Shulou(Shulou.com)11/24 Report--

CTOnews.com, Oct. 21, according to the latest security report released by Fingerprint, all Chromium-based browsers, including Google's Chrome browser, have vulnerabilities that can reveal sites you visit frequently.

The main problem is site participation (Site Engagement). Users can open a browser, type chrome://site-engagement on the address bar, and click to visit to see all the sites with the highest participation.

If you want to steal a site that users visit frequently, you need to work with another feature-Lookalike Warnings. CTOnews.com Note: this feature was introduced by default in Chrome 75. It mainly identifies similar URL addresses and prevents users from clicking on phishing sites.

Fingerprint currently embeds a list of mainstream domain names in Chromium, including 489 "top bucket" sites, with a total of 4990 domain names.

There are two types of warnings for Lookalike Warnings: full-screen warnings for highly suspicious sites and pop-up windows for low-suspect sites.

Websites can reveal the sites most frequently visited by Chromium browser users by abusing Lookalike Warnings.

For example, when users visit app.slack.com.detection.site, only users with app.slack.com interaction display highly suspicious warnings.

Any website can determine the user's participation in some sites by detecting the warnings opened on the site, while opener can repeatedly redirect pop-up windows to different addresses, thus repeatedly identifying sites with high user participation.

The company has also launched a demo site that users of any Chromium-based browser can click here to test.

At this stage, users cannot disable the Site Engagement feature. The current measure is to delete data regularly. Users can load chrome://settings/clearBrowserData in the browser's address bar to clean up.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.