I found a bug in Google Chrome that allows an attacker to listen on the user speech without any consent from the user and without any indication. Even blocking any access to the microphone under chrome://settings/content will not remedy this flaw.
more here......http://blog.guya.net/2014/04/07/to-listen-without-consent-abusing-the-html5-speech/
more here......http://blog.guya.net/2014/04/07/to-listen-without-consent-abusing-the-html5-speech/