Skip to main content
 

gaining access to anyones browser without them even visiting a website

[Eva at kibty.town]

PSA for anyone who switched to Arc as their main browser (hey, that's me!): it had a giant vulnerability that the team, at the time of writing, doesn't seem to have acknowledged publicly, although it has been patched.

Aside from the lack of disclosure, perhaps the biggest ongoing concern for me is in the last few paragraphs:

"while researching, i saw some data being sent over to the server [...] this is against arc's privacy policy which clearly states arc does not know which sites you visit."

Sigh.

[Link]

· Links · Share this post