:

CHROME DOWNLOADS 4GB AI FILE WITHOUT USER CONSENT

AI DESK2 MIN READ
WED, MAY 6, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

A researcher has alleged that Google Chrome automatically downloads a 4GB artificial intelligence model file without user permission, with the file reappearing even after deletion.

Security researcher Max Kostyan discovered that Chrome initiates a multi-gigabyte download related to AI functionality without explicit user consent or clear notification. The downloaded file persists on user systems even when manually deleted, suggesting an automatic re-download mechanism. The file in question appears connected to Chrome's AI-powered features, though Google has not publicly detailed the exact purpose or contents. The discovery raises questions about bandwidth usage, storage space, and user control over system resources. Kostyan's findings indicate that the download occurs independently of user settings or preferences. The behavior contradicts standard practices where significant resource-intensive operations require explicit opt-in from users. The reappearance of the file after deletion suggests Chrome's system is designed to maintain the AI model regardless of user intervention. This functionality could impact users with limited storage space or data caps, particularly on systems where multiple users share resources. Google has not immediately responded to the allegations. The discovery adds to ongoing discussions about browser behavior transparency and user autonomy over system resources. The incident highlights broader concerns about how tech companies implement AI features and the level of disclosure provided to users. Similar issues have surfaced with other major browsers implementing background downloads for functionality updates and feature support. Users concerned about the download can check their system storage and browser cache directories. However, the automatic re-download mechanism means manual deletion may not provide a permanent solution until Google addresses the underlying behavior or provides official settings to disable the feature.

■ SOURCES

Engadget

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Google is rolling out Encrypted Client Hello (ECH) support in Android 17 to prevent network monitoring of user browsing activity. The privacy feature strengthens connection security across cellular and home networks.

1H AGOIndustry Desk

A new survey shows more Americans oppose police use of license plate readers than support them. The finding reflects growing concerns about surveillance overreach.

1H AGOIndustry Desk

The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a "major incident" involving a compromised system following claims by the Qilin ransomware group.

8H AGOAI Desk

Claude, Codex, and Hermes generated 227 install commands referencing code with no identifiable owners, according to analysis of corporate documentation. The discovery raises security concerns about AI-generated dependencies.

8H AGOAI Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.