Microphone Access via JavaScript on Cards (Desktop and Mobile)

[sorata]

I believe there is work in plan to make things more secure and perhaps mic access can come to fruition if the risks were fairly mitigated. But, to do it now would be a step back from security perspective, especially as a lot of Anki users aren’t very tech-savvy.

You might be interested to look at the discussion here:

@dae

This in turn frustrated me, as I think security is important in the context of shared decks, due to user expectations. You’ve implied exposing these APIs would not be a significant change in security, but I think that’s incorrect. The majority of Anki’s private web APIs are blocked to the reviewer, to prevent this kind of abuse. That’s a fairly recent development, after demonstrated exploits were revealed. There have been some more since then, which have also been fixed. I want to see us tightening up this area further, not loosening it, as shared decks have always been intended to be safe to download.