LISTENING IN: Privacy Researcher Finds Anthropic’s Claude Desktop App Installs Undisclosed Native Messaging Bridge
DO YOU HEAR ME NOW?
A detailed technical analysis published by privacy and security researcher Alexander Hanff has raised serious concerns about Anthropic’s Claude Desktop application for macOS. Hanff, whose work is frequently referenced by Chief Privacy Officers and cybersecurity professionals, discovered the issue while auditing Native Messaging helpers on his own MacBook.
According to the blog post, installing the Claude Desktop app automatically deploys a Native Messaging manifest file named com.anthropic.claude_browser_extension.json into the support directories of multiple Chromium-based browsers.
This occurs even for browsers the user has never installed or does not use!
The manifest file references a local binary located inside the https://t.co/wOrSj0VaXG bundle at /Applications/Claude.app/Contents/Helpers/chrome-native-host. This binary functions as a bridge that allows pre-authorized browser extensions to communicate directly with the Claude Desktop app outside the browser’s sandbox, operating at full user privilege level via standard input/output.
Key technical findings include:
•The bridge pre-authorizes three specific Chrome extension IDs.
•It is designed to remain dormant until activated by one of those extensions.
•The manifest files are automatically recreated every time the Claude Desktop app launches, making permanent removal difficult.
•Installation activity is logged in ~/Library/Logs/Claude/main.log, with timestamps confirming the files were written regardless of whether the browsers were present or supported.
Hanff notes that the silent installation without user disclosure or consent is the central issue.
Privacy, Security, and Potential Legal Implications.
Corporations should not only note this but assume this is taking place.
The researcher characterizes the behavior as “pre-installed spyware capability” for several reasons:
•No clear notification or opt-in is provided to users during installation.
•The process modifies configuration files across multiple browser vendors and creates directories for non-existent browsers.
•Once active, the bridge could potentially expose authenticated web sessions (e.g., banking, email, or health portals), read decrypted page content, or enable automation.
•The generic naming and automatic re-creation obscure the mechanism, resembling “dark patterns.”
Hanff further contends that the practice may violate Article 5(3) of the EU’s ePrivacy Directive, which requires explicit consent before storing or accessing information on a user’s device.
In response, he has issued a formal Cease and Desist letter to Anthropic, demanding that the company update the app to require explicit user opt-in (for example, only after the corresponding Chrome extension is installed) within 72 hours, or face further legal action.
This revelation highlights ongoing challenges in the AI industry as companies develop increasingly “agentic” tools that require deep system and browser access.
While such technical bridges are sometimes necessary for advanced functionality, transparency, documentation, and user control are considered essential by privacy advocates.
Anthropic as expected has not issued a public statement addressing the specific allegations.
Users who have installed Claude Desktop on macOS are advised be sure they like this idea.
I sure don’t.
Alexander Hanff’s full technical analysis: https://t.co/GSNNLeL81S
i built this 4d reconstruction of iran's chokehold on the world's oil. almost nothing is getting through the strait of hormuz.
you can clearly see the path ships took before/after the blockade, and can even detect & track "dark vessels" getting through.
0:00 - clearly see the before/after route change
0:26 - tracking iran's new tollbooth
1:31 - dark vessel detection
2:17 - tracking ships going dark mid-transit
NEW: Musician Murphy Campbell says she isn’t making money on YouTube because an AI company is cloning her music and filing copyright claims against her own videos
“An entity called Timeless Sounds IR uploaded AI-generated versions of my songs to all major streaming platforms...
They used a distributor, which I just discovered, and that distributor’s name is Vydia. They used Vydia to upload all these AI-generated songs.
Vydia has since decided to make copyright claims on all of the videos that were used to feed that AI engine to sound like me.
So Vydia has come forward and made copyright claims on my YouTube page.
Because YouTube does not personally review these things, I am no longer making money on YouTube.
Vydia is making money on YouTube off of my own videos of me playing my own banjo in my own backyard with traditional folk songs, some for my own family, over AI-generated music.”
🚨 Do you understand what happened in the last 12 hours?
> A CEO of a $200 billion company said on camera that 35% of new grads won't find jobs. He didn't even flinch saying it.
> Meta made $165 billion last year and is still firing 15,000 people because apparently record profit isn't profitable enough.
> Some random guy in Florida sold his entire house in 5 days using ChatGPT. No real estate agent, no commission, no experience. Just vibes and a $20 subscription.
> A man in Australia cured his dying dog's cancer with AI after every single vet told him there was nothing left to do. Built a custom vaccine from his couch.
> The guy who created Uber and left 300,000 taxi drivers broke is back. Building robots now because apparently ruining one industry wasn't enough.
> Tinder wants access to your camera roll. Your drunk photos, your 3am notes app meltdowns, your deleted selfies. They're calling it a "vibe check."
> Naval, the man who made hundreds of millions investing in software, just said software is dead. Four words and the entire industry felt it.
> And Anthropic removed the limit on how long their AI can think and then doubled everyone's usage for free. Because when the product is addictive enough you give the first taste away.
All of that happened today. Not this week, not this quarter. Today. A random Saturday in March.
This is worse than you being on meth.
Researchers trained a humanoid robot to play tennis using only 5 hours of motion capture data
The robot can now sustain multi-shot rallies with human players, hitting balls traveling >15 m/s with a ~90% success rate
AlphaGo for every sport is coming
A Chinese student built an interesting app using vibe coding that visualizes nearly 5,000 artifacts in the British Museum from 99 countries around the world.
The app shows:
• When these artifacts arrived
• Which country they came from
• And how the distribution would look if all artifacts were returned to their countries of origin.
Between Gemini 3.1 and Claude 4.6 it's honestly wild what you can build. This feels like Google Earth and Palantir had a baby.
Made this with all the geospatial bells and whistles -- real time plane & satellite tracking, real traffic cams in Austin, and even got a traffic system working. Panoptic detection on everything.
Skinned the whole thing to look like a classified intelligence system. EO, FLIR, CRT. Got a bunch more stuff on the roadmap. This is fun.
A solo dev just vibe coded what Palantir charges governments millions for.
Claude 4.6 + Gemini 3.1.
The defense tech disruption is going to be something.
exploring shapes of thoughts: extracted my obsidian notes' embeddings and arranges them as a 3d network using 3 different topologies:
- centralized: one core idea connecting all
- decentralized: notes cluster into themed hubs
- distributed: edges labeled by llm describing how ideas connect
This is the real reason why Hollywood is panicking.
Shots like this used to cost millions with huge crews, big studios and months of work.
Now? You can create it from your laptop. The cost is basically pocket change.
This is the true power of AI. Anyone can build something epic.
The opening of CASINO ROYALE was shot 100 feet above ground, starring parkour co-founder Sébastien Foucan; the leap from one crane to another and then onto the roof was done in a single shot. Harnesses were digitally erased from the final cut.
Wild times.
Nano Banana 2 apparently leaked for a few hours today on some platforms, and the limited results by a small handful of users have been pretty insane.
The model was apparently from an uncensored, slightly older checkpoint.
When it actually launches it won’t be this uncensored of course.
But crazy to think what a handful of engineers at the frontier labs have access to, and the chaos they could cause if they so wished to…
Omg, AI videos on Douyin are a different breed.
Chinese mom absolutely goes to town on a xenomorph 💀
And just when you think it’s over, it keeps escalating further: