Safari exploit can leak browser histories and Google account info
an exploit that lets attackers obtain your recent browser history, and even some Google account info, from Safari 15 across all supported platforms as well as third-party browsers on iOS 15 and iPadOS 15. The IndexedDB framework is violating the"same-origin" policy that prevents documents and scripts from one location from interacting with content from another, letting appropriately coded websites deduce Google info from signed-in users as well as histories from open tabs and windows.
The flaw only compromises the names of the databases rather than the content itself. However, this would still be enough for a malicious site owner to grab your Google username, discover your profile picture and otherwise learn more about you. The history could also be used to piece together a rudimentary profile of the sites you like. Private browsing won't defeat the exploit, FingerprintJS said.
We've asked Apple for comment. FingerprintJS said it reported the issue on November 28th, however, and that Apple hadn't yet addressed it with security patches honoring same-origin policy. Until then, the only solution may be to either use a third-party browser on Macs or block all JavaScript, neither of which is necessarily an option.
All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Indonesia Berita Terbaru, Indonesia Berita utama
Similar News:Anda juga dapat membaca berita serupa dengan ini yang kami kumpulkan dari sumber berita lain.
Google starts rolling out the Pixel 6 and 6 Pro's delayed December update | EngadgetGoogle has begun rolling out the Pixel 6 and 6 Pro’s latest update following a delay in December..
Baca lebih lajut »
Pennsylvania dentist allegedly killed wife on African safari to collect millions in life insurance, FBI saysA Pennsylvania dentist gunned down his wife during an Africa hunting trip so he could collect nearly $5,000,000 in life insurance and start a new life with his longtime mistress, authorities say.
Baca lebih lajut »
Dentist Allegedly Killed Wife on African Safari to Collect Millions in Life Insurance: FBIA Pennsylvania dentist gunned down his wife during an Africa hunting trip so he could collect nearly $5 million in life insurance and start a new life with his longtime mistress, authorities said.
Baca lebih lajut »
Dentist Accused of Murdering Wife on Africa Hunting Safari for Insurance CashHe proceeded to cremate her body three days after the incident—and eventually collected approximately $5 million in life insurance, according to the feds
Baca lebih lajut »
Lawsuit claims Google and Facebook brokered secret deal to dominate ad marketFacebook's COO allegedly called it a 'big deal strategically'
Baca lebih lajut »