Are you saying that Notion desktop has access to microphone audio or it is only able to determine if the microphone is in use?
The former is actually concerning to me. I can't imagine caring if it only knows my microphone is in use.
12 karma · joined June 10, 2025
The former is actually concerning to me. I can't imagine caring if it only knows my microphone is in use.
Giving an LLM access to a tool that has privileged access to some system is no different than providing a user access to a REST API that has privileged access to a system.
This is a lesson that should already be deeply ingrained. Just because it isn't a web frontend + backend API doesn't absolve the dev of their auth responsibilities.
It isn't a prompt injection problem; it is a security boundary problem. The fine-grained token level permissions should be sufficient.