Chrome and Chromium suddenly started the function to record your surroundings without permission

ByDorena-wm

Google Chrome and its derivationChromiumso,"Chrome HotwordThere was an accusation that the extension function named "Installed" was installed without any notice.

Not OK, Google: Chromium voice extension pulled after spying concerns | Ars Technica
http://arstechnica.com/security/2015/06/not-ok-google-chromium-voice-extension-pulled-after-spying-concerns/

Issue 491435 - chromium - Opt-out Chrome Hotword Shared Module - An open-source project to help move the web forward. - Google Project Hosting
https://code.google.com/p/chromium/issues/detail?id=491435

# 786909 - chromium: unconditionally downloads binary blob - Debian Bug report logs
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786909

When updating to Google Chrome 43 and Chromium 43,Chrome Hotword Shared ModuleA module named "Downloaded unconditionally" was reported on Chromium's forum on May 22nd. However, as this report became neglected, it will be reported again to the Debian forum and the discussion will proceed.

The downloaded "Chrome Hotword Shared Module" contains "binary without source code"Binary Blob"To install the installed extension" Chrome Hotword "Opt-out (function release)There was also no setting to do. In addition, "Chrome Hotword" was not found in "chrome: // extensions /" which should normally be listed in the installed extension.

Then, when "Chrome Hotword" is installed, it turns out that "Microphone" and "Audio Capture Allowed" of voice search (chrome: // voicesearch /) are both "Yes". In other words, Chrome and Chromium might have been able to record surrounding sound through the microphone.


On June 16 this issue was posted again on the Chromium forum and on the 17 th the following day Matt Giuca of the Chromium development team explained about this subject.

Issue 500922 - chromium - Hotword behaviour in chromium v43 (binary blob download) - An open - source project to help move the web forward. - Google Project Hosting
https://code.google.com/p/chromium/issues/detail?id=500922#c6

A reply as to whether "Hotword" by Mr. Giuka is recording voice without user's permission is "Hotword isOpt-in"Voice search is off by default, so Hotword will not turn on unless it is intended". In the setting screen of Google Chrome or Chromium, it is OK if the check "Enable start of voice search by" Ok Google "in the search item is off.


Second, Giuca says about putting binary blobs (binaries that can not be checked for sources) in open source applications, "Giuca said," Google Chrome is not open source,ProprietarySince there are several (private) binaries included, there is no problem with the inclusion of the Hotword module. "" For Chromium version 43.0.2357.81-1, disable the Hotword module,Third Party DistributorI will make a change in Chromium 45 so that Hotword can be invalidated easily ".

And, if you do not see it on the list of extended functions, it says, "It displays the extensions installed by yourself, and even if the core part of the browser that was originally included is displayed, it will cause confusion" By doing so, the current situation will be maintained.

At this time, if you are using Google Chrome, the feature may not be activated, but it remains installed. If you are using Google services and applications, it is no wonder that you have handed quite deep private information already, so it may be that there is a way of thinking ... ... when you capture audio now, People who are spooky and unhappy recommend using Chromium instead of Google Chrome.