<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>devtake.dev — #browser-security</title><description>Articles tagged browser-security on devtake.dev.</description><link>https://devtake.dev/</link><language>en-us</language><item><title>A browser SSD timing trick can fingerprint your browsing, and cookies won&apos;t stop it</title><link>https://devtake.dev/article/ssd-activity-browser-side-channel/</link><guid isPermaLink="true">https://devtake.dev/article/ssd-activity-browser-side-channel/</guid><description>Graz researchers built FROST, a browser side-channel that times SSD activity to guess which sites and apps you&apos;re running. Here&apos;s how it works and what helps.</description><pubDate>Wed, 03 Jun 2026 11:30:00 GMT</pubDate><category>web</category><category>privacy</category><category>security</category><category>web</category><category>browser-security</category><category>fingerprinting</category><category>side-channel</category><category>supply-chain</category><author>naomi-park</author></item><item><title>Google&apos;s bug tracker auto-published exploit code for an unpatched Chromium flaw. The bug is still live.</title><link>https://devtake.dev/article/google-chromium-exploit-code-leak/</link><guid isPermaLink="true">https://devtake.dev/article/google-chromium-exploit-code-leak/</guid><description>Chromium Issue 1396278 went public on May 20 because Google&apos;s tracker auto-clears restrictions on stale closed bugs. The flaw, reported in 2022, was never fixed.</description><pubDate>Sun, 24 May 2026 10:00:00 GMT</pubDate><category>security</category><category>security</category><category>chromium</category><category>chrome</category><category>google</category><category>service-workers</category><category>dev-tools</category><category>edge</category><category>browser-security</category><author>luca-reinhardt</author></item><item><title>Microsoft Edge keeps every saved password in cleartext memory. Microsoft calls it &apos;by design&apos;.</title><link>https://devtake.dev/article/microsoft-edge-cleartext-passwords-memory/</link><guid isPermaLink="true">https://devtake.dev/article/microsoft-edge-cleartext-passwords-memory/</guid><description>A researcher showed Edge decrypts the entire password vault at launch and leaves it in process memory. Chrome decrypts on demand. Microsoft says it&apos;s intentional.</description><pubDate>Tue, 05 May 2026 08:45:00 GMT</pubDate><category>security</category><category>security</category><category>microsoft</category><category>edge</category><category>browser-security</category><category>credential-theft</category><category>chromium</category><category>passwords</category><category>privacy</category><author>luca-reinhardt</author></item></channel></rss>