Google Chrome has an API accessible only from *.google.com

https://pawb.social/post/11767079

Google Chrome has an API accessible only from *.google.com - Pawb.Social

So apparently Chrome ships with an extension that is invisible to the user, can not be disabled and allows any *.google.com page to get detailed information about CPU and memory usage. It is apparently at least 10 years old, was originally developed to debug Hangouts and people do claim that it is also shipped in Brave and Edge. Who knows what else might be hidden in there! Original Tweet: https://xcancel.com/lcasdev/status/1810696257137959018 [https://xcancel.com/lcasdev/status/1810696257137959018] Chrome Source: https://source.chromium.org/chromium/chromium/src/+/main:chrome/browser/resources/hangout_services/ [https://source.chromium.org/chromium/chromium/src/+/main:chrome/browser/resources/hangout_services/] Commit from October, 2013: https://github.com/chromium/chromium/commit/422c736b82e7ee763c67109cde700db81ca7b443 [https://github.com/chromium/chromium/commit/422c736b82e7ee763c67109cde700db81ca7b443]

Lol that comment chain is wild. Apparently according to the grapheneos devs it’s a optional build flag they’re all enabling. Not a great look.
No matter how much is supposedly stripped out I will not use a chromium based browser, and this is why.