Live data from Hacker News

An iframe from googlesyndication.com tries to access the camera and microphone

techsparx.com

11–20 of 280 posts

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#11

We have a chance to notice this when it's mediated by a browser. Native apps don't barf all over the console and thus escape such scrutiny. I first considered this when a friend told me about a brand of lawnmower of which I had never heard let alone searched (mowing lawns is the least interesting activity I can imagine), and one minute later a podcast app had a big banner at the top by which I could purchase a lawnmo…

But mobile apps are required to ask for mic/camera permissions.

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#13
post #6

The Exhibit A why no one will ever convince me to turn off my ad blocker or switch away from Firefox. It's a great feeling to just not have to worry about this entire class of exploits.

also tape your laptop's camera

That doesn't protect your microphone from being exposed though.

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#14
Is this just click bait? I don't know the intricacies of Google's ad serving, but is this not just someone (e.g., an ads customer) slipping a request for camera and mic access into an ad script? But the title seems to suggest Google is doing something malicious here.

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#15
post #5

I wonder if it's a fingerprinting attempt gone wrong? I can't see a reasonable even malicious reason for eavesdropping on mic/camera at scale like that, you'll be capturing a ton of data you need to manually process/clean up which takes time/resources, most people won't stay on the page long enough to capture enough sensitive info and even then, eavesdropped conversations seem pretty useless unless you also have the…

> eavesdropped conversations seem pretty useless unless you also have the whole context and information on the person you're targeting to be able to effectively misuse that data

Keywords (i.e. "perfume", "car", "phone", "notebook", "flowers", whatever) would probably be enough to "improve" targeted ads.

However, this would be a huge scandal if true, so your first suggestion, fingerprinting gone wrong, is more likely.

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#16
post #4

We have a chance to notice this when it's mediated by a browser. Native apps don't barf all over the console and thus escape such scrutiny. I first considered this when a friend told me about a brand of lawnmower of which I had never heard let alone searched (mowing lawns is the least interesting activity I can imagine), and one minute later a podcast app had a big banner at the top by which I could purchase a lawnmo…

Has anyone seen any well done research showing these effects?

Not a study but I've heard explanations that big companies have so much data their models are just that good. For instance they know who you're friends with, both your search histories, and location data. Knowing you friend searched for lawnmowers recently and now y'all are physically close it's possible that brand was discussed.

Although I wouldn't be shocked at all if mics were being used. I just feel like that would have been leaked by someone by now.

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#17
post #14

Is this just click bait? I don't know the intricacies of Google's ad serving, but is this not just someone (e.g., an ads customer) slipping a request for camera and mic access into an ad script? But the title seems to suggest Google is doing something malicious here.

Why does it matter whether Google did it or Google spread it around the world? It is equally repulsive behavior on their part.

Re: An iframe from googlesyndication.com tries to access the camera and microphone

#18
post #4

Earlier quoted context omitted.

Has anyone seen any well done research showing these effects?

I've heard it from more folks than I'd like to. And counting them all as crazy or paranoid is less believable than the alternative.

I've only experienced it first-hand on youtube. After trying to learn spanish and talking spanish on the phone (but searched nothing on youtube in Spanish) Youtube offers recommendations in Spanish. Also after I sneezed a couple of times it recommends something related to hay fever. Lots more. I find these way more than circumstancial.
Post reply on HN