Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Bugs in Google Chrome let websites listen to your conversations
Daily Caller ^ | 2:14 PM 01/22/2014 | Giuseppe Macri

Posted on 01/22/2014 8:43:31 PM PST by null and void

Google’s popular Chrome search engine might be doing more than helping you find websites — it might be helping websites find and listen to you through the microphone in your computer.

TalAter.com reports the search engine’s voice recognition functionality can be compromised by websites that allow Chrome users to navigate their site via voice.

The problem is once you give Chrome permission, the websites you’ve visited retain that permission — even if you’re not on the site, allowing them to tap into your computer’s onboard microphone and listen in at any time.

Any site operator that chooses to adopt Chrome’s speech recognition ability and buy a $5 HTTPS security certificate will have the ability to hack visitors’ microphones. Typically when a user visits a site, they have to manually allow voice recognition, after which Chrome will display a visual indicator telling users the function is live.

What users won’t see is the secret window sites can immediately open up after voice recognition is activated, which stays open and under the control of the site even after the user manually disables the function, thanks to bugs in the search engine’s programming.

A speech recognition library maintainer discovered the bugs and reported them almost four months ago to Google’s security team, which subsequently fixed them two weeks later but never released the update to the public because of an “ongoing discussion” within the “Standards group.”

According to the maintainer, web standards organization W3C outlined behavior that would have corrected any such problem as far back as October 2012.

The source code for the bug is posted on GitHub, and a video showing the exploit in action was uploaded to YouTube Wednesday.


TOPICS: Crime/Corruption; Culture/Society; News/Current Events; Technical
KEYWORDS: freedom; google; nsa
Navigation: use the links below to view more comments.
first 1-2021-27 next last
Bug? Yeah, that's it...
1 posted on 01/22/2014 8:43:31 PM PST by null and void
[ Post Reply | Private Reply | View Replies]

To: COUNTrecount; Nowhere Man; FightThePower!; C. Edmund Wright; jacob allen; Travis McGee; opentalk; ..

Nut-job Conspiracy Theory Ping!

To get onto The Nut-job Conspiracy Theory Ping List you must threaten to report me to the Mods if I don't add you to the list...

2 posted on 01/22/2014 8:44:24 PM PST by null and void (We need to shake this snowglobe up.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: null and void
Bug? Yeah, that's it...

  1. 6 kinds of your information Google openly admits to collecting
  2. NSA infiltrates links to Yahoo, Google data centers worldwide, Snowden documents say
  3. Google announces privacy changes across products; users can’t opt out
"Once is happenstance. Twice is coincidence. Three times is Enemy Action." -- Auric Goldfinger
3 posted on 01/22/2014 8:56:08 PM PST by OneWingedShark (Q: Why am I here? A: To do Justly, to love mercy, and to walk humbly with my God.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: null and void

Now that is scary stuff. I don’t want anyone listening to me talk to myself!


4 posted on 01/22/2014 8:57:01 PM PST by ETL (ALL (most?) of the Obama-commie connections at my FR Home page: http://www.freerepublic.com/~etl/)
[ Post Reply | Private Reply | To 1 | View Replies]

To: null and void

I avoid anything Google if I can.
Bought a new HP printer & it downloaded Google Chrome in a tool bar. I turned the bar off but its probably lurking.


5 posted on 01/22/2014 9:00:57 PM PST by Cold Heart
[ Post Reply | Private Reply | To 1 | View Replies]

To: Cold Heart

Ive downloaded Google Earth os less then THREE separate occaisions.

each cycle was good for a couple of days...before the app VANISHED!

MAC’s finder ...cant....find any of them..and third party “finders” cant find any of them either.

Google at this point...is no longer allowed near my machine


6 posted on 01/22/2014 9:05:54 PM PST by MeshugeMikey ("When you meet the unbelievers, strike at their necks..." -- Qur'an 47:4)
[ Post Reply | Private Reply | To 5 | View Replies]

To: Cold Heart
I avoid anything Google if I can.

So do I. Most of it is way overly complicated and difficult to use anyway. It also seems to install a bunch of other unwanted junk on your system.

7 posted on 01/22/2014 9:06:01 PM PST by ETL (ALL (most?) of the Obama-commie connections at my FR Home page: http://www.freerepublic.com/~etl/)
[ Post Reply | Private Reply | To 5 | View Replies]

To: ETL

I say have fun with it. Google search random things like like Ukranian amputee knitting fetish, shortbread recipes, lizard people on the Potomac, and Super Mario Bros. while you have NPR playing over the radio near your microphone.


8 posted on 01/22/2014 9:10:12 PM PST by Antihero101607
[ Post Reply | Private Reply | To 4 | View Replies]

To: null and void
>Google’s security team, which subsequently fixed them two weeks later but never released the update to the public because of an “ongoing discussion” within the “Standards group.

Vetoed by the NSA? Or just Google spying on folks for fun and profit?

9 posted on 01/22/2014 9:12:18 PM PST by PAR35
[ Post Reply | Private Reply | To 1 | View Replies]

To: null and void
RE :Any site operator that chooses to adopt Chrome’s speech recognition ability and buy a $5 HTTPS security certificate will have the ability to hack visitors’ microphones. Typically when a user visits a site, they have to manually allow voice recognition, after which Chrome will display a visual indicator telling users the function is live.
What users won’t see is the secret window sites can immediately open up after voice recognition is activated, which stays open and under the control of the site even after the user manually disables the function, thanks to bugs in the search engine’s programming. “

Dont allow voice recognition.

10 posted on 01/22/2014 9:16:43 PM PST by sickoflibs (Obama : 'If you like your Doctor you can keep him, PERIOD! Don't believe the GOPs warnings')
[ Post Reply | Private Reply | To 1 | View Replies]

To: ETL

I read iphones can do that.


11 posted on 01/22/2014 9:33:05 PM PST by Republican1795.
[ Post Reply | Private Reply | To 4 | View Replies]

To: ETL
Now that is scary stuff. I don’t want anyone listening to me talk to myself!

Could you speak a little louder, please?

12 posted on 01/22/2014 9:35:58 PM PST by Ken H (What happens on the internet, stays on the internet.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: null and void

But have they test that with Chrome 32.0.1700.76 m, which just came out a few weeks ago? That vulnerability test may not be valid if the bug has been fixed with Chrome 32.x versions.


13 posted on 01/22/2014 9:36:24 PM PST by RayChuang88 (FairTax: America's economic cure)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Antihero101607

That is the same reason why I sing along with the radio in my car (badly, and I don’t even have to try). I expect that some day I’ll be approached by an NSA analyst and be asked, for the love of God, please stop. Three agents have asked to be reassigned and a fourth is in therapy. ;-)


14 posted on 01/22/2014 9:47:08 PM PST by ThunderSleeps (Stop obarma now! Stop the hussein - insane agenda!)
[ Post Reply | Private Reply | To 8 | View Replies]

To: null and void

Here’s a clue - stay away from anything Google makes. Not too hard to figure out.


15 posted on 01/22/2014 9:50:20 PM PST by ASouthernGrl (BHO sucks - literally or metaphorically, you decide.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ETL

sometimes talking to myself is the only intelligent conversation I can have.

“Shut up!”

“No! You shut up!”

“I hate liberals!”

“Me, too!”

“Good! Let’s be friends.”


16 posted on 01/22/2014 9:51:32 PM PST by VerySadAmerican (".....Barrack, and the horse Mohammed rode in on.")
[ Post Reply | Private Reply | To 4 | View Replies]

To: null and void

Let me know when they’re listening, I’ve got a few things I’d like to say...


17 posted on 01/22/2014 10:13:03 PM PST by bigbob (The best way to get a bad law repealed is to enforce it strictly. Abraham Lincoln)
[ Post Reply | Private Reply | To 1 | View Replies]

To: null and void

It’s a feature, silly...


18 posted on 01/22/2014 10:33:45 PM PST by Vendome (Don't take life so seriously-you won't live through it anyway-Enjoy Yourself ala Louis Prima)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Antihero101607
...while you have NPR playing over the radio near your microphone.

I'm gonna give you to the count of 10, to get your ugly, yella, no-good keister off my property before I pump your guts full of lead! (sound of machine gun fire) Keep the change, ya filthy animal!

19 posted on 01/22/2014 10:48:30 PM PST by TigersEye (Stupid is a Progressive disease.)
[ Post Reply | Private Reply | To 8 | View Replies]

To: Cold Heart
I turned the bar off but its probably lurking.
Go to control panel.
Click on add or remove programs.
Find/click on (anything and everything) "google".
Click on the "remove" button...
20 posted on 01/23/2014 12:15:20 AM PST by lewislynn (What does the global movement and te Fairtax movement have in common? Disinformation)
[ Post Reply | Private Reply | To 5 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-27 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson