Limiting Private API availability in Chromium
During a recent audit, we discovered that some third-party Chromium based browsers were able to integrate Google features, such as Chrome sync and Click to Call, that are only intended for Google’s use. This meant that a small fraction of users could sign into their Google Account and store their personal Chrome sync data, such as bookmarks, not just with Google Chrome, but also with some third-party Chromium based browsers. We are limiting access to our private Chrome APIs starting on March 15, 2021. For users who accessed Google features (like Chrome sync) through a third-party Chromium based browser, their data will continue to be available in their Google Account, and data that they have stored locally will continue to be available locally. As always, users can view and manage their data on the My Google Activity page. They can also download their data from the Google Takeout page, and/or delete it here. Guidance for vendors of third-party Chromium based products is available on the Chromium wiki. Se proprio volerte farvi tracciare, trovate questa notizia anche qui: https://blog.chromium.org/2021/01/limiting-private-api-availability-in.html Giusto per far capire a tutti chi è che comanda. Così alla fine anche qualche distribuzione Linux inizia ad aprire gli occhi (sempre con enorme cautela... non si sa mai cosa c'è fuori...) Interessante per esempio il bug report di Debian che si apre così:
Currently, the way that chromium is being maintained is far from the standards that we expect in Debian.
A considerable number of reasonable bug reports (like, for instance the one for enabling sharing one's desktop in this age of pandemic and many people having to work from home) are not answered or ignored.
Besides that, there is a skeleton of a version 84 in the repo, but the package manager (and https://packages.debian.org/search?keywords=chromium) doesn't know about it.
Going even further, Google Chrome (which I really, really don't want to install on my systems) is already at version 86 according to both https://en.wikipedia.org/wiki/Google_Chrome_version_history and https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desk...
Furthermore, https://tracker.debian.org/pkg/chromium lists, at this moment, 100 security issues in sid, buster and bullseye.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972134 Giacomo
participants (1)
-
Giacomo Tesio