SOFTWARE DEVELOPER Google has announced a beta version of its Chrome web browser in a blog post today, but experts have already warned of security threats it might cause for users.
The Chrome Beta release grants web apps access to users' web cams and microphones without a plugin through the Getusermedia application programming interface (API) - a method that allows users to interact with HTML5 applications through video and audio devices.
"The Getusermedia API also allows sites to create cool new experiences that weren't previously possible in the browser. For example, Romuald Quantin and Magnus Dahlstrand at Stinkdigital have created a Magic Xylophone that you can play just by waving your hands in front of the camera," the blog post read.
However, the director of security research and communication at Trend Micro, Rik Ferguson warned that Getusermedia will be attractive to criminals.
"We have already seen both banking malware and of course targeted threats that make use of the video hardware of the victim through the installation of malware," he said.
"Getusermedia does not rely on a local file being created and subsequently uploaded, but instead allows the broadcast of a live stream of audio or video, directly through a web page which increases the security concern."
F-Secure security advisor Sean Sullivan also highlighted the risks in the Chrome Beta release.
"I'm not as worried about 'hacking' as I am things such as click-jacking. Webcam and voice controls must be clicked to enable," he said.
"One other nagging thought I've had is to wonder if Google is being very careful with the back end code. Imagine if you were to use voice search but somehow... the mic failed to stop recording and collected too much information - à la Google Street View."
Regardless of the cautionary warnings, Google said that Getusermedia is "the first big step for WebRTC", a new real-time communications standard that aims to allow high-quality video and audio communication on the web.
Google's Chrome Beta release also brings improvements in Google Cloud Print so that printers are integrated into Chrome's print dialog.
"This will allow easier printing to Cloud Ready printers, Google Drive, Chrome on your mobile device, or even FedEx Offices," Google added. µ
Might need to come up with a better name though
There's an app for *that*
American as Apple Spy