How some websites know your Google search queries

22 points by holdenc ↗ HN
Google Chrome is automatically prefetching the first Google result and therefore passing your IP address and search query (in the referrer) to that website's server. It's called Google Chrome prefetch and it's turned on by default.

So while you may not have clicked on that person's LinkedIn or Facebook profile, Google Chrome has already done this for you.

To switch it off: - Chrome > Menu icon > Settings > Advanced > Privacy and security > "Use a prediction service to load pages more quickly", toggle off

5 comments

[ 3.3 ms ] story [ 21.7 ms ] thread
Interestingly, that setting was turned OFF for me my default because I have uBlock Origin installed.
Surely this has massive security implications. A browser shouldn't be fetching arbitrary pages that I didn't ask it to. One of those pages might have an exploit on it...
Prefetch is not uncommon at all. Tons of browsers/apps do it.
Some messaging apps seem to prefetch thumbnails and article titles too, which doesn't work out well when you inevitably receive a spam/phishing link.
Is just Google? I am on Firefox