devtake.dev
AI Security Hardware Open Source Policy Apple

#browser-security

RSS
Related: #security · 3 #chromium · 2 #edge · 2 #privacy · 2 #chrome · 1 #credential-theft · 1 #dev-tools · 1 #fingerprinting · 1 #google · 1 #microsoft · 1
A consumer M.2 solid-state drive, the kind of storage the FROST attack times from a browser tab
Web·

A browser SSD timing trick can fingerprint your browsing, and cookies won't stop it

Graz researchers built FROST, a browser side-channel that times SSD activity to guess which sites and apps you're running. Here's how it works and what helps.

Google Chrome logo on a dark background
Security·

Google's bug tracker auto-published exploit code for an unpatched Chromium flaw. The bug is still live.

Chromium Issue 1396278 went public on May 20 because Google's tracker auto-clears restrictions on stale closed bugs. The flaw, reported in 2022, was never fixed.

A padlock on a chain, illustrating credential security.
Security·

Microsoft Edge keeps every saved password in cleartext memory. Microsoft calls it 'by design'.

A researcher showed Edge decrypts the entire password vault at launch and leaves it in process memory. Chrome decrypts on demand. Microsoft says it's intentional.