Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Safari Bug Allows Websites to Track Your Recent Browsing Activity in Real Time [Updated]
- Thread starter MacRumors
- Start date
- Sort by reaction score
WebKit - forever the Achilles heel of iOS.
I’d go so far as to say that it’s the worst thing about iOS (in my experience)
I’d go so far as to say that it’s the worst thing about iOS (in my experience)
They are already late..
Happy to still be on Mojave and iOS 14.8.1.
Updated to Big Sur on a secondary computer, just to see if it works for me
Yes. The tracking is done client-side in your browser by the webpage itself. That is, you have to visit a webpage that exploits the vulnerability to track which other websites you have previously visited or are visiting while that webpage is loaded in your browser. For example, ads embedded in webpages will likely want to perform such tracking.
Last edited:
Wonder if this is fixed in iOS 15.3?
Maybe it’s time for Apple to decouple Safari from the main OS update, so issues like this can be quickly patched just by patching the Safari app.
Maybe it’s time for Apple to decouple Safari from the main OS update, so issues like this can be quickly patched just by patching the Safari app.
I opened the website in Safari on iOS 14 and it said this browser is not affected.
Very strange.
Attachments
or on an island.....
if someone has a fake name running with their safari 15.#, what will the trackers reveal or corrupt?
Last edited:
TROLLTRACE IS REAL!!!!!!
I’m not sure if I’m excited or scared for what happens next?
I’m not sure if I’m excited or scared for what happens next?
Uh huh, sure...Windows is improving, but let's not get carried away with the idea that Windows isn't still a heaping mess of an OS. Maybe they will get there one day, after they finally convert to a UNIX-type base OS and a UI that isn't trying too hard, but it's still a good ways in the future.
Any programmer knows that bugs happen, even the most secure and stable program has some issue in it that hasn't been found yet. This will get fixed, probably in the next Webkit release and then the next update for all the Apple OSes.
The world runs on Windows. So I guess paradise is the 90% of the world's computers.
Microsoft fixes bugs and creates them again. Have you seen what is in patch Tuesday.
Here's a live demo in case anyone wants to try it out
safari-15-indexeddb-bug-demo.netlify.app
Safari 15 IndexedDB Leaks
Information leaks resulting from an IndexedDB same-origin policy violation in WebKit (a browser engine primarily used in Safari, as well as all iOS and iPadOS web browsers).
Maybe not quite 90, maybe 85 or whatever, my point was, Windows is NOT bug-free as poster I was responding to seemed to suggest…
This is nuts. I really feel that software departments should have employees devoted to only fix bugs. That way they can continue with their timeline and don’t have to divert resources and delay features. It appears this fairly serious bug was discovered around the holidays and was purposely pushed until they had time to get to it, which they still haven’t almost 2 months later. This is completely unacceptable and antidotally seems to happen more frequently.
Last edited:
Fortunately there's a patch available. ?
15.2.2 up next. Good thing one patch fixes all browsers. Would be a nightmare if every browser has their own WebKit.
WebKit... open source garbage. So that's what Tim Cook will be discussing at the White House meeting ?
Apple to Attend White House Meeting to Discuss Security Risks of Open-Source Software
Apple will be among several U.S. tech giants to attend a meeting at the White House today to discuss cybersecurity and possible security threats posed by open-source software, Reuters reports. The meeting will be held by U.S. National Security Advisor Jake Sullivan and will focus on "concerns...
forums.macrumors.com
Ban WebKit? ?
I promised my self that I would use Edge since iOS 15. Many websites make my iPhone 13 pro get warm due to abusive trackers, like this forums. I use it in my iMac and in my phone, sadly because of Apple greedy policies, I am also affected in my iPhone and iPad.
This whole “walled-garden” approach is becoming less and less safe every day and our right to choose is kidnapped by Apple ?
This whole “walled-garden” approach is becoming less and less safe every day and our right to choose is kidnapped by Apple ?
Trillions of dollaras and can’t have a proprietary engine after all these years?. Empty promises about security…
Yes, they still know if you've been naughty or nice.
FTFY, Google checks are too good to say no to.