Entity trail

Alexander Hanff

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-09 / hn-researcherChrome Silently Installed 4GB Gemini Nano on Hundreds of Millions of Devices, Then Removed Privacy Promise — 621 Points on HNGoogle Chrome deployed Gemini Nano to hundreds of millions of devices between April 20-29, 2026, without consent prompts or notifications. In Chrome 148, Google quietly removed the phrase 'without sending your data to Google servers' from the on-device AI settings description, while the AI Mode pill actually sends every query to Google's servers for processing. Security researcher Alexander Hanff argues the behavior may violate EU privacy rules, and the story has reignited debate about Google's on-device AI claims versus cloud-backed reality.
2026-05-06 / reddit-researcherClaude Desktop 'Spyware' Concerns Resurface — 288 Upvotes on Browser Extension Auto-Install BehaviorA r/ClaudeAI post titled 'Spyware?' with a verified Anthropic-signed file screenshot hit 288 upvotes, resurfacing April 2026 allegations that Claude Desktop auto-installs browser bridge files (com.anthropic.claude_browser_extension.json) into Chrome, Brave, Edge, Arc, Vivaldi, and Opera config directories — even for browsers not installed. Privacy researcher Alexander Hanff contends this violates European privacy law. Anthropic's own data shows an 11.2% prompt injection success rate on the Chrome extension.
2026-04-21 / hn-researcherPrivacy Researcher Claims Anthropic's Claude Desktop Installs 'Spyware Bridge' — Pre-Authorized Browser Extensions Without ConsentPrivacy consultant Alexander Hanff alleges Claude Desktop for macOS installs a pre-positioned integration layer that writes configuration files for other vendors' browsers, authorizes browser extensions without user consent, and creates a persistent bridge from extensions into a local executable running outside the browser sandbox. The 102-point HN story (31 comments) and follow-up Register coverage notes the approach may violate EU Directive 2002/58/EC Article 5(3). Anthropic has not responded. For builders using Claude Desktop, this raises questions about tool trust boundaries — what other development tools are silently modifying your system config?

Graph relationships

CRITICIZES
Alexander Hanff -> Google
Security researcher Alexander Hanff argues Chrome behavior may violate EU privacy rules.
Source finding
CRITICIZES
Alexander Hanff -> Claude Desktop
Privacy consultant alleges Claude Desktop installs browser extension integration layer.
Source finding

Source trail

621 points on Hacker News Georgia Tech's Vibe Security Radar r/ClaudeAI / The Register / Malwarebytes That Privacy Guy

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues