Simon Willison on Nostr: It turns out Google Chrome ships a default, hidden extension that allows code on ...
It turns out Google Chrome ships a default, hidden extension that allows code on `*.google.com` access to private APIs, including your current CPU usage
You can test it out by pasting the following into your Chrome DevTools console on any Google page:
chrome.runtime.sendMessage(
"nkeimhogjdpnpccoofpliimaahmaaome",
{ method: "cpu.getInfo" },
(response) => {
console.log(JSON.stringify(response, null, 2));
},
);
More notes here:
https://simonwillison.net/2024/Jul/9/hangout_servicesthunkjs/Published at
2024-07-09 17:54:05Event JSON
{
"id": "e9138237ea3efeadc5ce4acd7135612ee9c1fdb83a6a18f9edbfbb2150010dd8",
"pubkey": "4315a187e024818492e61938093ba683dae66624d202cd43738de5b8ba198c0f",
"created_at": 1720547645,
"kind": 1,
"tags": [
[
"proxy",
"https://fedi.simonwillison.net/@simon/112757810519145581",
"web"
],
[
"proxy",
"https://fedi.simonwillison.net/users/simon/statuses/112757810519145581",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fedi.simonwillison.net/users/simon/statuses/112757810519145581",
"pink.momostr"
],
[
"expiration",
"1723141943"
]
],
"content": "It turns out Google Chrome ships a default, hidden extension that allows code on `*.google.com` access to private APIs, including your current CPU usage\n\nYou can test it out by pasting the following into your Chrome DevTools console on any Google page:\n\n chrome.runtime.sendMessage(\n \"nkeimhogjdpnpccoofpliimaahmaaome\",\n { method: \"cpu.getInfo\" },\n (response) =\u003e {\n console.log(JSON.stringify(response, null, 2));\n },\n );\n\nMore notes here: https://simonwillison.net/2024/Jul/9/hangout_servicesthunkjs/",
"sig": "b94834f571fcc12739855dfc8d4797035f60b0f0c096836b1d2333e91e0eb9699328944a1dc7982db87f60e18f19d22932ff9a6067079f27057d366c0fedb789"
}
