Google.com pages found to have access to hidden Chrome API allowing hardware info such as CPU usage to be viewed

https://lemmy.world/post/17393879

Google.com pages found to have access to hidden Chrome API allowing hardware info such as CPU usage to be viewed - Lemmy.World

h/t @[email protected] https://fedi.simonwillison.net/@simon/112757810519145581 [https://fedi.simonwillison.net/@simon/112757810519145581]

Google web services take advantage of an API that only Google knows about.

Completely unsurprising. Google should have been given the anti-trust treatment long ago. There's not a saving us because the ones to save us are completely complicit. And people who write independent browsers will be smacked back down by having places like YouTube throttle them.

In the comments its not just chrome that is affected.

Its apparently all Chromium browsers.

including Vanadium?

This comes from hangout_services/thunk.js

I searched for hangout in the vanadium repo, no result, so it’s not patched there either: github.com/GrapheneOS/Vanadium

GitHub - GrapheneOS/Vanadium: Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS repositories and doesn't include patches not relevant to the build targets used on GrapheneOS.

Privacy and security enhanced releases of Chromium for GrapheneOS. Vanadium provides the WebView and standard user-facing browser on GrapheneOS. It depends on hardening in other GrapheneOS reposito...

GitHub