Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
github.com/rviscarra/webrtc-speech-to-text
The speech to text server only depends on Go 1.12.
This project is only a proof of concept and SHOULDN'T be deployed on a production environment as it lacks even the most basic security measures.
The project includes a Makefile, to build execute:
make
This should generate a transcribe-server
binary.
The server receives the following flags through the command line:
--google.cred
(Required)
Path to a Google Cloud credential's file. The project must have Google Speech activated.
--http.port
(Optional)
Specifies the port where the HTTP server should listen, by default the port 9000 is used.
--stun.server
(Optional)
Allows to speficy a different STUN server, by default a Google STUN server is used.
The demo works on Chrome 75, Firefox 67 and Safari 12.1.1
To run the demo execute the server and navigate to http://localhost:9000
.
After pressing the Start button a dialog asking for permission to access the microphone should appear. After grating access a WebRTC connection is made to the local server, where audio data is decoded and streamed to Google Speech (streaming recognition).
Say something and press the Stop button, the results (if any) should appear on screen.
MIT - see LICENSE for the full text.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.