A bug in Safari allows you to leak your Google information and search history

Apple is already warned and hopefully they fix this bug as soon as possible.

There seems to be a serious bug in Safari that can reveal information about your recent browsing history and certain information from your Google account. This bug has been discovered by the blog of FingerprintJS and it’s related to Safari’s IndexedDB implementation, so affects iPhone, iPad and Mac.

These types of errors make it possible for a website to see database names from any domain, not just its own. And the database names can be use to extract user identification information. For example, Google services store an IndexedDB instance for each of your logged in accounts using your Google username as the database name.

Therefore, a malicious site could know your Google user ID and then use that ID to find out other personal information. And this can be a serious thing as you can use your Google ID to sign in to numerous services. FingerprintJS has created a demo where you can see how much information could be taken from you if you use Safari and enter one of these malicious sites.

All current versions of Safari for iPhone, iPad and Mac are susceptible to this bug. FingerprintJS say what reported the bug to Apple on November 28, but it has not been resolved yet with any update.

The solution to this problem is to have a correct behavior similar to that of other browsers such as Chrome. In them a website can only see the databases created by that same domain, so that they cannot identify the user by data from other websites. Without a doubt, it is an error that Apple should correct soon with an update for all its systems.

Related topics: Apple

Disney+ logo

Subscribe to Disney+ for only €8.99! to subscribe

Disney+ logo

3 months of Amazon Audible FREE! Access over 90,000 original audiobooks and podcasts get them here

Reference-ipadizate.com