Google Chrome has an API accessible only from *.google.com
Google Chrome has an API accessible only from *.google.com
So apparently Chrome ships with an extension that is invisible to the user, can not be disabled and allows any *.google.com page to get detailed information about CPU and memory usage.
It is apparently at least 10 years old, was originally developed to debug Hangouts and people do claim that it is also shipped in Brave and Edge.
Who knows what else might be hidden in there!
Original Tweet: https://xcancel.com/lcasdev/status/1810696257137959018
Chrome Source: https://source.chromium.org/chromium/chromium/src/+/main:chrome/browser/resources/hangout_services/
Commit from October, 2013: https://github.com/chromium/chromium/commit/422c736b82e7ee763c67109cde700db81ca7b443
Lol that comment chain is wild. Apparently according to the grapheneos devs it's a optional build flag they're all enabling. Not a great look.
No matter how much is supposedly stripped out I will not use a chromium based browser, and this is why.