Google Chrome 21 and getUserMedia API
Last Updated: 2012-08-01 13:30:54 UTC
by Johannes Ullrich (Version: 1)
Google yesterday released Chrome 21, the latest version of Google's browser. In addition to the usual set of bug fixes (including some critical security patches), Chrome now joins Opera with support for the getUserMedia API.
From a security point of view, the critical problem is to protect the user from accidentally turning on the microphone and camera, or for a web application to turn it on without user permission. Google Chrome will show a warning message, asking the user for permission. Flash uses its own warning for this purpose, and has been subject to some clickjacking exploits that could be used to trick a user into giving it permission to use the camera/microphone.
This API has not been finalized yet. Expect changes, and bugs. Firefox will support it in version 16 (current . There is no word about support in Safari, but it is likely going to follow. If you wnat to experiment with it, see http://www.html5rocks.com/en/tutorials/getusermedia/intro/ for details and a demo.
Problably the best list of supported features by browser can be found at http://html5test.com
Camera Permission Dialog in Opera
Camera Permission Dialog in Chrome
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Aug 1st 2012
1 decade ago