In one of the most popular browsers Chrome from Google discovered a serious vulnerability that allows for spy action.
As it turned out, the browser is able to record data from microphone or web camera without a display record.
Problem found employee AOL Ran Bar-ZIK. He noticed that after the user authorizes the website to use the WebRTC Protocol is designed for streaming data, using certain means, the site can record audio and video does not display on the tab, the red dot indicator — that is, the user won’t know if the site will start recording.
The Chrome developers said that they know about such behavior of the browser, and although not consider it a vulnerability, because the user in any case must first give the site permission in the near future will improve the display system.
Recently, more dangerous flaw was discovered in another product of Google’s mobile operating system Android. The vulnerability allows attackers to steal passwords and install third-party software.
© 2017, paradox. All rights reserved.
