Results 1 to 1 of 1
  1. #1
    Damosa's Avatar
    Join Date
    Nov 2019
    Gender
    male
    Posts
    189
    Reputation
    26
    Thanks
    61
    My Mood
    Buzzed

    Google Just Gave Millions Of Users A Reason To Quit Chrome

    ================================================== ==============
    Google Chrome is now running a process inside it which make may users uncomfortable.
    ================================================== ==============

    Google Chrome’s seamless updates have long been a big part of its appeal. But perhaps not anymore. With the latest version of Chrome already installed on hundreds of millions of computers and smartphones around the world, a significant warning has been issued that you might not like what it has running inside.



    Picked up by The Register, Chrome 80 (check your version by going to Settings > About Chrome) contains a new browser capability called ScrollToTextFragment. This is deep linking technology tied to website text, but multiple sources have revealed it is a potentially invasive privacy nightmare.

    To understand why requires a brief guide to how ScrollToTextFragment works. The simple version is it allows Google to index websites and share links down to a single word of text and its position on the page. It does this by creating its own anchors to text (using the format:
    Code:
    #:~:text=[prefix-,]textStart[,textEnd][,-suffix]
    ⇡ This doesn’t require the permission of the web page author to do so. Google gives the harmless example:

    Code:
    [https://en.wikipedia.org/wiki/Cat#:~:text=On islands, birds can contribute as much as 60% of a cat's diet]
    ⇡ This loads the page for Cat, highlights the specified text, and scrolls directly to it.”

    The deep linking freedom of ScrollToTextFragment can be very useful for sharing very specific links to parts of webpages. The problem is it can also be exploited. Warning about the development of ScrollToTextFragment in December, Peter Snyder, a privacy researcher at Brave Browser explained:

    "Consider a situation where I can view DNS traffic (e.g. company network), and I send a link to the company health portal, with [the anchor] #:~:text=cancer. On certain page layouts, I might be able [to] tell if the employee has cancer by looking for lower-on-the-page resources being requested.”

    And it was Snyder who spotted that ScrollToTextFragment is now active inside Chrome 80 stating that "Imposing privacy and security leaks to existing sites (many of which will never be updated) REALLY should be a 'don't break the web’, never-cross, redline. This spec does that."



    David Baron, a principal engineer at Mozilla, maker of Firefox, also warned against the development of ScrollToTextFragment, saying: "My high-level opinion here is that this a really valuable feature, but it might also be one where all of the possible solutions have major issues/problems.”

    Defending the decision, Google’s engineers have issued a document outlining the pros/cons of the deep linking technology in ScrollToTextFragment and Chromium engineer David Bokan wrote this week that “We discussed this and other issues with our security team and, to summarize, we understand the issue but disagree on the severity so we're proceeding with allowing this without requiring opt-in.”

    Bokan says the company will work on an opt-out option, but how many will even know ScrollToTextFragment exists? And here lies the nub of it: Google has such power it can be judge and jury to decide what is or isn’t acceptable. So ScrollToTextFragment, with its unresolved privacy concerns and lack of support from other browser makers, is now out there, running in the background of hundreds of millions of Chrome installations.

    Whether you want to be part of that is up to you.

    Source: Forbes.

    —————————————————————

  2. The Following 3 Users Say Thank You to Damosa For This Useful Post:

    Janitor (02-21-2020),Maastonak (12-28-2020),UnderTheSea (04-19-2020)

Similar Threads

  1. Gmail just gave me a heartattack
    By HeroicXPharaoh in forum General
    Replies: 10
    Last Post: 02-24-2017, 07:47 PM
  2. [Image] Some retard just gave me a free knife lol
    By Bodvar in forum General
    Replies: 30
    Last Post: 05-03-2016, 07:26 AM
  3. Did other people just got perma ban for no reason?
    By mrscarygamer12 in forum Call of Duty Black Ops 2 Discussions
    Replies: 15
    Last Post: 02-13-2013, 01:39 AM
  4. Just wondering if there is a reason the mods aren't around.
    By tooopher in forum Realm of the Mad God Help & Requests
    Replies: 1
    Last Post: 02-11-2013, 07:41 PM
  5. [Release] killerhack v1 (Just for windows xp user)
    By mrkiller2010 in forum CrossFire Hacks & Cheats
    Replies: 34
    Last Post: 09-07-2010, 05:17 PM

Tags for this Thread