fbpx
Connect with us

Tech

Safari exploit can leak browser histories and Google account info

Published

on

Safari exploit can leak browser histories and Google account info

Apple device users appear to be vulnerable to a significant browser privacy flaw. According to 9to5Mac, FingerprintJS has disclosed an exploit that lets attackers obtain your recent browser history, and even some Google account info, from Safari 15 across all supported platforms as well as third-party browsers on iOS 15 and iPadOS 15. The IndexedDB framework (used to store data on many browsers) is violating the “same-origin” policy that prevents documents and scripts from one location (such as a domain or protocol) from interacting with content from another, letting appropriately coded websites deduce Google info from signed-in users as well as histories from open tabs and windows.

The flaw only compromises the names of the databases rather than the content itself. However, this would still be enough for a malicious site owner to grab your Google username, discover your profile picture and otherwise learn more about you. The history could also be used to piece together a rudimentary profile of the sites you like. Private browsing won’t defeat the exploit, FingerprintJS said.

We’ve asked Apple for comment. FingerprintJS said it reported the issue on November 28th, however, and that Apple hadn’t yet addressed it with security patches honoring same-origin policy. Until then, the only solution may be to either use a third-party browser on Macs or block all JavaScript, neither of which is necessarily an option.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.

Go to Source

Click to comment

Leave a Reply

Tech

61% off Aura’s robust antivirus software for Window, Mac, and Android – Deal Alert

Published

on

61% off Aura’s robust antivirus software for Window, Mac, and Android – Deal Alert

Skip to content

aura image

Aura

Note: When you purchase something after clicking links in our articles, we may earn a small commission. Read our affiliate link policy for more details.

  • Security
  • Anti Malware

Go to Source

Continue Reading

Tech

Acer Nitro XV272 review: Top-tier gaming on a 1080p monitor

Published

on

Acer Nitro XV272 review: Top-tier gaming on a 1080p monitor

Note: When you purchase something after clicking links in our articles, we may earn a small commission. Read our affiliate link policy for more details.

Go to Source

Continue Reading

Tech

Best free PDF editors: Our top picks

Published

on

Best free PDF editors: Our top picks

Note: When you purchase something after clicking links in our articles, we may earn a small commission. Read our affiliate link policy for more details.

  • Productivity Software

, Freelance contributor

Michael Ansaldo is veteran consumer and small-business technology journalist. He contributes regularly to TechHive and PCWorld.

Go to Source

Continue Reading
Home | Latest News | Tech | Safari exploit can leak browser histories and Google account info
a

Market

Trending