A bug in Safari 15 was discovered that allowed your current browsing activities and Google account information such as your User ID and profile photo to be leaked. FingerprintJS discovered this flaw, which is caused by the way Apple employs an API called IndexedDB. This impacts not just Safari on macOS, but also every browser on iOS and iPadOS 15.
To summarise, Apple-designed IndexedDB in such a way that websites may see the names of other websites and other information when they shouldn’t. Other tabs and windows can see your unique Google User ID when you visit sites that use your Google account, such as YouTube. You may also check for someone’s profile picture using this ID.
Safarileaks.com, a website created by FingerprintJS that illustrates how the vulnerability works, is a good place to start if you want to see it in action. Of course, you’ll need Safari 15 on macOS or any browser on iOS and iPadOS 15 to view it.
A small result after testing
The website reported that five database names were being exposed when we tested it using Safari 15 on macOS. We also tested it on the phone using the Google Chrome app and got identical results.
When you start a new browser with something like YouTube, it detects your Google User ID and displays everything hackers can see, including your profile picture. Bloomberg, Slack Web, Google Calendar, Dropbox, Instagram, Netflix, Twitter, and WhatsApp Web are among the other websites affected.
The problem was reported on November 28th, 2021. However, Apple has yet to patch it as of January 17th, 2022. It also impacts Private Browsing, according to FingerprintJS. If you’re concerned about this, you may use a different browser on Mac, such as Chrome, Firefox, or Brave, which I suggest. Users of iOS and iPadOS should exercise caution and avoid visiting any suspicious websites. That’s the only thing you can do.
Is your iPhone having any issues? Don’t worry, leave it to our technicians!
Is your phone having a screen crack? Motherboard issue? Battery draining? Or don’t even know what is wrong with it? Don’t worry, we provide a FREE diagnosis. Feel FREE to contact us at +6018-394 4559. Or visit our shop at Kepong Kuala Lumpur , Uptown Damansara Petaling Jaya, Sri Petaling. Setapak & Ampang We can help diagnose your phone for FREE!.
At SPR Communication Sdn Bhd, we provide all sorts of phone repair services such as LCD replacement, Screen crack repair, battery replacement, etc. Visit SPR Facebook Page
