3 ms·
There's a bit more followup on this issue over here http://www.informationweek.com/security/vulnerabilities-and-threats/google-chrome-allows-eavesdropping-resea
by paulirish 13y ago
There's a bit more followup on this issue over here http://www.informationweek.com/security/vulnerabilities-and-threats/google-chrome-allows-eavesdropping-researcher-claims/d/d-id/1113524 http://www.informationweek.com/security/vulnerabilities-and-...
In it, a Chrome representative said: "The security of our users is a top priority, and this feature was designed with security and privacy in mind. We've re-investigated and still believe there is no immediate threat, since a user must first enable speech recognition for each site that requests it. The feature is in compliance with the current W3C standard, and we continue to work on improvements."
Check the informationweek article for more, specifically around the errata to remove that sentence from the spec.
- program 13y agoAs a side note: is it a good thing that a window obtained through a Window.open() inherits the parent window's permissions? Right now in Chrome permissions are enabled or disabled globally with exceptions based on hostname patterns. Adding a new option like "Allow popup window to inherit permissions" will solve the issue. A well-hidden popup window can track your position all day using the geolocation API?