David Tulis

The Browser Is Now an AI Runtime: Security Risks in Chrome's On-Device Models

Chrome installs a 4.27 GB AI model on qualifying desktops without asking. Once it's there, any HTTPS website the user visits can run it with no consent prompt, no usage indicator, and no rate limit.

Kirill Gelfand, Vladimir Kropotov, Fyodor Yarochkin, David Tulis