won't show the indication that the microphone is listening.

Ater has posted this demonstration to YouTube:

Youtube Video

Ater claims he notified Google about the flaw in September 2013, but that Google is waiting on “ongoing” discussions at the W3C before it acts on the bug. The Register has asked Google for a response. ®

Security for virtualized datacentres

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Shellshock over SMTP attacks mean you can now ignore your email
'But boss, the Internet Storm Centre says it's dangerous for me to reply to you'
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
China is ALREADY spying on Apple iCloud users, claims watchdog
Attack harvests users' info at iPhone 6 launch
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.