Audio & security

Boris Smus wrote an excellent blog post about the use of WebAudio for short
range data transmission using inaudible audio (
http://smus.com/ultrasonic-networking/).

That got me thinking regarding the security implications of the Web Audio
API & inaudible audio in general.
I'm not really sure if & how this can be exploited. XSS can use it to send
data to the user's proximity, but it can already send it to anywhere in the
world today.
It might more likely be used to detect other users in the vicinity &
communicate with them, which can be a feature but can also be a security
issue if the user is unaware.

Is this use of inaudible audio worth considering in term of its security?
Is it something that we want to require the user's permission for? Maybe a
warning/indicator? Or am I just being paranoid?

Yoav

Received on Friday, 9 August 2013 21:31:28 UTC