Google Chrome has an API accessible only from *.google.com (news.ycombinator.com)

submitted 4 months ago by tblFlip@pawb.social to c/tech@pawb.social

2 comments fedilink hide all child comments

So apparently Chrome ships with an extension that is invisible to the user, can not be disabled and allows any *.google.com page to get detailed information about CPU and memory usage.

It is apparently at least 10 years old, was originally developed to debug Hangouts and people do claim that it is also shipped in Brave and Edge.

Who knows what else might be hidden in there!

Original Tweet: https://xcancel.com/lcasdev/status/1810696257137959018
Chrome Source: https://source.chromium.org/chromium/chromium/src/+/main:chrome/browser/resources/hangout_services/
Commit from October, 2013: https://github.com/chromium/chromium/commit/422c736b82e7ee763c67109cde700db81ca7b443

top 2 comments

sorted by: hot top controversial new old

[-] Ptsf@lemmy.world 2 points 4 months ago

Lol that comment chain is wild. Apparently according to the grapheneos devs it's a optional build flag they're all enabling. Not a great look.

[-] ProgrammingSocks@pawb.social 3 points 3 months ago

No matter how much is supposedly stripped out I will not use a chromium based browser, and this is why.

this post was submitted on 10 Jul 2024

76 points (100.0% liked)

Furry Technologists

1314 readers

3 users here now

Science, Technology, and pawbs

founded 1 year ago

MODERATORS

Soatok@pawb.social

stefenauris@pawb.social