Apparently HTML5 apps can use your microphone without your consent
stackoverflow.com