Re: [mediacapture-record] Improvements to Privacy & Security Considerations (#196)

@jan-ivar 

> We know this pattern leads to permission escalation (e.g. sites asking for microphone just to select audio output devices or get local ip addresses)

Can you kindly explain what you mean?

Audio output devices can only currently be selected at Firefox, Nightly, AFAICT audio output devices are impossible to select at Chromium, Chrome by default whatsoever using `getUserMedia()` - only microphone input can be selected - as evidenced by the numerous bugs that have filed at specification and Chromium bug tracker to formally implement that capability.

How does `getUserMedia()` permissions being granted expose local IP addresses?

-- 
GitHub Notification of comment by guest271314
Please view or discuss this issue at https://github.com/w3c/mediacapture-record/issues/196#issuecomment-653014639 using your GitHub account

Received on Thursday, 2 July 2020 13:45:02 UTC