{"id":2110,"date":"2022-01-21T04:50:08","date_gmt":"2022-01-21T12:50:08","guid":{"rendered":"https:\/\/www.ssls.com\/blog\/?p=2110"},"modified":"2023-09-27T05:33:45","modified_gmt":"2023-09-27T12:33:45","slug":"safari-15-bug-can-leak-your-personal-information","status":"publish","type":"post","link":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/","title":{"rendered":"Safari 15 bug can leak your personal&nbsp;information"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png\" alt=\"\" class=\"wp-image-2026\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 <a href=\"https:\/\/fingerprintjs.com\/blog\/indexeddb-api-browser-vulnerability-safari-15\/\">can leak your identity<\/a> and allow any website to track your Internet activity. The bug is related to the Apple browser\u2019s implementation of an application programming interface (API) called IndexedDB, which is designed to store data in your browser.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Read on to learn more about the API and how exactly it\u2019s leaking this data.&nbsp;<\/p>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">What is IndexedDB API?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Supported and used by many major browsers, IndexedDB API provides client-side (browser) storage that can store significant amounts of data. But what does that mean in practice? Practically speaking, it\u2019s used to save data from websites you visit so that they load faster when you return. It does this by creating a database to store the data for each website you visit. These databases are supposed to be private to each individual site, so that one domain cannot access the database of another. In short, a domain should only access the data that it generated.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This practice is known as same-origin policy, an important concept in web application <a href=\"https:\/\/www.ssls.com\/blog\/symantec-ev-ssl-authentication-guide\/\">security<\/a>. It ensures that if you have opened several browser tabs where you\u2019re logged into personal accounts, if you happen to open another tab with a malicious web page, it won\u2019t be able to view or access the data contained in the other tabs.\u00a0<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The problem with the implementation of IndexedDB API in Safari 15 is that it violates same-origin policy.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How the bug leaks your data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">According to FingerprintJS, during a browser session in Safari 15, IndexedDB API actually creates a new (empty) database with the same name in all other active frames, tabs, and windows. This is a problem because it not only allows any active websites you have open to see the other websites you visit, but it can also reveal user-specific identifiers on websites that require users to be authenticated.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A major example is any site that uses Google User ID, such as YouTube, Gmail, or Google Calendar. All of these sites create databases that include the user\u2019s Google User ID, and databases are created for every account the user is logged into. If malicious users have access to this ID, they could potentially use it to reveal a great deal of personal information about the account owner, as well as other online accounts linked to their Google User ID.<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For an example of this kind of data leak in action, <a href=\"https:\/\/www.youtube.com\/watch?v=Z7dPeGpCl8s&amp;t=95s&amp;ab_channel=FingerprintJS\">check out this video<\/a>.&nbsp;<br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What can you do about it?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For Windows users who use Safari, switch to another web browser. For Safari users on iPadOS and iOS, there\u2019s not much you can do since Apple has banned all third-party browser engines. This means that switching browsers won\u2019t help. FingerprintJS suggests the drastic measure of blocking Javascript by default and only permitting it on trusted sites, however, this isn\u2019t a very practical solution. For now, the best solution is to keep an eye on browser updates and make sure to update yours as soon as Apple resolves the issue.<br><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your identity and allow any website to track your Internet activity. The bug is related to the Apple browser\u2019s implementation of an application programming interface (API) called IndexedDB, which is designed to store [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2110","post","type-post","status-publish","format-standard","hentry","category-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Safari 15 bug can leak your personal information | SSLs.com Blog<\/title>\n<meta name=\"description\" content=\"Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Safari 15 bug can leak your personal information | SSLs.com Blog\" \/>\n<meta property=\"og:description\" content=\"Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/\" \/>\n<meta property=\"og:site_name\" content=\"SSLs.com Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-21T12:50:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-27T12:33:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png\" \/>\n<meta name=\"author\" content=\"Aideen Molloy\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aideen Molloy\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/\"},\"author\":{\"name\":\"Aideen Molloy\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"headline\":\"Safari 15 bug can leak your personal&nbsp;information\",\"datePublished\":\"2022-01-21T12:50:08+00:00\",\"dateModified\":\"2023-09-27T12:33:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/\"},\"wordCount\":529,\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Safari-15-bug.png\",\"articleSection\":[\"news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/\",\"name\":\"Safari 15 bug can leak your personal information | SSLs.com Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Safari-15-bug.png\",\"datePublished\":\"2022-01-21T12:50:08+00:00\",\"dateModified\":\"2023-09-27T12:33:45+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"description\":\"Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Safari-15-bug.png\",\"contentUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_Safari-15-bug.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/safari-15-bug-can-leak-your-personal-information\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Safari 15 bug can leak your personal&nbsp;information\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\",\"name\":\"SSLs.com Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\",\"name\":\"Aideen Molloy\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"caption\":\"Aideen Molloy\"},\"description\":\"Aideen is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.\",\"sameAs\":[\"https:\\\/\\\/www.ssls.com\\\/\"],\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/author\\\/cora-quigley\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Safari 15 bug can leak your personal information | SSLs.com Blog","description":"Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/","og_locale":"en_US","og_type":"article","og_title":"Safari 15 bug can leak your personal information | SSLs.com Blog","og_description":"Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your","og_url":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/","og_site_name":"SSLs.com Blog","article_published_time":"2022-01-21T12:50:08+00:00","article_modified_time":"2023-09-27T12:33:45+00:00","og_image":[{"url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png","type":"","width":"","height":""}],"author":"Aideen Molloy","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aideen Molloy","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#article","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/"},"author":{"name":"Aideen Molloy","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"headline":"Safari 15 bug can leak your personal&nbsp;information","datePublished":"2022-01-21T12:50:08+00:00","dateModified":"2023-09-27T12:33:45+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/"},"wordCount":529,"image":{"@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png","articleSection":["news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/","url":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/","name":"Safari 15 bug can leak your personal information | SSLs.com Blog","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#primaryimage"},"image":{"@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png","datePublished":"2022-01-21T12:50:08+00:00","dateModified":"2023-09-27T12:33:45+00:00","author":{"@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"description":"Recent findings from FingerprintJS, a browser fingerprinting and fraud detection service, have revealed that a software bug in Safari 15 can leak your","breadcrumb":{"@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#primaryimage","url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png","contentUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_Safari-15-bug.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ssls.com\/blog\/safari-15-bug-can-leak-your-personal-information\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ssls.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Safari 15 bug can leak your personal&nbsp;information"}]},{"@type":"WebSite","@id":"https:\/\/www.ssls.com\/blog\/#website","url":"https:\/\/www.ssls.com\/blog\/","name":"SSLs.com Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ssls.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0","name":"Aideen Molloy","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","caption":"Aideen Molloy"},"description":"Aideen is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.","sameAs":["https:\/\/www.ssls.com\/"],"url":"https:\/\/www.ssls.com\/blog\/author\/cora-quigley\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2110","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/comments?post=2110"}],"version-history":[{"count":3,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2110\/revisions"}],"predecessor-version":[{"id":2608,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2110\/revisions\/2608"}],"wp:attachment":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/media?parent=2110"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/categories?post=2110"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/tags?post=2110"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}