Security Now (Video) SN 1029: The Illusion of Thinking - Meta Apps and JavaScript Collusion
Jun 11, 2025
Reflecting on the legacy of Bill Atkinson, the discussion unveils Meta's concerning collaboration with JavaScript. A new filtered DNS service from the EU and OpenAI’s legal obligation to preserve user chats raise alarms. The risks of using Telegram under Russian surveillance and the implications of tracking by Meta on user privacy are explored. Adding humor, the absurdity of tech products like a captcha-requiring oven is highlighted, alongside the challenges of large reasoning models in AI. The episode underscores the urgent need for enhanced cybersecurity measures.
AI Snips
Chapters
Books
Transcript
Episode notes
Bill Atkinson's Apple Legacy
- Bill Atkinson was a pivotal Apple developer who created Quickdraw, MacPaint, and HyperCard.
- He significantly shaped the original Mac GUI and programming environment in assembly and Pascal.
Meta & Yandex Localhost Tracking
- Meta and Yandex used local host sockets on Android to collude with browser JavaScript for cross-app user tracking.
- This bypasses all privacy controls like incognito mode and cookie clearing, making it a powerful privacy-invasive hack.
Block Surreptitious Localhost Access
- Browsers should block and notify users when websites try to access local host connections covertly.
- Allowing this communication by default is dangerous due to privacy leaks and spying risks.