Japanese punctuation exacerbates privacy flaw that leaks one-word search terms in Google, Firefox browsers – The Daily Swig

Researcher questions efficacy of proposed remedies as debate rumbles on 18 months after disclosure

A peculiarity of Japanese punctuation appears to have heightened the impact of a Chrome and Firefox vulnerability whose resolution has been complicated by the potential impact on enterprise users.

The privacy flaw leaks Chrome and Firefox users’ search terms to their internet service providers (ISPs) without their consent under certain conditions and, as Mozilla has acknowledged, could potentially expose them to surveillance by malicious actors.

Mozilla and Google were alerted to the problem back in April 2020 by security researcher Duy Khuong, and Firefox 78 launched two months later with support for disabling behavior that caused the vulnerability.

Eighteen months after disclosure, Google is now planning to fix the issue by turning a vulnerable feature off by default.

One-word searches

Modern browsers ordinarily don’t leak users’ online activity to ISPs, albeit ISPs can see which web…

Read Full Story: https://portswigger.net/daily-swig/japanese-punctuation-exacerbates-privacy-flaw-that-leaks-one-word-search-terms-in-google-firefox-browsers

The post Japanese punctuation exacerbates privacy flaw that leaks one-word search terms in Google, Firefox browsers – The Daily Swig first appeared on SEO, Marketing and Social News | OneSEOCompany.com.

source: https://news.oneseocompany.com/2021/10/22/japanese-punctuation-exacerbates-privacy-flaw-that-leaks-one-word-search-terms-in-google-firefox-browsers-the-daily-swig_202110227192.html

Your content is great. However, if any of the content contained herein violates any rights of yours, including those of copyright, please contact us immediately by e-mail at media[@]kissrpr.com.