To Listen Without Consent – Abusing the HTML5 Speech | GUYA.NET

I found a bug in Google Chrome that allows an attacker to listen on the user speech without any consent from the user and without any indication. Even blocking any access to the microphone under chrome://settings/content will not remedy this flaw.