In this episode of the Neural Intel podcast, we conduct a technical post-mortem of Alexander Hanff’s discovery regarding the Claude Desktop application. We break down the provenance metadata and the internal "Chrome Extension MCP" subsystem that Anthropic uses to push these manifests silently.Key Technical Insights:

Sandbox Inversion: How the bridge utilizes stdio to communicate with browser extensions, bypassing standard macOS permission UIs.

Target List Discrepancy: Anthropic’s documentation claims to only support Chrome and Edge, yet the audit reveals silent installs into Brave, Arc, Vivaldi, and Opera.

The "Dormant" Threat: While the bridge is currently inactive without the extension, it pre-stages an attack surface for prompt injection and supply chain exposure.

Legal Compliance: A look at why this practice likely violates Article 5(3) of the ePrivacy Directive and various computer misuse laws.

Join the Conversation:

X/Twitter: @neuralintelorg

Web: neuralintel.org

Forensic Audit of Anthropic’s Native Messaging Backdoor