![EvanLuthra's tweet photo. 🚨GOOGLE JUST SILENTLY DOWNLOADED A 4GB AI MODEL TO YOUR COMPUTER WITHOUT ASKING.. WITHOUT TELLING YOU.. AND WITHOUT ANY WAY TO STOP IT..
If you use Chrome.. There's a good chance a 4 gigabyte file is sitting on your hard drive right now that you never agreed to download..
It's called Gemini Nano.. Google's on-device AI model.. A security researcher just proved it installs itself with zero clicks.. Zero prompts.. Zero notifications..
Alexander Hanff set up a completely fresh Chrome profile.. Didn't click anything.. Didn't scroll.. Didn't type a single keystroke.. Just opened the browser and watched..
14 minutes and 28 seconds later.. Chrome had silently scanned his hardware.. Read his GPU, RAM, and storage.. Then wrote a 4GB file to his hard drive.. No permission dialog.. Nothing..
Chrome's own logs show the download begins BEFORE the settings page where you could opt out is even loaded.. The file starts installing before the refusal button exists..
As of Chrome 148.. Any website you visit can trigger this download.. One line of JavaScript.. You click a link to read a blog post.. That click counts as "user activation".. And Chrome silently pulls 4GB in the background..
No install prompt.. No consent dialog.. Google's own docs admit this..
Your laptop overheats.. Storage disappears.. Battery drains.. And you have no idea why..
The model doesn't even work well.. Cloud requests take 1.3 seconds.. The local model at worst case takes over 9 minutes for a single response..
Google is using your storage, electricity, and bandwidth to run an AI that's 40 times slower than their own servers..
And the "AI Mode" button in Chrome's address bar.. Doesn't even use the local model.. It sends everything to Google's cloud anyway..
You pay the storage penalty.. The heat penalty.. The bandwidth penalty.. And the visible AI feature ignores the local file entirely..
Because Chrome fails to clean up old versions.. Users are finding 12GB or more of duplicate AI files stacked on their drives..
Palo Alto Networks found a vulnerability where a browser extension could hijack the local AI model's permissions.. Accessing your webcam.. Microphone.. Local files.. Through an AI you never installed..
Here's how to check if it's on your machine..
Windows.. C:\Users\[YourName]\AppData\Local\Google\Chrome\User Data\Default\OptGuideOnDeviceModel\
Mac.. ~/Library/Application Support/Google/Chrome/Default/OptGuideOnDeviceModel/
If there's a file called weights.bin.. Google downloaded their AI to your computer without asking..
To stop it.. Type chrome://flags.. Search "optimization-guide-on-device-model" and disable it.. Search "prompt-api-for-gemini-nano" and disable that too.. Restart Chrome.. Then manually delete the folder..
If you don't disable the flags first.. Chrome redownloads the 4GB file on next launch..
Firefox requires explicit opt-in for AI.. Apple Intelligence requires explicit consent.. Chrome just takes your hard drive..
Google didn't ask to use your storage.. Your electricity.. Your bandwidth..
They just took it.](https://pbs.twimg.com/media/HHllpnRbUAA7IOT.jpg)
Olivia
Online
Alisios Informáticos
@CSanzAlm
S/C De Tenerife
Joined August 2009
283 Following
160 Followers
967 Posts
Un estudio revela que casi la mitad de las pymes se sienten seguras en su ciberseguridad. Sin embargo, muchas siguen sin aplicar medidas básicas
El factor humano continúa siendo uno de los principales riesgos
https://t.co/MltxK9y2yM
#Halkon #KeepSafe #Ciberseguridad #Pymes
📱 Actualiza y #KeepSafe
Google ha publicado el boletín de seguridad de Android correspondiente a junio de 2026 y llega cargado de correcciones importantes.
📖 Más información:
https://t.co/84kqnhsLlH
#Halkon #KeepSafe #Ciberseguridad #Android #Actualizaciones #Privacidad
El 70% de los ciberataques en España ya tiene como objetivo a autónomos y pymes
La razón suele ser errores cotidianos
La ciberseguridad es protección del negocio y de la actividad diaria.
https://t.co/utSaLgg9nO
#Ciberseguridad #Autónomos #Pymes #KeepSafe
¿Tu contraseña sigue siendo “123456” o tu nombre? Entonces tienes una puerta abierta.
Protege tus cuentas
No repitas la misma clave
Activa la autenticación multifactor
Utiliza un gestor de contraseñas
La seguridad empieza por lo básico.
#KeepSafe #Ciberseguridad #Contraseñas
Who to follow
Pablo San Emeterio 
@psaneme
Emprendedor en VAPASEC. Investigador y formador en ciberseguridad, desarrollador de software y colaborador en @ciberafterwork spotify: https://t.co/GvL89h9HGG
Hackron
@Hackr0n
infosec Conference HACKRON #CANARIAS #Hackers (@) Paradise /join Telegram group… https://t.co/8VEtWvx8Jp 🇮🇨
EsferaRed |SI VIS PACEM PARA IA MEGA-CIBER-BELLUM
@ESFERARED
Cybersecurity Specialist,Evangelist,Computer & Networks ,| OSINT-GeoPolítics-Cibercooperante-Speaker-IT Pentest-Researcher https://t.co/kUEe4J7Nq8
Tras el fin del Kit Digital, el apoyo público a la digitalización continúa de forma descentralizada:
➜ Programas autonómicos
➜ Fondos europeos de desarrollo rural
➜ Subvenciones para software
Digitaliza y#KeepSafe.
https://t.co/Ry7UxXhQBb
#Pymes #Autónomos #Digitalización
Solo el 1% de las pymes afectadas logró evitar consecuencias tras sufrir un ataque en el último año.
Entre los principales efectos destacan:
🔸 Fraude
🔸 Ataques DNS
🔸 Ransomware
🔸 Brechas de datos
https://t.co/zUj3UOgUxl
#Pymes #Halkon #KeepSafe #Ciberseguridad #Ransomware
Las pymes españolas confían en su ciberseguridad: el 47,5% se siente preparada frente a las ciberamenazas y 6 de cada 10 aumentarán su inversión.
Y ojo: la IA exige seguridad desde el inicio.
https://t.co/XiGQAfyfwv
#Pymes #Halkon #KeepSafe #Ciberseguridad #ResilienciaDigital
Acaba de confirmarse: Un exploit de zero-day llamado 'MiniPlasma' permite a los atacantes obtener acceso de SYSTEM en sistemas Windows completamente actualizados.
El exploit afecta a Microsoft Windows, específicamente al servicio de impresión y manejo de colas de impresión, y permite una elevación de privilegios locales (LPE) a NT AUTHORITY\SYSTEM.
La vulnerabilidad es de tipo zero-day, sin parche oficial disponible, y se ha publicado un proof-of-concept (PoC) que demuestra su explotación en sistemas Windows totalmente parcheados.
El impacto es grave, ya que permite a los atacantes obtener acceso de SYSTEM a los sistemas afectados, lo que podría llevar a daños.
¿Hay parche? No, por ahora. ¿Qué deben hacer los afectados HOY? Revisar los logs de seguridad y monitorear el sistema para detectar cualquier actividad sospechosa. ¿Estás en riesgo? Revisa esto: actualiza tus sistemas lo antes posible y aplica las medidas de seguridad recomendadas.
https://t.co/UeURc95WF6
Gracias #SantaCruzdeTenerife
#GranCanaria prepárate
La digitalización impulsa el trabajo de los autónomos, pero aumenta su exposición a ciberataques
Según UPTA, 6 de cada 10 autónomos en España están en “exposición elevada” ante riesgos de ciberseguridad.
Digitalizarse sí, pero con protección.
https://t.co/AaVSA7MRKb
Una devolución de Hacienda puede ser una trampa.
Durante la RENTA, hay autónomos que reciben SMS suplantando a la AEAT con falsas devoluciones
No pulses enlaces sospechosos, usa canales oficiales
https://t.co/l3z7FDYpMC
#Halkon #KeepSafe #Renta2026 #Phishing #Autónomos
Logramos colarnos en el programa de radio Roscas&Cotufas de la @RTVCes hemos colgado el fragmento en https://t.co/t0PLB3iNbL
Todo preparado para la #Hackron2026 Sin nuestros patrocinadores ni nuestros asistentes esto no seria igual.
Gracias nos vemos el 15 de Mayo #Tenerife
Agenda: https://t.co/G5ZqrIzFdp
⚠️ BitUnlocker Attack on Windows 11 Allows Access to Encrypted Disks in 5 Minutes
Source: https://t.co/dq8KjmuHtP
A new tool, BitUnlocker, reveals a practical downgrade attack against Microsoft's BitLocker encryption, allowing attackers with physical access to decrypt protected volumes on patched Windows 11 machines in under 5 minutes by exploiting a crucial gap between patching and certificate revocation.
The attack is rooted in CVE-2025-48804, one of four critical zero-day vulnerabilities. Systems that have completed the KB5025885 migration, moving the boot manager signature to the newer Windows UEFI CA 2023 certificate, are also protected against this downgrade path.
#cybersecuritynews #Windows11
Suplantan al LIDL a través de tiendas online falsas para robar dados
https://t.co/F8KeTwsWKC
Las pymes ya no compiten solo con el negocio de la esquina: compiten en Google y en el móvil del cliente.
Sin visibilidad, web actualizada y SEO se pierden oportunidades.
Digitalizar es transformar el negocio
#Pymes #Digitalizacion #KeepSafe
https://t.co/zi3dZu4y0Z
🚨GOOGLE JUST SILENTLY DOWNLOADED A 4GB AI MODEL TO YOUR COMPUTER WITHOUT ASKING.. WITHOUT TELLING YOU.. AND WITHOUT ANY WAY TO STOP IT..
If you use Chrome.. There's a good chance a 4 gigabyte file is sitting on your hard drive right now that you never agreed to download..
It's called Gemini Nano.. Google's on-device AI model.. A security researcher just proved it installs itself with zero clicks.. Zero prompts.. Zero notifications..
Alexander Hanff set up a completely fresh Chrome profile.. Didn't click anything.. Didn't scroll.. Didn't type a single keystroke.. Just opened the browser and watched..
14 minutes and 28 seconds later.. Chrome had silently scanned his hardware.. Read his GPU, RAM, and storage.. Then wrote a 4GB file to his hard drive.. No permission dialog.. Nothing..
Chrome's own logs show the download begins BEFORE the settings page where you could opt out is even loaded.. The file starts installing before the refusal button exists..
As of Chrome 148.. Any website you visit can trigger this download.. One line of JavaScript.. You click a link to read a blog post.. That click counts as "user activation".. And Chrome silently pulls 4GB in the background..
No install prompt.. No consent dialog.. Google's own docs admit this..
Your laptop overheats.. Storage disappears.. Battery drains.. And you have no idea why..
The model doesn't even work well.. Cloud requests take 1.3 seconds.. The local model at worst case takes over 9 minutes for a single response..
Google is using your storage, electricity, and bandwidth to run an AI that's 40 times slower than their own servers..
And the "AI Mode" button in Chrome's address bar.. Doesn't even use the local model.. It sends everything to Google's cloud anyway..
You pay the storage penalty.. The heat penalty.. The bandwidth penalty.. And the visible AI feature ignores the local file entirely..
Because Chrome fails to clean up old versions.. Users are finding 12GB or more of duplicate AI files stacked on their drives..
Palo Alto Networks found a vulnerability where a browser extension could hijack the local AI model's permissions.. Accessing your webcam.. Microphone.. Local files.. Through an AI you never installed..
Here's how to check if it's on your machine..
Windows.. C:\Users\[YourName]\AppData\Local\Google\Chrome\User Data\Default\OptGuideOnDeviceModel\
Mac.. ~/Library/Application Support/Google/Chrome/Default/OptGuideOnDeviceModel/
If there's a file called weights.bin.. Google downloaded their AI to your computer without asking..
To stop it.. Type chrome://flags.. Search "optimization-guide-on-device-model" and disable it.. Search "prompt-api-for-gemini-nano" and disable that too.. Restart Chrome.. Then manually delete the folder..
If you don't disable the flags first.. Chrome redownloads the 4GB file on next launch..
Firefox requires explicit opt-in for AI.. Apple Intelligence requires explicit consent.. Chrome just takes your hard drive..
Google didn't ask to use your storage.. Your electricity.. Your bandwidth..
They just took it.
![EvanLuthra's tweet photo. 🚨GOOGLE JUST SILENTLY DOWNLOADED A 4GB AI MODEL TO YOUR COMPUTER WITHOUT ASKING.. WITHOUT TELLING YOU.. AND WITHOUT ANY WAY TO STOP IT..
If you use Chrome.. There's a good chance a 4 gigabyte file is sitting on your hard drive right now that you never agreed to download..
It's called Gemini Nano.. Google's on-device AI model.. A security researcher just proved it installs itself with zero clicks.. Zero prompts.. Zero notifications..
Alexander Hanff set up a completely fresh Chrome profile.. Didn't click anything.. Didn't scroll.. Didn't type a single keystroke.. Just opened the browser and watched..
14 minutes and 28 seconds later.. Chrome had silently scanned his hardware.. Read his GPU, RAM, and storage.. Then wrote a 4GB file to his hard drive.. No permission dialog.. Nothing..
Chrome's own logs show the download begins BEFORE the settings page where you could opt out is even loaded.. The file starts installing before the refusal button exists..
As of Chrome 148.. Any website you visit can trigger this download.. One line of JavaScript.. You click a link to read a blog post.. That click counts as "user activation".. And Chrome silently pulls 4GB in the background..
No install prompt.. No consent dialog.. Google's own docs admit this..
Your laptop overheats.. Storage disappears.. Battery drains.. And you have no idea why..
The model doesn't even work well.. Cloud requests take 1.3 seconds.. The local model at worst case takes over 9 minutes for a single response..
Google is using your storage, electricity, and bandwidth to run an AI that's 40 times slower than their own servers..
And the "AI Mode" button in Chrome's address bar.. Doesn't even use the local model.. It sends everything to Google's cloud anyway..
You pay the storage penalty.. The heat penalty.. The bandwidth penalty.. And the visible AI feature ignores the local file entirely..
Because Chrome fails to clean up old versions.. Users are finding 12GB or more of duplicate AI files stacked on their drives..
Palo Alto Networks found a vulnerability where a browser extension could hijack the local AI model's permissions.. Accessing your webcam.. Microphone.. Local files.. Through an AI you never installed..
Here's how to check if it's on your machine..
Windows.. C:\Users\[YourName]\AppData\Local\Google\Chrome\User Data\Default\OptGuideOnDeviceModel\
Mac.. ~/Library/Application Support/Google/Chrome/Default/OptGuideOnDeviceModel/
If there's a file called weights.bin.. Google downloaded their AI to your computer without asking..
To stop it.. Type chrome://flags.. Search "optimization-guide-on-device-model" and disable it.. Search "prompt-api-for-gemini-nano" and disable that too.. Restart Chrome.. Then manually delete the folder..
If you don't disable the flags first.. Chrome redownloads the 4GB file on next launch..
Firefox requires explicit opt-in for AI.. Apple Intelligence requires explicit consent.. Chrome just takes your hard drive..
Google didn't ask to use your storage.. Your electricity.. Your bandwidth..
They just took it.](https://pbs.twimg.com/media/HHllsTWaYAA1fe0.jpg)
Most Popular Users
Elon Musk
@elonmusk
240.2M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.6M followers
Cristiano Ronaldo
@cristiano
109M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.3M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.6M followers
KATY PERRY
@katyperry
86.8M followers
Taylor Swift
@taylorswift13
80.6M followers
Lady Gaga
@ladygaga
72.2M followers
Kim Kardashian
@kimkardashian
69.4M followers
YouTube
@youtube
68.6M followers
Virat Kohli
@imvkohli
68.6M followers
Bill Gates
@billgates
63.4M followers
The Ellen Show
@theellenshow
62.5M followers
CNN
@cnn
61.9M followers
Neymar Jr
@neymarjr
61.1M followers
X
@x
60.9M followers
Selena Gomez
@selenagomez
59.9M followers