Topicsbrowsers8 items
Laserphile found that opening AliExpress could keep multipoint Bluetooth headphones from switching devices—because hidden Web Audio contexts were fingerprinting the browser while leaving the audio path occupied.
Inspired by blog.laserphile.com · Laserphile
Unit 42’s three local malware attacks on Google Password Manager synced passkeys in Chrome on Windows with a TPM—showing stolen sessions are not the only risk when onboarding, UV flags, and a non-rotatable master secret leak.
Inspired by unit42.paloaltonetworks.com · Unit 42
Privacy researchers found three WebKit paths—DNS prefetch, WebAuthn related origins, and WebTransport—that can bypass browser proxy settings and iCloud Private Relay, revealing real IPs even when ordinary page loads are relayed.
Inspired by mysk.blog · Talal Haj Bakry and Tommy Mysk
Why the website is often the more private version of a service than a native app—browser sandbox boundaries limit device access in ways store apps do not, while still leaving room for tracking if third-party scripts load on the open web.
Inspired by nooneshappy.com · No One's Happy
Alexandra Klepper introduces WebMCP, a proposed standard for sites to expose structured tools to AI agents in the open browser tab—arguing explicit, inspectable actions beat brittle screenshot-and-click automation, with a sharper security boundary when agents act inside authenticated sessions.
Inspired by developer.chrome.com · Alexandra Klepper
Safari Technology Preview 248 adds experimental TC39 BigInt Math and WebDriver support for the Digital Credentials API—asking whether browsers should ship Stage 1 proposals for early testing, and noting that verified identity on the web may matter more than a few new JavaScript methods.
Inspired by webkit.org · WebKit
Joseph Hu analyzed hundreds of Chrome Web Store title changes and found that title edits behave like ranking trades: extensions that changed titles were nearly four times more likely to see a meaningful ranking shift within two weeks, with almost identical odds of gaining or losing.
Inspired by extensionranker.com · Joseph Hu
Compatibility features that make old protocols work can also open paths through network protections we assume are already solid.
Inspired by sa.my · Samy Kamkar
