HN user

cloud_thrasher

265 karma

[ my public key: https://keybase.io/cloudthrasher; my proof: https://keybase.io/cloudthrasher/sigs/NpPVKqIKkXuUAE4Y9KHtZqtnwEMM9xiHiTVuCNc_gWo ]

Posts43
Comments11
View on HN
www.tomshardware.com 6y ago

Tarnished: Google Responds to Serious Chrome Vulnerability

cloud_thrasher
6pts2
www.nytimes.com 6y ago

Legal Shield for Websites Rattles Under Onslaught of Hate Speech

cloud_thrasher
3pts0
techcrunch.com 6y ago

Twitter confesses to more adtech leaks

cloud_thrasher
214pts126
www.consumeraffairs.com 6y ago

FCC closes telemarketing loophole used by scammers

cloud_thrasher
148pts118
gizmodo.com 6y ago

Netflix Testing 'Physical Activity' Tracking for Better Video Quality

cloud_thrasher
1pts0
www.darkreading.com 7y ago

Vulnerability Found in Millions of Email Systems

cloud_thrasher
1pts0
www.nngroup.com 7y ago

Creepiness–Convenience Tradeoff

cloud_thrasher
1pts0
boingboing.net 7y ago

EU AG upholds order forcing FB to globally remove insults to politicians

cloud_thrasher
1pts0
undark.org 7y ago

New TSA Policy Allows Travel with Some Cannabis-Derived Products

cloud_thrasher
2pts0
krebsonsecurity.com 7y ago

No ‘Eternal Blue’Exploit Found in Baltimore City Ransomware

cloud_thrasher
1pts0
www.buzzfeednews.com 7y ago

Amazon Filed a Patent to Record Audio Before You Say “Alexa”

cloud_thrasher
2pts0
twitter.com 7y ago

Corporations Funding the Abortion Bans

cloud_thrasher
2pts0
www.wired.com 7y ago

When Google Serves Ads in Iran, Advertisers Pay the Price

cloud_thrasher
2pts0
techcrunch.com 7y ago

Samsung spilled SmartThings app source code and secret keys

cloud_thrasher
3pts0
www.sciencemag.org 7y ago

New generation of lithium-ion batteries could hold more charge

cloud_thrasher
1pts0
techcrunch.com 7y ago

Google employees demand Larry Page address walkout and retaliation

cloud_thrasher
6pts0
news.ycombinator.com 7y ago

Ask HN: Identifying _wamtcstandards in the Wild

cloud_thrasher
1pts2
www.washingtonpost.com 7y ago

Don't believe Facebook's 'pivot to privacy.'

cloud_thrasher
3pts0
www.forbes.com 7y ago

Microsoft Issues New Windows 10 Update Warning

cloud_thrasher
5pts1
www.theregister.co.uk 7y ago

Everything fine at Google's mothership: $1.7bn EU fine, slower growth takes toll

cloud_thrasher
1pts0
medium.com 7y ago

Operation Mindfuck 2.0

cloud_thrasher
2pts0
www.cpomagazine.com 7y ago

Epic Alleges Google Helping U.S. Government Conduct Warrantless Searches

cloud_thrasher
2pts0
techcrunch.com 7y ago

Amazon is prepping a high-fidelity TIDAL competitor

cloud_thrasher
3pts1
arstechnica.com 7y ago

Comcast usage soars 34% to 200GB a month, pushing users closer to data cap

cloud_thrasher
3pts0
www.theverge.com 7y ago

That mental health app might share your data without telling you

cloud_thrasher
3pts0
krebsonsecurity.com 7y ago

P2P Weakness Exposes Millions of IoT Devices

cloud_thrasher
2pts0
www.darkreading.com 7y ago

A Nigerian ISP Accidentally Hijacked the Internet

cloud_thrasher
6pts0
motherboard.vice.com 7y ago

Google Gives Free Security Keys to Activists, but Not If You’re in Iran or Syria

cloud_thrasher
9pts5
www.npr.org 7y ago

UCLA, CSU Quarantine 200 After Possible Measles Exposure

cloud_thrasher
1pts0
gizmodo.com 7y ago

Porn Regulators Powerless Against Horny British Teens

cloud_thrasher
2pts0

From my experience, it's the "Access-Control-Allow-Origin: *" response header that causes the problem. So, it's in the way Chrome uses/enforces cross-origin HTTP request/response headers.

This is a long-standing issue and many solutions have been devised. Regardless of most solutions, it will probably always fail because people don't want to be bothered with remembering colors, images, configuring PGP, etc. Case in point, ask anyone how much they are annoyed by reCAPTCHA.