Chrome 94 Introduces Mass Surveillance Tool
Developers of Chrome 94 have integrated a new feature called Idle Detection API, which allows websites to collect large amounts of user data. Competitors have already labeled it as spyware and called for its discontinuation. While it is currently possible to disable this tracking module in Chrome 94, there is no guarantee that Google will keep this option available in future updates, according to CNews.
How Idle Detection API Works
The new feature lets websites “ask” Chrome to notify them when a user becomes inactive. Any modern website can use this function. In other words, Chrome will gladly inform sites if a user stops using programs and steps away from their computer.
Mozilla has been the most vocal critic of this feature. Developers of the competing browser cited the “potential for surveillance” and the risk that a malicious site could use the API to maximize the use of a device’s computing resources without the user’s consent or knowledge.
Tantek Çelik, Mozilla’s lead on web standards, suggested labeling this API as harmful and “calling for its further incubation, possibly considering simpler and less invasive alternative approaches for identifying motivating use cases.”
Safari Developers and Privacy Concerns
The WebKit team, which develops the engine for Apple’s Safari browser, expressed similar concerns, stating: “This does not seem like a compelling enough use case for this API. First, there is no guarantee that the user won’t immediately return to the device. Also, what service should know which other device a user might be using at any moment? We definitely do not intend to inform websites about all the devices a user may be using at any given time. This is a very serious violation of the user’s privacy.”
Expert Opinions on Privacy Risks
Vadim Misbakh-Solovyov, a technical specialist at RosKomSvoboda, believes: “This is indeed a potentially dangerous privacy feature, which can still be disabled and for which Chrome still asks permission. But Google really can do whatever it wants with the browser — for example, quietly activate it in future releases, remove the ability to disable it, or stop asking for permission.”
He adds, “On the other hand, Mozilla with its Firefox browser isn’t much better — they can also remotely control browsers and have introduced privacy-violating features as well. Maybe not as blatantly, but still.”
How to Disable Idle Detection API in Chrome 94
Chrome 94 currently allows users to permanently disable the Idle Detection API, so you don’t have to keep clicking “Deny” on pop-up notifications, according to CNews. However, it’s unclear whether Google will keep this option in future versions of the browser.
To disable Idle Detection API, make sure Chrome is updated to version 94, then go to chrome://settings/content/idleDetection (without quotes). On the page that opens, you’ll see that the feature is enabled by default, and you can deactivate it. Select “Don’t allow sites to know when you’re actively using your device.”
After this, websites will lose another way to track your activity. However, it’s a good idea to periodically check if the feature has been re-enabled, especially after installing updates. Note that Idle Detection API may also be used in third-party browsers based on Chrome.