theweaselking: (Default)
[personal profile] theweaselking
Eavesdropping through a smartphone gyroscope.

"Since iOS and Android require no special permissions to access the gyro, our results show that apps and active web content that cannot access the microphone can nevertheless eavesdrop on speech in the vicinity of the phone."

(no subject)

Date: 2014-08-26 06:35 pm (UTC)
From: [identity profile] ironphoenix.livejournal.com
Interestingly, FireFox sez the link is untrusted...

(no subject)

Date: 2014-08-26 06:40 pm (UTC)
From: [identity profile] theweaselking.livejournal.com
How odd. The certificate is correctly signed from a real root.

(no subject)

Date: 2014-08-26 07:40 pm (UTC)
From: [identity profile] ironphoenix.livejournal.com
My browser (Firefox 31.0 on Win7 SP1) sez:
crypto.stanford.edu uses an invalid security certificate.
The certificate is not trusted because no issuer chain was provided.
(Error code: sec_error_unknown_issuer)

(no subject)

Date: 2014-08-26 07:44 pm (UTC)
From: [identity profile] theweaselking.livejournal.com
Weird. I'm seeing the site signed by Internet2, signed by AddTrust, signed by Usercorp Datatrust root CA.

Same browser and OS. I checked a stock install of Chrome, too: same cert, same validity.

(no subject)

Date: 2014-08-26 07:57 pm (UTC)
From: [identity profile] ironphoenix.livejournal.com
Chrome is fine with it, on the same machine. Weird indeed.

And, it's pretty scary that this is possible, and that the vendors are unlikely to do much to prevent it.

(no subject)

Date: 2014-08-26 07:26 pm (UTC)
andrewducker: (Default)
From: [personal profile] andrewducker
Working for me (Firefox, Win7)

(no subject)

Date: 2014-08-26 08:34 pm (UTC)
From: [identity profile] wyatt1048.livejournal.com
You are not alone, I'm getting it too.

Profile

theweaselking: (Default)theweaselking
Page generated Mar. 30th, 2026 11:34 pm