The discovery was made by an AOL web developer by the name of Ran Bar-Zik, Bleeping Computer reports. While the bug may seem of massive proportions, it actually isn't all that bad because the malicious website still needs to get the user's permission to access the audio and video components. Therefore, if the user doesn't grant the website the right to listen in, it won't do that.
However, the problem is there and there are ways to weaponize the vulnerability.
How it works
The discovery was reportedly made as the AOL developer was dealing with a website running WebRTC code, which is the protocol for streaming audio and...
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf news.softpedia.com.
SOCIAL SHARE CARD GENERATOR