Google Chrome found spying on microphones, even on linux.

neptronix

Administrator
Staff member
Joined
Jun 15, 2010
Messages
20,375
Location
Utah, USA
I peeked at the Chrome already on the machine Grin sent, and found that even though the voice search is "disabled" in the advanced settings, it still has the mic enabled, etc. I dont' have a mic on there so it can't do anything, but it gives me one more reason to stay with my ancient firefox v2. ;)

I'e included the settings it shows with chrome:voicesearch below.

FWIW, I shift-deleted the entire folder referenced for the hotword function, with chrome closed (it would not let me with it open, meaning it was possibly accessing it), and am letting it sit open but unused for a bit to see if it tries auto-reinstalling it.


Code:
About Voice Search

Google Chrome	42.0.2311.135 (m)
OS	Windows XP SP3
NaCl Enabled	Yes
Microphone	Yes
Audio Capture Allowed	Yes
Current Language	en-US
Hotword Previous Language	en-US
Hotword Search Enabled	No
Always-on Hotword Search Enabled	No
Hotword Audio Logging Enabled	No
Field trial	Install
New Hotwording Enabled	Yes
Start Page State	No Start Page Service
Extension Id	nbpagnldghgfoolbancepceaanlmhfmd
Extension Version	0.0.1.4
Extension Path	C:\Program Files\Google\Chrome\Application\42.0.2311.135\resources\hotword
Extension State	ENABLED
Shared Module Id	lccekmodgklaepjeofjdjpbminllajkg
Shared Module Version	0.3.0.2
Shared Module Path	C:\Documents and Settings\admin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.2_0
Shared Module State	ENABLED
Shared Module Platforms	x86-32_
 
Yeah, i figured that the windows version had that as well.

I've been a firefox dude forever. It's not the best browser, but google doesn't have me by the balls when i use it. adblock plus actually works in firefox, whereas it didn't work on chrome very well if at all.
 
Been using Chrome lately for a headless HDTV device called Tablo. It supposedly works best with Chrome but ever since I started using it I've noticed a few ads for stuff that I never searched for on any computer but only talked about with the missus. You don't think? SOB....
 
Really? :shock:
 
Yes, really weird. Noticed it a couple times and at first didn't think much of it but an ad for Home Depot RO filters popped up and we had only spoke about getting those at Home Depot.
 
The android phones also take video of your face using the front camera by default. They say it is to determine whether you are looking at the screen or not. I believe the voice activation features are also on by default as well.

This is the price of these free services. They sell everything they can possibly collect from you to advertisers, and government has a backdoor to all that data as well via the PRISM program, etc.

Kinda crazy though, i remember meeting the occasional schizofrenic who'd yammer on about these kinds of things. Now the things they have been freaking out about for years are actually true :lol:

I'm glad i gave up my android phone recently for a dumb flip phone.
 
Big Brother is watching.

1984 backstory https://www.youtube.com/watch?v=MTTecNxXzbo

<great book> but don't forget even if it's not fiction, there will always be hope.

the book https://www.youtube.com/watch?v=auwRj4Yru-E


Ps, crosspost. Yep me too nep, not carrying the dam internet with me! I can go to it on my own terms.
 
On that note, i read Animal Farm on audiobook last year. I remember listening to to it thinking.. WOW.. how could he have predicted how USA's govt. would have turned out all the way back then? it sent shivers down my spine, thinking about how similar 'da farm was to our system.

What really freaked me out is the backstory, which i was unaware of. He wrote it in 1945 as a warning against what communist governments would eventually become.

Orwell and Huxley were freakin' spot on. Scary how spot on they were.
 
I've honestly come to think 'this' (world society) could all be possibly be designed&guided by very smart but evil people starting very long ago. Maybe that's how the writers new what to write- they already read 'morals and dogma' and huxley's 'brave new world' ? The rest is history as they say? :D I'm just maybe on the fence about accidents or coincidence- whatever that means- when you hear some of the quotes from leading families of the world.

Ps, if you haven't listened or read (recommend the read) 1984 you gotta. I think the whole previous generation was reading it in school even? Maybe that's why they are so jaded or maybe I've just not grown up yet. It's a shakespearean modernday masterpiece imo, but possibly alot farther reaching.
 
One of those schizo's here...lol

Everything listens. If you don't believe me, just get online and say the phrase "luxury watch" a few times while using any google based program. Within three days, you'll be seeing luxury watch ads in your gmail spam, then on ads, etc. Works every time, even with mics software disabled, on some phones, even with the main battery out. Main battery? you may ask.... In the cheapest straight talk smart phone from two years ago, I forgot the model, there's a lithium button cell covered in shrink wrap and soldered to the main board. I found this out because it was causing intermittent interference through my guitar amp, even with the battery out, so I dissected it with a rock.

Google is evil. It seems I've been banned from posting comments on my youtube accounts, and all I ever talk about is permaculture, green tech, gift economy, and anarchy.

Google can suck it! You hear me google! lol

I use a burner netbook, sometimes through a vpn, firefox with adblock, and duckduckgo to search. I even put a sticker over the camera and physically removed the mic from my computer. It not only makes it harder for me to be spied on, it gives me the perfect excuse to get out of having to video chat with anyone.

I wish I could figure out how to tether on one of my old flip phones.
 
ErnestoA said:
I wish I could figure out how to tether on one of my old flip phones.
There's stuff out there on how to hack some of the phones for it (or at least, used to be a few years ago when I considered that), though I don't have any links right now. It didn't look that hard to do.

However...what kept me from trying it was that according to those that did try it, the cel companies will charge you a fortune for doing it, or will simply terminate your service temporarily or permanently if they don't have good deals with the hardware owners in that area, or not enough bandwidth in that area. :/
 
The phones come with software from the factory that reports you if you're tethering. It may even be in the hardware or firmware and difficult to bypass. The old flip phones are impossible to get data plans for but there's tethering software out there for them. I think that if I get a new android phone, root it immediately, and install cyanogenmod, I could probably tether and get away with it. If the phone supports USB otg, I can plug in a usb keyboard and mouse but there's no external monitor option.

The only other option is using an Odroid XU3lite to build an open source, linux powered pocket computer, then getting a sim for my old verizon jetpack for connectivity.

I would think that the people gifted in programming would be focusing on three things right now. The first priority in my mind should be a software writing ai that regular people could use to create apps because there are people out there with great ideas and no desire or maybe even ability to learn programming. The second priority would be a p2p decentralized meshnet because it's finally becoming clear to the masses that the internet is corporate/government controlled and censored. When we can easily program, and freely communicate without being censored and spied upon, the world will change over night. The third priority would be an open source device to use on that meshnet.
 
ErnestoA said:
One of those schizo's here...lol

Everything listens. If you don't believe me, just get online and say the phrase "luxury watch" a few times while using any google based program. Within three days, you'll be seeing luxury watch ads in your gmail spam, then on ads, etc. Works every time, even with mics software disabled, on some phones, even with the main battery out.

....

I use a burner netbook, sometimes through a vpn, firefox with adblock, and duckduckgo to search. I even put a sticker over the camera and physically removed the mic from my computer. It not only makes it harder for me to be spied on, it gives me the perfect excuse to get out of having to video chat with anyone.

Me and my wife were just talking about this shit last night. I was about ready to get rid of my gmail account, until i realized that my online moniker, domain, and email address still linked my personal identity and online identity entirely. I have a bigger bridge to burn than just my gmail... sign.

Wifey-chan was asking me today - are we crazy schizophrenics? i'm like, no. This stuff is happening and we have proof of it. Declassified documents prove it. We only seem 'crazy' because we are a very small minority that finds our lack of privacy outrageous and want to do something about it, rather than pretend that we aren't being cyber-stalked all day long.

I googled myself using a few interlinked terms and found:
1) A site with pictures and names of all of my myspace/yahoo contacts. ( http://profileengine.com )
2) Multiple sites with previous cities i've lived in, and a 'buy it now' link to get more information on me.
3) Defunct links on my own web site ( neptronix.org ) that gave out personal information from when i ran a business.
4) Linkedin apparently knows about everyone i've ever known on facebook, myspace, yahoo, dating sites, gmail, etc.
5) Facebook posts from multiple names i've used - even if the accounts are dead, the posts still show in google.
6) More disgusting stuff i'd prefer not to mention.

Me and wifey got very disturbed by this. A lot of this data-collection as a result of using the internet heavily for almost 2 decades was completely non-consensual. Now, this data is for sale to anyone who would want to stalk either of us.
30 years ago, this would be totally illegal to do. 30 years ago, if you wanted anonymity, you'd call up the phone company and make your phone number unlisted. Now, private companies and the government are free to siphon your data and then sell it to whoever wants it, even if you thought it was private at the time.

This internet thing is not so fun anymore.

I recently switched to duckduckgo as my default search engine too. It's actually quite good these days.
Look at this - the company is slowly growing into something serious. Here are their traffic reports:
https://duckduckgo.com/traffic.html
 
Some of my most intimate details and struggles are posted on the internet and easily findable by anyone that cares to search. It started to bother me for a while there but I really don't care anymore. I can always say that I was using fictional online personalities to develop characters for a screenplay. Any similarity to any person, living, or dead, is coincidental. Also, other people have posted as some of my fictional characters. If there's a problem with something I wrote, it wasn't me! lol That's my story and I'm sticking to it. ;)
 
ErnestoA said:
The phones come with software from the factory that reports you if you're tethering. It may even be in the hardware or firmware and difficult to bypass. The old flip phones are impossible to get data plans for but there's tethering software out there for them. I think that if I get a new android phone, root it immediately, and install cyanogenmod, I could probably tether and get away with it. If the phone supports USB otg, I can plug in a usb keyboard and mouse but there's no external monitor option.

I'm not sold on the simplicity or safety of android, but know for a fact that the samsung 'smartdock' is excellent for what you want. Designed for tab phones, it also works with rooted note 8.1. Really nice for a portable media setup, but I think I still like windows better. Android is do dumbed down for touch phone teenies (the market?). Powers TB usb drives and input devices, runs hdmi.
Having done it as my first real use of android, I'm not that impressed and would mostly just recommend a winxp laptop, plus cd drives can still be useful (and are necessary without the net).

I hear the concerns about the net, and agree privacy is great, but it will probably always be the true cost of information exchange on this medium. I think it's almost a good thing, (for personal interactions) because I would never be anonomous in normal face/face dealings. The negative is when the corporate entities use the info.
I question corporations' (legally born from the civil war I believe) benefits vs risk, and think maybe the world would be better without them. Kinda makes it hard to hold actions accountable when the only legal recourse is fine them, and they can live for generations.
 
I think folk in the IT security industry would find people being most afraid of google chrome compared to IE has quite amusing.
IE is known to be the king for being manipulated for executing arbitrary code of an attackers choice just by merely viewing a website that is under control of attackers.

Go here and see the latest list of vulnerabilities from IE.. theres a way to run code on your computer of the attackers choice in IE all the time..
http://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-9900/Microsoft-Internet-Explorer.html
"CVE-2015-1766 399 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code"

Surely you have all seen in the news headlines about China hacking into US government networks all the time, they almost ALWAYS go for the government worker with their web browser or office document attachments in email, they never attack servers directly, thats just stupid.

Often its just as simple as getting the US governments email address and sending them an email that looks like a co-worker with a web link to a funny cats video or even a well known harmless website that would have basic security like a local news website that they trust.
They just have to view the right webpage with their trusty IE browser and that's it, the Trojan has been transparently installed with no errors or anything noticeable at all, it wont require any input or effort by the end user if its using a descent vulnerability in the browser.

If Bill Gates saw you guys fearing Chrome over IE he would have a secret giggle to him self.
The MS Kinect etc listens to what your saying all the time apparently anyway.

If I am not using my mic I don't have it plugged in.

MS assumes that everyone knows how bad they have been with IE in letting everyone down in browser security that they are ditching IE altogether and building a new browser from the ground up called Spartan
http://gizmodo.com/microsofts-new-spartan-browser-in-5-gifs-1694784628

MS almost always create their OS and software around what people want just like Burger King and McDonalds do.
They might occasionally try and do the right thing like McDonalds and come out with a salad burger loaded with nutrients that will in the long run be the best thing for most people.
That would be something like UAC or Windows RT which has digitally signed only code by MS where programs could only be installed from the MS Windows store like iOS apps.

Also windows RT apps can only be written in programming languages that contain today's expected default security settings; buggier, older programming languages need not apply. This also means that Windows RT apps contain all the Windows anti-buffer-overflow memory improvements introduced in Windows Vista and improved in each Windows version since. These include Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), SafeSEH, sacrificial canary values, and more. What is different is these memory protections are improved -- and required.

All the tech-heads hated Windows RT, they told everyone else to hate it and sure enough it died. People don't care they want to be able to run old dodgey programs etc.

When Microsoft first released UAC in Vista, users screamed out in violent pain about how annoying and inconvenient it was.. Just like a vegie burger replacing a beef burger this was going to hurt MS software sales so it was pulled back...

https://en.wikipedia.org/wiki/User_Account_Control
User Account Control (UAC) is a technology and security infrastructure introduced with Microsoft's Windows Vista with a more relaxed version also present in Windows 7, Windows 8, and Windows 10.

For every dollar that can be made selling a healthy burger there is like a x1000 fold amount of money selling a tasty burger that everyone likes to eat.

Folks that don't like ARM I think lack vision as these SoCs have been making truly incredible strides in computing power while sipping on the tiniest wattage envelope, as Apple has proven with their ARM processors. Passive cooled ARM beats passive cooled latest Intel Atom. I could only imagine how fast a chunky large fan cooled ARM processor could go with a larger thermal envelope like most Intel processors get to enjoy.
http://www.anandtech.com/show/8666/the-apple-ipad-air-2-review/3
http://arstechnica.com/gadgets/2015/04/surface-3-review-smaller-slower-cheaper-better/2/
ARM_iPAD_Air_VS_Intel_Surface3.png

Just like McDonalds and Burger King, Microsoft has come back with the fattest beefiest cheese burger they could make with Windows 8.1/Intel powered tablets and everyone came rushing back in.
Some folk see MS as some kind of pillar of society for technology use but they are just like any other company doing what ever it takes to bring in maximum dollars for their shareholders.

I guess what I might be saying from all this is don't get me started on IT and security... :roll:
 
IE is a joke and has been for almost 2 decades now :lol: not even worth discussing or considering it's use.

This post isn't so much about security, but spying. IE is also very bad in this regard. Have you seen the default settings for internet explorer in Windows 10? holy shit.. Windows 10 is a personal privacy nightmare. I wonder what things it is doing that it *isn't* telling us about.
 
TheBeastie said:
I guess what I might be saying from all this is don't get me started on IT and security... :roll:
Except, this isn't necessarily about security, it's about privacy (whcih can be the same, but aren't always). You can be very secure (from outside attack), while still not having any privacy (because of built-in functions of the applications or hardware you use, whether you're told about them or not).
 
I quit trusting Google and any thing they are associated with years ago.
I run Security Enhanced Linux with stuff I wont ever talk about.
I wont run chrome or google talk anymore.
I will run some flash though.
 
Last year when I first started reading about the remotely enabled video and mic, I started turning off the wifi button on my computer. I still sometimes forget to turn it on when I open my laptop (it takes some time for the coffee to kick in) and the screen tells me it can't get online (*clicks wifi switch, restarts browser)...for whatever good it does me. I was wondering why...on the new laptops that have built-in camera and mic....there isn't a mechanical switch?

For the camera I can just add a flap over it when I wouldn't be using skype, etc, but...the mic...I am not even sure where it would be located, or if my laptop has one.
 
There is usually a pinhole somewhere around the screen, hinge area, or front edge of teh laptop, wherever the microphone is.

To know if there is one, you can open whatever sound recording application your OS has (or get audacity or similar), and try recording. While doing so, open the volume control panel, and find the recording options, and enable or turn up the microphone input.

To then find the mic, you can noisily rub your fingernail around possible holes that might be the mic, and look at the recording waveform while doing it, which will spke when your fingernail rubs across the hole.

To disable the mic, you can go into your computer's BIOS setup and disable the onboard sound device, if it has that option--but it will also disable all audio output, too.
 
neptronix said:
IE is a joke and has been for almost 2 decades now :lol: not even worth discussing or considering it's use.

This post isn't so much about security, but spying. IE is also very bad in this regard. Have you seen the default settings for internet explorer in Windows 10? holy shit.. Windows 10 is a personal privacy nightmare. I wonder what things it is doing that it *isn't* telling us about.
amberwolf said:
TheBeastie said:
I guess what I might be saying from all this is don't get me started on IT and security... :roll:
Except, this isn't necessarily about security, it's about privacy (whcih can be the same, but aren't always). You can be very secure (from outside attack), while still not having any privacy (because of built-in functions of the applications or hardware you use, whether you're told about them or not).

I think security and your vulnerability to get spied on go hand in hand together.
Googles attitude to your private data is only ever going to be cared about just enough for you to continue using them at best.
Some of Googles latest Android vulnerabilities have been a joke and of dubious nature. And if Androids past is anything to go by it will take years before this bug is finally updated on everyones devices if at all.

The vulnerability I am pointing to here is where merely just putting in an extra long random password entry into any Android locked device causes it to simply give up and allow access, I think this is incredibly dubious vulnerability to peoples privacy...
http://www.engadget.com/2015/09/16/android-lock-screen-bypass-flaw/

If classic spy movies are true then the girl friend who is just going to the kitchen/bathroom after having sex with the CIA spy quickly jumps on his Android phone gets through the strict password access with an extra long password and then finds the juicy detail of his true identify and then calls her assets to make him disappear forever, or just keep stealing his data...

[youtube]J-pFCXEqB7A[/youtube]
 
Back
Top