Furry Technologists

1304 readers

18 users here now

Science, Technology, and pawbs

founded 1 year ago

MODERATORS

[email protected]

Google Chrome has an API accessible only from *.google.com (news.ycombinator.com)

submitted 3 months ago by [email protected] to c/[email protected]

2 comments fedilink hide all child comments

So apparently Chrome ships with an extension that is invisible to the user, can not be disabled and allows any *.google.com page to get detailed information about CPU and memory usage.

It is apparently at least 10 years old, was originally developed to debug Hangouts and people do claim that it is also shipped in Brave and Edge.

Who knows what else might be hidden in there!

Original Tweet: https://xcancel.com/lcasdev/status/1810696257137959018
Chrome Source: https://source.chromium.org/chromium/chromium/src/+/main:chrome/browser/resources/hangout_services/
Commit from October, 2013: https://github.com/chromium/chromium/commit/422c736b82e7ee763c67109cde700db81ca7b443

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 3 months ago (1 children)

Lol that comment chain is wild. Apparently according to the grapheneos devs it's a optional build flag they're all enabling. Not a great look.

[–] [email protected] 3 points 3 months ago

No matter how much is supposedly stripped out I will not use a chromium based browser, and this is why.