what your browser installs without asking


Your browser has been busy on your behalf. This week brought two reminders that Chrome can put things on your machine you never agreed to. One came from Google. One came from an impostor. Both used the same quiet machinery.

Chrome runs on billions of devices, which makes it one of the most powerful pieces of software on Earth. It also makes it a tempting place to slip something in. Two stories from the past few days show the consent problem from both ends.

Google’s 4GB houseguest

Since at least April, Chrome has been quietly downloading Gemini Nano, Google’s on-device AI model, onto eligible laptops and desktops. The file is about 4GB. It arrives with no prompt, no notification, and no obvious off switch, CNET reported. Delete it, and Chrome fetches it again.

The model powers on-device features such as scam detection and writing help. The catch is that most people never asked for it and never knew it landed.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!

The clearest account comes from Alexander Hanff, a privacy researcher who writes as “That Privacy Guy”. He caught the install on a fresh Mac profile that had received zero human input, using the system’s own file-event log. The 4GB model unpacked itself in about 14 minutes while a tab sat idle, he wrote. He argues the silent push breaches Europe’s ePrivacy and data-protection rules, and that the bandwidth alone carries a heavy climate cost at billion-device scale.

Google says the model removes itself if a device runs short on space or power. The company also points out that, since February, users can turn it off in Chrome settings, after which it stops downloading.

There is a twist that muddies the trust further. The visible “AI Mode” pill in the address bar does not use the on-device model at all. Those queries go to Google’s servers. So the user pays the storage cost of a local model, while the headline AI feature still sends typing to the cloud.

The impostor in the address bar

The second story is darker, because the actor was not Google. Microsoft’s threat researchers found a malicious Chrome extension dressed up as the AI search engine Perplexity. It quietly logged what people searched for, then sent them on to real results so nothing looked wrong.

The extension, called “Search for perplexity ai”, used a look-alike domain to pass for the real thing, The Hacker News reported. Once installed, it made itself the default search engine. Every query, and every character typed into the address bar, went first to an attacker-controlled server, which logged it with your IP address and browser details.

The theft happened on that first hop, before the redirect. The extension abused Chrome’s network-rule permissions to pull it off, and shipped server code that logged every request, Microsoft said. Google removed it after the disclosure.

This was not a one-off. Microsoft earlier tied a wave of AI-branded extensions to roughly 900,000 installs across more than 20,000 company networks, harvesting ChatGPT and DeepSeek chat histories. The AI label gets the install. The permissions do the damage.

Same surface, different intruder

Put the two together and a pattern appears. The browser, and the address bar in particular, has become a trust surface that both vendors and attackers want to occupy. Google treats your disk as a delivery target for its own AI. A criminal treats your omnibox as a wiretap. The user sits in the middle, rarely asked.

That is the real story here, and it should worry anyone who cares about trust in everyday software. When a legitimate company normalises silent installs, it gets harder for users to spot the malware doing something similar. Consent stops being a habit. The line between a feature and an intrusion blurs.

It also lands at a moment when AI branding is a magnet. People associate AI tools with usefulness, so they click. Attackers know it, and the same instinct that makes us try a shiny new assistant makes us wave through malicious apps wearing the same costume.

What you can do

A few minutes of housekeeping helps. On Chrome, open Settings, then System, and turn off on-device AI if you do not want the Gemini Nano model. You can also check for a folder named OptGuideOnDeviceModel in your Chrome profile to see whether the 4GB file is already there.

Then audit your extensions. Remove anything you do not recognise, check the publisher and the exact domain before installing AI-branded tools, and watch for a search engine that has quietly changed. None of this is hard. It is just the price of using a browser that, increasingly, acts on its own.

The deeper fix is not yours to make. It belongs to the company that decides whether the default browser asks before it acts. Until it does, the safest assumption is simple. Your privacy is your job, and the browser is not always on your side.



Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


When the original Range Rover debuted in 1970, it introduced something the automotive world had not quite seen before: a vehicle as capable on a muddy trail as it was parked outside a five-star hotel. That unique combination of rugged capability and refined luxury few, if any, SUVs can pull off today. Yet, Land Rover has been doing it for five decades.

The current fifth-generation model, which arrived for 2022, extended that tradition with a cabin that let the quality of its materials speak for itself.

Now, the 2027 Audi Q9 is preparing to challenge it.

The Q9 makes its world debut on July 28th and is Audi’s first true full-size flagship SUV. While the exterior remains under wraps, Audi recently opened the doors for a first look at the interior. What’s inside reveals two very different philosophies about where traditional luxury is headed. Audi is betting on screens, sensors, and immersive technology, while Range Rover, in a notable move for 2027, is bringing physical knobs and controls back to the center console.

One brand is leaning forward. The other is going for a hint of nostalgia. Here is how they stack up.

Two cabins, unique two philosophies

Small details for discerning buyers

The Range Rover has long built its interior reputation on what it leaves out as much as what it puts in.

The current model is characterized by a clean and streamlined dashboard with minimal distractions. Premium materials include Windsor leather on the SE, semi-aniline leather on the SV, and sustainably sourced wood veneers across the lineup.

For 2027, the physical volume knob and Terrain Response selector are returning to the center console, reversing a decision made for the 2024 model year that moved those controls to the touchscreen. It is a small detail that some discerning buyers will appreciate. Although every new vehicle today has a touchscreen of some kind, the allure of a large screen has its limits.

Audi takes the opposite position with the Q9. The cabin moves away from the fingerprint-prone piano-black trim of earlier models, introducing matte and textured finishes alongside new materials. Q9 buyers will find Dinamica microfiber, Nappa leather, fine-grain ash inlays, and a carbon fiber weave with basalt gray accents. New colors, including Tamarind Brown and Stone Beige, complete the palette.


Audi Q9


Audi’s Q9 challenges the Mercedes GLS with 4D audio and a digital cabin for 10K less

The primary difference between these two flagship SUVs lies in their digital architecture.

Digital Stage vs. Pivi Pro

Three displays or one interface

Audi’s Digital Stage includes three displays across the Q9’s dashboard. The primary OLED touchscreen is front and center, while a driver’s instrument cluster is tucked just beyond the steering wheel.

The third screen is separate for passengers and sure to be enjoyed on long road trips by whoever is sitting there. Front-seat passengers can stream content from their own queue, whether that’s a YouTube video, a show on Netflix, or a podcast playlist, without interfering with anything on the driver’s side.

Range Rover’s Pivi Pro system uses a 13.1-inch central touchscreen as its primary interface, paired with a 12-inch interactive driver display. The system is quick, organized, and accessible within two taps from the home screen. There is no dedicated front passenger display, though 11.4-inch rear seat entertainment screens are available on the Autobiography trim and above.

The dedicated passenger screen may give the Audi Q9 an edge over the Range Rover and other competitors like the Lexus LX, which also does not offer a separate infotainment screen. However, both the Lexus LX and Range Rover offer rear-seat entertainment.

The Mercedes-Benz GLS and Cadillac Escalade, other prime competitors to the Audi Q9, also offer a rear-seat entertainment system, in addition to the separate passenger screen.

At the time of this writing, Audi has not confirmed the availability of a rear seat entertainment system for the Q9. Given the nature of its competitors, however, it seems in Audi’s best interest to include it as an option.

And finally, the return of physical knobs to the Range Rover for 2027 is the sharpest contrast to the Q9’s all-screen approach. Audi is presenting a cabin where most functions require screen interaction. Range Rover, after trying the same approach, concluded its buyers prefer not to hunt through sub-menus for simple volume and terrain controls.


Audi Q9


Audi’s Q9 aims to replace the Cadillac Escalade as the new standard of tech luxury

Audi enthusiasts may bristle. Cadillac loyalists might feel the same. But nonetheless, here we are.

Sound systems and the sensory experience

Meridian versus Bang & Olufsen 4D

The Bang & Olufsen 4D sound system in the Q9 includes physical actuators built into the front seats so occupants can feel low-end frequencies, not just hear them. Audi’s Dynamic Interaction Light, an LED strip at the base of the windshield, syncs its color and rhythm to the music, with the color scheme matched to the track’s cover art. Headrest speakers route phone calls and navigation prompts privately to the driver.

Range Rover has a bespoke Meridian Signature Sound System, standard on the Autobiography and above, tuned specifically to the cabin’s acoustics. The SV and SV Ultra models offer a more advanced Meridian configuration, albeit without the seat actuator sensations.

Meanwhile, the Audi Q9 has a seven-seat layout as standard, with an optional six-seat configuration with power-adjustable captain’s chairs in the second row. The outer second-row seat slides and tilts forward to ease third-row access without removing child car seats. Audi also introduces an aluminum rail system in the trunk for securing cargo in three dimensions, and includes roof-rail crossbars as standard.

Range Rover’s Long Wheelbase seven-seat layout has been available since the current generation launched, with semi-aniline heated leather across all three rows as standard on the LWB SE. The Autobiography and SV trims add the aforementioned rear seat entertainment screens, a front-center console refrigerator, and four-zone climate control.

Uniden R8 Transparent Background

Display Type

OLED

Radar Band Detection

X, K, Ka

The Uniden R8 is a dual-antenna radar detector with directional arrows, known for its long-range detection and false alert filtering capabilities. Comes preloaded with red light and speed camera locations and supports firmware updates for ongoing performance enhancements.  


Electric doors and adaptive headlights

Where the Q9 pulls ahead

Three Q9 features have no direct equivalent in the current Range Rover.

All four doors on the Q9 open electronically at the push of a button, up to 90 degrees, with sensors that detect approaching cyclists. Drivers close them by pressing the brake pedal or fastening their seatbelt. Range Rover offers power doors on the SV trims, but Audi makes them standard across the entire Q9 lineup.

The Q9’s panoramic sunroof spans approximately 16 square feet and uses nine individually controllable glass segments that dim electronically. An optional LED package adds 84 lights inside the roof in up to 30 colors, matched to the cabin’s ambient lighting.

The Q9 also brings Digital Matrix LED headlights to U.S. customers for the first time. Using front-facing cameras, the system detects oncoming traffic and selectively masks the light around those vehicles, keeping maximum illumination everywhere else on the road.

According to a recent AAA survey, six in ten U.S. drivers struggle with headlight glare. Range Rover’s Pixel LED headlights, standard on the Autobiography and above, are excellent, but Audi’s matrix approach represents a meaningful step forward in lighting technology for U.S. buyers.


2027 Audi Q9 coming soon

The 2027 Range Rover SE starts at $113,300, with the Autobiography beginning at $159,200. The SV lineup starts at $219,500 and climbs to $275,000 for the Long Wheelbase SV Ultra.

The 2027 Audi Q9 is expected to start around $80,000, with higher trims landing between $90,000 and $95,000.

Audi will reveal the full Q9 details on July 28th, with North American deliveries expected as early as November.



Source link