fedi.simonwillison.net

Hirom , 1 month ago to technology in Google Chrome ships a default, hidden extension that allows code on *.google.com access to private APIs, including your current CPU usage

Cannot reproduce on chromium. Has anyone reproduced it?

BlueEther , 1 month ago

yeah:

<span style="color:#323232;">{
</span><span style="color:#323232;">  "value": {
</span><span style="color:#323232;">    "archName": "arm64",
</span><span style="color:#323232;">    "features": [],
</span><span style="color:#323232;">    "modelName": "Apple M2",
</span><span style="color:#323232;">    "numOfProcessors": 8,
</span><span style="color:#323232;">    "processors": [
</span><span style="color:#323232;">      {
</span><span style="color:#323232;">        "usage": {
</span><span style="color:#323232;">          "idle": 10841460,
</span><span style="color:#323232;">          "kernel": 611796,
</span><span style="color:#323232;">          "total": 13342920,
</span><span style="color:#323232;">          "user": 1889664
</span><span style="color:#323232;">        }
</span><span style="color:#323232;">      },...
</span>

Andromxda OP , 1 month ago

Did you use normal chromium or Ungoogled Chromium? I tried it on the Arc Browser (which is based on Chromium), and it worked, but it didn’t work on Ungoogled Chromium.

Hirom , 1 month ago

Neither. I use a chromium package from my linux distribution.

It has many patches on top of the upstream chromium. That probably explain why that unwanted feature isn’t there.

This issue appear on Google Chrome for Windows on my other machine. Just uninstalled it, never used it anyway.

jherazob , 1 month ago

Reproduced here, Chromium on Linux Mint desktop. You need to have open a Google.com site for it to work though.

crazyminner , 1 month ago to technology in Google Chrome ships a default, hidden extension that allows code on *.google.com access to private APIs, including your current CPU usage

Suprise Suprise!

vox , 1 month ago to technology in Google Chrome ships a default, hidden extension that allows code on *.google.com access to private APIs, including your current CPU usage

i think it’s used for the performance testing feature in google meet n stuff

RecluseRamble , 1 month ago

Of course there’s some legitimate use case to it. Just like every privacy rights undermining bill helps “the children”. Doesn’t mean that’s the only or even the main goal.