TLDR InfoSec · MISCELLANEOUS

THE MULTI-LAYERED DEFENSES THAT HARDEN CHROME AGAINST ABUSIVE NOTIFICATIONS

blog.google4 min read

Summary from the TLDR InfoSec newsletter

Chrome Security detailed a new defense-in-depth stack utilizing Firebase Cloud Messaging and Safe Browsing that successfully blocked over 7 billion abusive Android notifications per day in Q1. The multi-layered approach curtails coordinated spam networks by automatically revoking permissions for suspicious sites, analyzing malicious service worker activity signals, and throttling disruptive domains at the FCM server level to 1,000 messages per minute with HTTP 429 error responses.