Apple is working on a fix for critical Safari security flaw
Researchers found that a critical flaw on Safari lets websites read your entire browsing data and even your Google ID. The issue affects all major Apple platforms - iOS 15, iPadOS 15 and macOS Monterey. The company has acknowledged the issue and is now working on a fix.
The problem lies within the IndexedDB API, which is used by pretty much all web browsers. It works as a client-side storage of data and it's supposed to give websites access only to data that has originated from the said website. That's called "same-origin policy". However, the Safari bug lets websites read your entire browsing data and potentially reveal someone's identity.
So until Apple squashes the bug, you can either use a different browser altogether or disable JavaScript for the websites you don't trust.
Related
Reader comments
- Anonymous
- 21 Jan 2022
- 70d
So you can't answer my question at all. In the future, if you don't know, just remain silence. Your post doesn't contribute anything to the conversation.
- Anonymous
- 21 Jan 2022
- puk
Oh right, if whole world isn't talking about them, then they surely don't even exist. Because click news really care so much about Android Oreo or Pie being full of holes. They'll just write about it if it's Android 12. Or if it&#...
- Anonymous
- 20 Jan 2022
- 70d
You need to learn to read. 90% is 90%. Also, you didn't answer my question. What critical security issues?
Samsung
Apple
Xiaomi
Apple
Samsung
