Holy shit. I only use chrome when I have to for work, and these assholes...

https://www.thatprivacyguy.com/blog/chrome-silent-nano-install/

@tito_swineflu cat /dev/null >! weights.bin; sudo chown 0:0 weights.bin

… if the best option is somehow not an option.

@js yeah, sure. Anyone can nuke it, it's infuriating that it's there at all.
@tito_swineflu well, giving abusers free reign and not expecting abuse, would’t that be a tad naive?
@js @tito_swineflu From what I have read it redownloads every time
@Bobo_PK @js I piped /dev/null into the file and so far it hasn't come back.
@tito_swineflu @Bobo_PK As in, you still kept Chrome on there?
@js @Bobo_PK I have to use chrome to log in to work. Vivaldi won't work, firefox (ugh) won't work.
@js @tito_swineflu perhaps even chattr +i

@barubary ah the nuclear option

i love this one

@js @tito_swineflu

@tito_swineflu ughhh have you figured out a way to get rid of it without it automatically coming back?

@iris @tito_swineflu I'll have to check if my Vivaldi is affected.

If I had this issue, I'd try creating an empty weights.bin file and then locking down the permissions.

@corbden @iris @tito_swineflu

FWIW, my instance of Vivaldi (7.9.3970.60 (Official Build) (64-bit)) on AVLinux (AVL_MXe-25_x64 Ease November 27 2025 base: Debian GNU/Linux 13 (trixie)) does not include that enormous file (yet?). There's something similar in the config as shown. I don't know what it is, but it's much smaller and differently named.

@odjbo @iris @tito_swineflu I do know Vivaldi takes intentional steps to remove chromium's spyware, so this tracks, but you never know. Thanks for checking.

The other file you found looks legit. It's only 7MB.

@corbden @odjbo @iris I use vivaldi most of the time. It doesn't have this file.

@corbden @iris @tito_swineflu

For UNIX/Linux environments, something like:

1. Stop Chrome
2. Execute:

sudo -i SUDO_HOME="$( eval echo "~${SUDO_USER}" )" for TARG in $( find ${SUDO_HOME} -name weights.bin 2> /dev/null ); do rm "${TARG}" install -bDm 0600 -o root -g root /dev/null "${TARG}" done Ought to work?

Notes:
* If you use multiple profiles and suspect you might have more than one such file, that should take care of them all
* Depending on your
sudo version, explicitly setting SUDO_HOME might be unnecessary

@ferricoxide @corbden @iris i just piped /dev/null into the file. It wasn't rewritten upon restarting chrome.
@tito_swineflu @corbden @iris Other threads have indicated that nuking or corrupting the file results in re-creation. I was trying to prevent re-creation. :)
@ferricoxide @corbden @iris i think that's for deleting it. I don't think chrome validates the file beyond its existence
@iris yeah. I just piped /dev/null into it and so far it hasn't come back, even without locking down the permissions. It may come back though, google is sneaky.
@iris @tito_swineflu searched for Gemini in the Chrome config vars interface and disabled every one
@foobarry @iris I'm not certain this will remove the file. Did it remove the file after you did that?
@tito_swineflu @iris not proactively remove it but should stop it appearing?
@tito_swineflu even more beautiful how it is installed for every user, on the same machine, as well 💩
@kamstrup @tito_swineflu looks like at least not per profile, but per version for funsies!

@tito_swineflu
I only use chrome when absolutely necessary. This is in my bashrc. In launches when I need it then wipes all traces from my account when I'm done.

#Google #Chrome

function _chrome {
/opt/google/chrome/chrome --no-first-run >& /dev/null &
wait $!
rm -rf ${HOME}/.config/google-chrome ${HOME}/.cache/fontconfig ${HOME}/.cache/google-chrome ${HOME}/.cache/mesa_shader_cache
}
alias chrome='_chrome &'

@allpoints Unfortunately, it's the only browser I can use for work. Not even other chromium-based browsers. Removing all traces between runs would be more hassle than it's worth.

@tito_swineflu Fair. I was mostly just sharing that for the thread.

FWIW, I also have a setup where the browser runs in another account and shared camera and mic for video calls etc. At least that limits the blast radius to the alternate account.

Regardless, we shouldn't have to play these games to defend ourselves against the tools we're forced to use.

@tito_swineflu

Does this happen with chromium and other chrome-based browsers?

@tito_swineflu filename matches, it weigh(t)s and should go into the bin.

@tito_swineflu Holy crap. Even on linux machines.

Glad I use Vivaldi. Sorry you have to use the chrome thing for work...

@tito_swineflu Lol, that's what they do
@tito_swineflu

Yeah. And, I dunno about you, but I use multiple profiles to keep different browsing-contexts wholly separate from others. So…

Fortunately, for the last year, the only time I use
#Chrome is when I need to run #AWS's #FleetManager (it's basically unusable under #Firefox). So, only the one profile has the file, currently.