3 ms·
What's the security model for browser-native audio recording? That's a worrying security hole, if you can record without getting any permission from the user -
by jtheory 14y ago
What's the security model for browser-native audio recording?
That's a worrying security hole, if you can record without getting any permission from the user -- sites could eavesdrop on visitors and upload the audio to who-knows-where (knowingly or not, via an XSS hole...).
I believe Flash needs to prompt you to access your microphone and webcam; browsers should too (even more so, because someone who has disabled all plugins may feel safer...).
- kevincennis 14y agoChrome does prompt the user when a site requests webcam or audio (microphone/line-in) input.
- mihar 14y agoIt's one thing to prompt the user when you start recording and another to need to go to chrome://flags. Permissions for privacy invading features should IMO have a unified interface like they have in the OS like Mountain Lion.
- kevincennis 14y agoThe need to go to chrome://flags has nothing to do with privacy.
- rokgregoric 14y agoYou need to go to chrome://flags to enable Web Audio Input. The request for the microphone has nothing to do with that .. it's working with or without Web Audio Input.