Bypassing anti-incognito detection in Google Chrome

Post by TomAnthony » Sat, Jul 20, 2019, 8:01 AM UTC

ec109685 wrote: post #10

em-bee wrote: post #3

there is only one way to get around this. incognito mode needs to emulate all system resources without actually making them available. even without that consideration, for things like disk storage, there is no reason[1] why incognito mode should have less access than normal mode. all websites should function as normal. the only difference is that in incognito mode everything is wiped once it is closed, and nothing is…

If Chrome encrypted the data it wrote to disk, it can throw away the encryption key and delete the file when you close the incognito window, thus giving you access to the disk securely.

Post by pgeorgi » Sat, Jul 20, 2019, 8:04 AM UTC

ec109685 wrote: post #10

em-bee wrote: post #3

there is only one way to get around this. incognito mode needs to emulate all system resources without actually making them available. even without that consideration, for things like disk storage, there is no reason[1] why incognito mode should have less access than normal mode. all websites should function as normal. the only difference is that in incognito mode everything is wiped once it is closed, and nothing is…

If Chrome encrypted the data it wrote to disk, it can throw away the encryption key and delete the file when you close the incognito window, thus giving you access to the disk securely.

Post by [deleted] » Sat, Jul 20, 2019, 8:16 AM UTC

TomAnthony wrote: post #12

kijin wrote: post #6

Is there any legitimate reason to allow arbitrary web apps to use gigabytes of space on my precious SSD, especially on mobile devices? I'm becoming increasingly wary of web apps having all sorts of access to things outside of the browser, sometimes without explicit permission. Browsers should limit every app to the same amount, perhaps 100MB, or maybe even 10MB. Apps that need more should ask for permission.

I believe the “Quota Management API” [1] the author is using is an experimental API for the browser to request more space, beyond the default maximum of 5MB. [1] https://developer.chrome.com/apps/offline_storage

Post by [deleted] » Sat, Jul 20, 2019, 8:21 AM UTC

TomAnthony wrote: post #12

kijin wrote: post #6

Is there any legitimate reason to allow arbitrary web apps to use gigabytes of space on my precious SSD, especially on mobile devices? I'm becoming increasingly wary of web apps having all sorts of access to things outside of the browser, sometimes without explicit permission. Browsers should limit every app to the same amount, perhaps 100MB, or maybe even 10MB. Apps that need more should ask for permission.

I believe the “Quota Management API” [1] the author is using is an experimental API for the browser to request more space, beyond the default maximum of 5MB. [1] https://developer.chrome.com/apps/offline_storage

Post by geekroutine » Sat, Jul 20, 2019, 8:22 AM UTC

TomAnthony wrote: post #12

kijin wrote: post #6

Is there any legitimate reason to allow arbitrary web apps to use gigabytes of space on my precious SSD, especially on mobile devices? I'm becoming increasingly wary of web apps having all sorts of access to things outside of the browser, sometimes without explicit permission. Browsers should limit every app to the same amount, perhaps 100MB, or maybe even 10MB. Apps that need more should ask for permission.

I believe the “Quota Management API” [1] the author is using is an experimental API for the browser to request more space, beyond the default maximum of 5MB. [1] https://developer.chrome.com/apps/offline_storage