Feeds

Google Chrome has voice-snoop bug, claims developer

Sneaky microphone switch-on popunder demo published

Beginner's guide to SSL certificates

A frustrated developer claims that Google is sitting on a bug that would expose voice search to eavesdroppers, and has released exploit code on github.

Tal Ater, whose speciality is speech recognition, claims in this blog post that a site can plant script in Chrome that will allow an attacker to turn on the microphone of a visitor to a site – and leave it open for as long as Chrome remains open.

He has posted the code to github.

When it's working right, Chrome's voice search allows a visitor to any site to ask for voice control, at which point the microphone is turned on – and the user gets a clear indication that this has happened, Ater writes. This choice is also remembered for the future.

However, he says, a malicious site could exploit this by opening "popunders" that users aren't aware of. Here's his description of how this works:

“When you click the button to start or stop the speech recognition on the site, what you won’t notice is that the site may have also opened another hidden popunder window. This window can wait until the main site is closed, and then start listening in without asking for permission. This can be done in a window that you never saw, never interacted with, and probably didn’t even know was there.”

The popunder can also be disguised as (for example) a banner ad – and it won't show the indication that the microphone is listening.

Ater has posted this demonstration to YouTube:

Youtube Video

Ater claims he notified Google about the flaw in September 2013, but that Google is waiting on “ongoing” discussions at the W3C before it acts on the bug. The Register has asked Google for a response. ®

Internet Security Threat Report 2014

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
prev story

Whitepapers

Go beyond APM with real-time IT operations analytics
How IT operations teams can harness the wealth of wire data already flowing through their environment for real-time operational intelligence.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
How to simplify SSL certificate management
Simple steps to take control of SSL certificates across the enterprise, and recommendations centralizing certificate management throughout their lifecycle.