Safari exploit can leak browser histories and Google account info | Engadget

an exploit that lets attackers obtain your recent browser history, and even some Google account info, from Safari 15 across all supported platforms as well as third-party browsers on iOS 15 and iPadOS 15. The IndexedDB framework is violating the"same-origin" policy that prevents documents and scripts from one location from interacting with content from another, letting appropriately coded websites deduce Google info from signed-in users as well as histories from open tabs and windows.

The flaw only compromises the names of the databases rather than the content itself. However, this would still be enough for a malicious site owner to grab your Google username, discover your profile picture and otherwise learn more about you. The history could also be used to piece together a rudimentary profile of the sites you like. Private browsing won't defeat the exploit, FingerprintJS said.

We've asked Apple for comment. FingerprintJS said it reported the issue on November 28th, however, and that Apple hadn't yet addressed it with security patches honoring same-origin policy. Until then, the only solution may be to either use a third-party browser on Macs or block all JavaScript, neither of which is necessarily an option.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.

One more reason to stick with Edge

doesnt chrome already do that?

Thought Apple was so secure

Apple........ Privacy....... I don't think so.

Hmm yes, apple safety.

Seems bad. 'FingerprintJS said it reported the issue on November 28th, however, and that Apple hadn't yet addressed it with security patches honoring same-origin policy.'

But. But But apple is invulnerable according to apple.

United States Latest News, United States Headlines

Similar News:You can also read news stories similar to this one that we have collected from other news sources.

Google starts rolling out the Pixel 6 and 6 Pro's delayed December update | EngadgetGoogle has begun rolling out the Pixel 6 and 6 Pro’s latest update following a delay in December.. Still doesn't fix the horribly broken USB Audio issue that madebygoogle Google won't even acknowledge. I want one asap 連絡帳にあるのだけ着信音がするとかの、バクってある？。 それと、着信がありましたよって、どこに残る？。 着信音が無いのに、電話アプリをいちいち開くかな？。
Source: engadget - 🏆 276. / 63 Read more »

Pennsylvania dentist allegedly killed wife on African safari to collect millions in life insurance, FBI saysA Pennsylvania dentist gunned down his wife during an Africa hunting trip so he could collect nearly $5,000,000 in life insurance and start a new life with his longtime mistress, authorities say. Hey - did you guys that know GOP members in seven states SUBMITTED FRAUDULENT ELECTORAL DOCUMENTS IN THEIR CRIMINAL EFFORTS TO OVERTHROW DEMOCRACY?!?!? Thought you might want to know, seems kinda important. The Most Dangerous Game And his mistress could trust him as a murderer? She must be a good one !
Source: NBCNews - 🏆 10. / 86 Read more »

Dentist Allegedly Killed Wife on African Safari to Collect Millions in Life Insurance: FBIA Pennsylvania dentist gunned down his wife during an Africa hunting trip so he could collect nearly $5 million in life insurance and start a new life with his longtime mistress, authorities said. ThePerezHilton Omg that’s awful 💔
Source: NBCPhiladelphia - 🏆 569. / 51 Read more »

Dentist Accused of Murdering Wife on Africa Hunting Safari for Insurance CashHe proceeded to cremate her body three days after the incident—and eventually collected approximately $5 million in life insurance, according to the feds Am I the only one who thinks he looks like Walter Cronkite?
Source: thedailybeast - 🏆 307. / 63 Read more »

Scene Drop Locations – Google My MapsHappy Sunday!! Here is our most updated map of where you can find Scene on a biweekly basis:
Source: ClevelandScene - 🏆 383. / 55 Read more »

Lawsuit claims Google and Facebook brokered secret deal to dominate ad marketFacebook's COO allegedly called it a 'big deal strategically'
Source: fox32news - 🏆 547. / 51 Read more »