Skip to main content

Chrome 70 beta enables Android/Mac fingerprint sensors, removes mobile OS build numbers

Earlier this month, Google celebrated Chrome’s 10th anniversary by introducing a Google Material Theme for the browser, making the Omnibar smarter, and introducing a slew of other useful features. Chrome 70 is now rolling out in beta with various new APIs that developers can take advantage of.

To increase privacy, Chrome 70 will no longer include the Android and iOS build number in the user-agent identification string visible to websites. Chrome for iOS follows Safari and freezes the build number at “15E148,” while it will be completely removed on Android. This change prevents exploit targeting, fingerprinting, and other abuses.

Sample user-agent string before the change:
“Mozilla/5.0 (Linux; Android 8.1.0; Pixel Build/OPM4.171019.021.D1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36”

The same string with build number removed:
“Mozilla/5.0 (Linux; Android 8.1.0; Pixel) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.98 Mobile Safari/537.36”

With the last version removing “Secure” from the address bar, Chrome 70 continues the HTTPS adoption push by flashing a “Not secure” warning and red icon when users enter passwords or other personal data on any HTTP page.

Similarly, Chrome will exit full screen mode when dialog boxes — including file pickers and authentication/payment prompts — appear. This change is to ensure that users have proper context before taking a decision on dialogs and alerts.

The AV1 Video Decoder is a next generation codec to improve compression efficiency by 30% compared to VP9. Chrome 70 adds just an AV1 decoder to Chrome OS, macOS, Windows, and Linux, with encoding capabilities not yet included.

Chrome 70 for Android and macOS now allows websites to access a device’s fingerprint or Touch ID sensor. This hardware is now enabled by default as part of the Web Authentication API. On websites that implement the API, Touch ID can be used for 2-factor authentication.

With Web Bluetooth, sites can securely communicate with nearby Bluetooth devices. In Chrome 70, it is enabled on Windows 10, with Android, Chrome OS, and macOS already featuring this capability since version 56. Linux and older versions of Windows can access it with the following flag:

chrome://flags/#enable-experimental-web-platform-features

Chrome 70 allows developers to experiment with a Shape Detection API that can be used to identify faces, barcodes, and text in images through the web. A Face Detection API returns the location of faces, eyes, noses, and mouths, while the Barcode Detection API can decode QR codes into strings. A Text Detection API can also be used to look for Latin text in images.


Check out 9to5Google on YouTube for more news:

FTC: We use income earning auto affiliate links. More.

You’re reading 9to5Google — experts who break news about Google and its surrounding ecosystem, day after day. Be sure to check out our homepage for all the latest news, and follow 9to5Google on Twitter, Facebook, and LinkedIn to stay in the loop. Don’t know where to start? Check out our exclusive stories, reviews, how-tos, and subscribe to our YouTube channel

Comments

Author

Avatar for Abner Li Abner Li

Editor-in-chief. Interested in the minutiae of Google and Alphabet. Tips/talk: abner@9to5g.com