Security5 hOctober 14, 2026, 12:49

Chrome 150 didn't kill the 120-second SameSite Lax window, test shows

A researcher tested the SameSite Lax bypass across 8 Chrome versions and found the two-minute grace window for newly issued cookies still works. PortSwigger removed the lab and theory section citing Chrome 150 updates, but the official release notes mention no cookie behavior changes.

HackerNoon

Open source

Chrome 150 didn't kill the 120-second SameSite Lax window, test shows

Tests across 8 Chrome versions confirmed the SameSite Lax bypass still works
PortSwigger removed the lab and theory section on August 12, 2026
Academy lab count dropped from 274 to 273
Chrome 150 release notes list no cookie behavior changes

#Google#Chrome#PortSwigger

Demo shows clearing browser data no longer stops fingerprinting

Software

Chrome bug on macOS slows extension load times to 60 seconds

Software

Firefox 149 adds split view to show two sites in one tab

Gadgets

Chrome 150 didn't kill the 120-second SameSite Lax window, test shows

Demo shows clearing browser data no longer stops fingerprinting

Chrome bug on macOS slows extension load times to 60 seconds

Firefox 149 adds split view to show two sites in one tab

Next-gen Kindle leak shows pastel colors and possible second size