If you select the first option "Always allow hangouts to use your camera" and press done. Does the problem go away?

This sounds very strange and potentially a serious privacy issue. 
corina.wilson@: Could you (on the laptop this problem occurs at) go to https://test.webrtc.org, run the tests and attach the log to this bug?
Does it reproduce every time?

niklase: are there any other steps we can take here?

Hello,  Thank you so much for your assistance.  

I am happy I noticed your email.  I have the other toshiba going through a series of system restores.....(Like 10-15)  I dont know what else to try.

To answer the first question, I never have the option to select "always allow hangouts to use my webcam and mic.  It's either yes or no.  

I have 3 toshibas (+ 3 other brand chromebooks) and the one I initially sent the report in is out for repair.

However, they all are behaving strangely.  

I log out and turn off the toshiba but in the morning I am logged in again.  

None of my yubikeys are recognised since Sept 22.  Even after I remove and renew them.  

I changed the password for 2 accounts on this toshiba last night, and received confirmation in another email that the password had changed, but this Toshiba did not change my email password and makes me log in with the old one to access my account.   

Here is the webrtclog on the current toshiba I'm using with corina.wilson...   I'll double check the other too when it comes back from the repair center.

https://test.webrtc.org/report/AMIfv97M03JZihHqFvxEWvUjxeWCDyTiV-4SP_s2slzvrU4VTfmR70v8tlrmelnJJLk40fGaYY3Vw5iYhoapbuR70lcdbknUxPJwhiej6BBA_KFSzdO94rcN7Pf9AcsQg3AHfcPdnoJetOBXWcupTtsH5BOso6KDcw

I ran the current toshiba through all the logging tools and came back with several more issues. I logged the errors to https://bugs.chromium.org/p/chromium/issues/detail?id=651914 

 I have summarized below:

TPM Errors
Chromebook looks to be connecting to other routers or arp cache poisoning. 
Yubikeys no longer recognized since sept 22 or so

Password changes not recognised on device and must use old password to access.

Relogs in after I have logged out and shut down. The next morning the device is up and I am logged in.

link manager log is in base64 and in chinese.

I have a sync settings password set up  (But it's not entered) but I can see in my main account that the device is still syncing.  (I also saw that setting available in devmode, which I did not do but really need someone to help me restore my settings to normal, standard and safe.

There are approx 4 or so chrome devices associated with my account that I cant confirm are valid-  But I don't think they are. 

I need to mention that my android phones (I had 3) essentially had 20 strangers phones registered under my email on samsung.com. My android phones had windows apps, G4, G5, G6, G7, Windows and Apple based apps installed (according to samsung) 

  I suspect whomever could control my phone, made chrome customisations and added an app to propagate the changes to my google account.  Example, 2 months ago  I started getting really frustrated because I could tell the chromebooks were in dev mode-  (I never did that)  but I couldn't power wash or change settings.  Later I discovered a sim card password reset lock had been added to my phone.  When that was removed, I could powerwash the chromebooks.   

I dont use corina.wilson on google hangouts any longer.  There are big white flashing dots on the screen and I get disconnected all the time in hangouts.  (But I want too use this email.)  

I think so many bad customizations have been made to my chrome user profile, my login is still insecure.  

I've asked several times for someone to took at my user settings...  I dont change anything other than run on standard channel and do other common sense things to lock down the machine.   My chromebook and chrome settings just need to be NORMAL.  Nothing weird, bad, insecure or dev-mode ish. 

Tired of being hacked.  My android phones are all off.  I took my emails off them too.

Note this app that asked to install before I could access this forum.. This is not descriptive at all. This really you?


Thank you very much

  

Deleted: Screenshot 2016-09-30 at 10.57.07 AM.png 240 KB

	Screenshot 2016-09-30 at 10.57.07 AM.png 240 KB View Download

Deleted: testrtc-2016-09-30T18-07-44.303Z.log 19.8 KB

testrtc-2016-09-30T18-07-44.303Z.log 19.8 KB View Download

Deleted: debug-logs_20160930-112305.tgz 865 KB

debug-logs_20160930-112305.tgz 865 KB Download

Deleted: Log Analyzer-toshiba-chromebook.pdf 651 KB

Log Analyzer-toshiba-chromebook.pdf 651 KB Download

kjellander@, these problems doesn't seem directly WebRTC related. 

It looks like the website is informed that there is a camera (because it uses one), but the dropdown in the bubble doesn't report any. Agree that this looks like a serious privacy problem.

The list of media devices in the bubble comes from MediaCaptureDevicesDispatcher::GetVideoCaptureDevices() - any recent changes there?

corina.wilson@: If you can reproduce the situation again, and in your second screenshot you click "Continue blocking..." and then "Done", does it stop the video?

Yes, I received the chromebook back today from the repair center.  I'll start using it again tomorrow.

 I NEVER have any choice initially other than allow or deny.  I never block it, and when I try to allow it it said there was no camera.  If it comes up again, I will try to block it and see what happens.  Report back on this in the next few days.


Could someone please answer a question for me.  Are all these issues on all my chromebooks related to my specific gmail accounts, or specific to the chromebooks?  

Powerwash, reset, powerwash, reset.  
Am I wasting my time doing this, or should I just keep using these devices and checking them for toxicity every couple days?  

I am trying very hard to audit them and ensure they have standard settings, but I can't find a baseline for what standard, beta, and dev flags should be set as.  Example was both toshibas randomly had bluetooth turned on one day last week...

I went through my settings and found bluetooth was on in beta channel, though I was operating on standard (and always do)..  I want to lock these down with chains.  Is there a map I could use to audit and help restore my machines because the chrome OS recovery app, reset settings and power wash clearly isnt doing it.  Thank you very much!

PS.  These are not managed devices. Or shouldn't be.

Thank you for providing more feedback. Adding requester "dhaddock@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

msramek@, I don't think there's any privacy problem here from what I can see. The camera is missing and it doesn't appear to be used either. The hangouts screenshot doesn't show the local camera, only the profile picture on the bug reporter.

niklase@: Ah... you're right. Nevermind me then.

As a side note, the bubble is still weird in its current shape if there is no camera device (as opposed to a blocked camera), but I believe we already have a bug for that somewhere...

WontFix per #9 and #10.