Innomerc One useful thing to do today
Allow camera or microphone only for sites and tasks you recognize.
More everyday safety lessonsChoose your depth. Learn at your own pace.
Understand it
A website can ask to send notifications or use your camera, microphone or location. You can say no. A video call may need a camera; a page asking you to enable notifications to prove you are human deserves suspicion.
If a site keeps sending frightening notifications, review that site’s permissions in the browser settings. A notification that looks like a system warning may simply be a website message.
Under the hood
Browser permissions are usually associated with an origin and a capability. A notification grant is not the same as installing an application. Revoking permission stops future access through that grant; it does not retrieve data already sent.
Practitioner perspective
Explain capability requests in context and provide functional denial paths. For abuse triage, identify the sending origin before assuming an endpoint infection. Notification spam, malicious downloads and browser extensions require different response steps.
App Permissions
A website can ask to send notifications or use your camera, microphone or location. You can say no. A video call may need a camera; a page asking you to enable notifications to prove you are human deserves suspicion.
Illustrated analogy · Select the image to enlargeWatch it work
A fictional, simplified model. Select a component to inspect it, or follow the steps in order.
Explore the system
Prompt
The page demands notifications.
Read every step without animation
Allow to continue
- Prompt. The page demands notifications.
- Permission saved. The browser allows messages.
- Fake warnings. The site sends alarming alerts.
The sender may be a website, not your device security service.
Permissions reviewed
- Identify site. Check which origin sends the notice.
- Revoke. Block its notification permission.
- Review actions. Check separately if anything was downloaded or entered.
Stopping spam and responding to exposure are different tasks.
What could go wrong
A site uses notification permission to display repeated fake security warnings.
What you can do
- Allow camera or microphone only for sites and tasks you recognize.
- Remove unwanted site permissions from browser settings.
Common mistakes
- A website notification is not necessarily a warning from your operating system.
- An allowed permission does not last only as long as the page is visible on every browser.
Check your understanding
Active recall: explain this idea in 30 seconds
A website can ask to send notifications or use your camera, microphone or location. You can say no. A video call may need a camera; a page asking you to enable notifications to prove you are human deserves suspicion.
Now give an example and name one limitation. Revisit the explanation if you get stuck.
Primary sources
Original explanations informed by these specifications and official resources. Source versions and lesson review are separate from product updates.
Content reviewed 2026-09-10. Read the editorial policy.