A method for detecting incognito mode browsing in Chrome 76 has been found.
In Chrome 76, a loophole in the implementation of the FileSystem API was closed, which allowed the detection of incognito mode usage from web applications. Starting with Chrome 76, instead of blocking access to the FileSystem API, which was used as an indicator of incognito mode activity, the browser no longer restricts the FileSystem API but instead clears any changes made after the session. It turns out that the new implementation has weaknesses, allowing it to still […]
