
“Toying around with voice-recognition apps, developer Tal Ater noticed something strange. Because of a quirk in Chrome’s microphone settings, any site enabled for voice-recognition could use a pop-up window to keep recording almost indefinitely, hidden in the background. In Ater’s demonstration, he closes the tab and continues talking, only to reveal a pop-up behind the main Chrome window, transcribing everything he says. The core of the problem is Chrome’smicrophone permissions policy. Once you’ve given an HTTPS-enabled site permission to use your microphone in Chrome, every instance of the site has permission, even windows that pop up unnoticed in the background.”







