It turns out Google Chrome ships a default, hidden extension that allows code on `*.google.com` access to private APIs, including your current CPU usage
You can test it out by pasting the following into your Chrome DevTools console on any Google page:
chrome.runtime.sendMessage(
"nkeimhogjdpnpccoofpliimaahmaaome",
{ method: "cpu.getInfo" },
(response) => {
console.log(JSON.stringify(response, null, 2));
},
);
More notes here: https://simonwillison.net/2024/Jul/9/hangout_servicesthunkjs/
Simon Willison /
npub13v…4w5eu
2024-07-09 17:54:05
Author Public Key
npub13v97j0kknscwnf5pt87nsn7cxzxwfwl3dsu7ss8qsq7ukmqgwg8q84w5euPublished at
2024-07-09 17:54:05Event JSON
{
"id": "2c8dadf9b73269fa6f799e5885ef087115003448c311bca9f4531cbd43038219",
"pubkey": "8b0be93ed69c30e9a68159fd384fd8308ce4bbf16c39e840e0803dcb6c08720e",
"created_at": 1720547645,
"kind": 1,
"tags": [
[
"proxy",
"https://fedi.simonwillison.net/users/simon/statuses/112757810519145581",
"activitypub"
]
],
"content": "It turns out Google Chrome ships a default, hidden extension that allows code on `*.google.com` access to private APIs, including your current CPU usage\n\nYou can test it out by pasting the following into your Chrome DevTools console on any Google page:\n\n chrome.runtime.sendMessage(\n \"nkeimhogjdpnpccoofpliimaahmaaome\",\n { method: \"cpu.getInfo\" },\n (response) =\u003e {\n console.log(JSON.stringify(response, null, 2));\n },\n );\n\nMore notes here: https://simonwillison.net/2024/Jul/9/hangout_servicesthunkjs/",
"sig": "dda5861bec2f7d5c39957f8ee9ff3ab6b793306b7f76055c37a61ce216aefa506d51f4d8f598207273c10064acf0a98e95000c4becf0b3c0313a3128325a8bad"
}