It’s going to take creds out of your browser, spawn a new one not in the browser sandbox and act as the user to complete tasks. What tasks? ¯\_(ツ)_/¯

to lazy to read but sounds like its related to its front end testing mcp which you would expect to have access to browser configs when needed especially for playwright

I can't believe how many decades we got out of just letting all apps have full access to $HOME. In $current_year it's our own fault if we don't properly isolate our applications I guess. Android does a pretty good job of it IMO although cross-app intents probably need more protection.

Technically, at least as far as the author can tell, it only affects Chromium-based browsers. So Firefox would not be affected (yet).

And only on Mac so far, the app being made with ElectronOS. Not sure what Windows looks like.

While brave itself is only a minor character in this story, it is Chromium based. I was merely pointing it out. You'd be surprised how many push the brave browser on Lemmy.

no, he’s right in some way. claude desktop is spyware, but it only spies through chromium based browsers, so if you don’t use chrome, you’re safe … for now. until they install their backdoor in safari/ firefox based browsers too

You.

while it can, there probably is some arch user who runs the program too and notices it suddenly takes 2ms longer to do something thusly finding the xz attack.

so, yeah foss isn’t inherently safe, but most probably saf er

I have no spurious browser extensions installed. In case you missed it the first time.