Chrome in Android Leaks Device Fingerprinting Info

guest · Jan 2, 2019

Chrome in Android Leaks Device Fingerprinting Info
January 2, 2019
https://threatpost.com/chrome-in-android-leaks-device-fingerprinting-info/140480/

The issue – which still doesn’t have a CVE designation despite being partially addressed as a problem – has to do with how Android uses Google’s Chrome browser. Chrome is the default browser for Android devices, and it also enables the WebView and Custom Tabs APIs, it also enables the WebView and Custom Tabs APIs [...]

According to Nightwatch Cybersecurity, Chrome and applications that use the associated APIs leak information about the hardware model, firmware version and security patch level of the device on which they are running.

“This information can be used for track users and fingerprint devices,” said Nightwatch researcher Yakov Shafranovich, in a post last week. “It can also be used to determine which vulnerabilities a particular device is vulnerable to in order to target exploits.”
Click to expand...

Google partially fixed the issue with the release of Chrome v70, after a new bug report was filed earlier in the year, but the problem overview wasn’t published by Nightwatch until after Christmas.

“The fix hides the firmware information while retaining the hardware model identifier … The device model number remains,” said Shafranovich.
Click to expand...

Log in or Sign up

Chrome in Android Leaks Device Fingerprinting Info

guest Guest

Log in or Sign up

Chrome in Android Leaks Device Fingerprinting Info

guest Guest

Useful Searches