The Daily Diff · Sunday, September 6, 2026 · weekend edition · watch the episode
- Chrome exempts google.com from delete-on-close, again
+ Isar Aerospace: first private European rocket in orbit
+ Spotify’s Portal cuts Claude Code tokens by 90%
- A/I shuts down after 25 yearsThe most upvoted story on Hacker News this weekend (1,278 points) is a Mastodon post about a copy of qBittorrent that “escaped its sandbox” and downloaded content owned by major corporations, after which a copy of Jellyfin “broke containment” and shelved it. It is the summer’s first sandbox-escape incident report where everyone agrees who did it.
It was a big weekend for things escaping. On Saturday, Jeff Johnson found Chrome quietly keeping google.com’s cookies after you told it to delete everything — a bug Google already fixed once, six years ago. Saturday night, the German startup Isar Aerospace put a rocket into orbit from Norway on its second try (the first lasted under a minute). And on Sunday the Italian collective Autistici/Inventati shut down after 25 years of hosting activists’ mail, which I’ll link rather than joke about.
Chrome keeps google.com, again
Jeff Johnson makes Mac apps and, apparently, Chrome bug reports. On two Macs running Chrome 152.0.7977.83 he set the search engine to DuckDuckGo, turned Chrome sign-in off, and set site data to “delete when you close all windows” — burn after reading, for browsers. He ran one Google search, closed the only window, and google.com was still there: cookies, local storage and session storage, surviving a full quit and relaunch. As far as he can tell, it is the only site that gets this treatment. A Debian user reproduced it on open-source Chromium 152.0.7977.75 the same day, so it lives in the code every Chromium browser builds from, including the ones with privacy in the tagline.
Now, the word again. In October 2020 the same Jeff Johnson found the same thing in Chrome 86: Apple’s data got wiped on quit, YouTube and Google Search kept theirs. The Register, The Verge and Gizmodo covered it; Google called it a bug and fixed it within weeks. Six years later it’s back. Johnson cites Hanlon’s razor, then adds that Google has no excuse for incompetence either, and suggests unit tests: “Move slower and don’t break things.” Nobody knows which release regressed it; statistically, a Friday deploy.
For context, the same Chrome 152 shipped on Thursday with 12 security fixes, one of them a V8 type confusion (CVE-2026-85046) already being used to escape the sandbox — bounty: $1,000. The same week, Google pulled every Manifest V2 extension from the Chrome Web Store, uBlock Origin included, for your security. So Chrome had a sandbox escape that pays a thousand dollars and a settings escape that pays Google. On Wednesday I stamped Google SHIP IT for a model; that stands — the model didn’t write this browser. Probably.
A rocket, from Norway
At 10:12 pm on Saturday, from Andøya in Norway, Isar Aerospace’s Spectrum — 28 metres, two stages, about a tonne to low Earth orbit — reached orbit a little over seven minutes after liftoff, then circularized and deployed five cubesats and one bolted-on experiment: the first orbital launch ever from Western European soil.
That was flight two. Flight one, in March 2025, lasted under a minute. Flight two slipped from January to June: a pressurization valve, a leak, the weather, and, at one point, a boat. CEO Daniel Metzler says “Europe now has sovereign access to space”; the top Hacker News comment notes French Guiana has been in the EU this whole time, which is technically correct, the most European kind of correct. The press release says the new factory can build up to 40 rockets a year; Space.com says more than 30. Pick one.
Spotify’s shunt: 90% fewer Claude Code tokens
On Thursday, Spotify’s engineering blog explained how one engineer cut Claude Code token usage by 90%, and the trick insults the frontier model: most of what the agent does isn’t thinking, it’s reading files. A Claude Code plugin called shunt hooks every Read call, blocks any file over 350 lines, and hands it to Gemini 2.5 Flash via a Portal “mode” instead. Their framing: a quarter of engineering leaders already burn $200–$500 per developer per month on tokens, some past $2,000 — Spotify Wrapped for your token bill, top genre: reading the same twenty test files.
The fine print is in the post itself: each delegation is a 10–30 second round trip, you can’t delegate edits because the cheap model doesn’t do line numbers, and it missed a thread-safety bug Claude caught in seconds. The 90% applies to reading — not the bill, not the bug.
Comprehension debt
Sylvain Kalache, a LinkedIn SRE back in 2012, wrote the weekend’s most uncomfortable post: AI now handles the routine incidents at 3 a.m., and routine incidents were how humans learned their systems, so when the weird one comes, whoever is paged has less practice than ever. He cites Lisanne Bainbridge’s 1983 paper The Ironies of Automation and aviation: turbine engines fail in flight less than once per 100,000 hours, yet captains still rehearse it every six months — because on TransAsia Flight 235 the crew shut down the wrong engine and had 117 seconds. His prediction: routine incidents resolve faster, complex ones much slower; he calls the gap “comprehension debt”, which also describes me and our Kubernetes cluster.
He works at Rootly, which sells incident simulators, so the conclusion arrives pre-sponsored — but the point stands. The one sandbox escape everyone trusted this weekend was investigated by a human, on a couch, with a torrent client.
Verdict: REVERT — A setting that says delete everything, and a browser that deletes everything except its owner, is not a bug you get to ship twice.
Sources
Chrome again exempts Google from user site data settings — https://lapcatsoftware.com/articles/2026/9/1.html · HN https://news.ycombinator.com/item?id=49581870
The 2020 original (Chrome 86) — https://lapcatsoftware.com/articles/chrome-google.html · HN https://news.ycombinator.com/item?id=24817304
The Register (2020) — https://www.theregister.com/software/2020/10/19/when-you-tell-chrome-to-wipe-private-data-about-you-it-spares-two-websites-from-the-purge-googlecom-youtube/314329
The Verge (2020): Google fixed the bug — https://www.theverge.com/2020/10/21/21526341/google-chrome-local-storage-cookies-youtube-search-bug-fix
Gizmodo (2020) — https://gizmodo.com/latest-chrome-bug-purged-browser-data-except-from-si-1845424226
Chrome 152.0.7977.82 stable release notes — https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html · https://nvd.nist.gov/vuln/detail/cve-2026-85046
Manifest V2 extensions removed from the Chrome Web Store — https://webiterate.dev/google-removed-extensions-ublock-origin-108/
“QBittorrent breaks out of sandbox to commit crimes” — https://beige.party/@intransitivelie/117057396732763183 · HN https://news.ycombinator.com/item?id=49586171
Isar Aerospace press release — https://isaraerospace.com/press/history-for-european-spaceflight-isar-aerospace-reaches-orbit-and-deploys-payloads-on-second-flight
Space.com on the launch — https://www.space.com/space-exploration/launches-spacecraft/isar-aerospace-second-launch-norway-andoya-spaceport-spectrum-rocket
Portal by Spotify cut my Claude Code token usage by 90% — https://engineering.atspotify.com/2026/9/portal-by-spotify-cut-my-claude-code-token-usage-by-90
AI handles incidents, engineers lose touch with their systems — https://www.sylvainkalache.com/blog/ai-handles-incidents-engineers-lose-touch-with-their-systems
A/I shuts down — https://keepitfree.ai/announcements/a/i-shuts-down-stay-human/
Hacker News front pages — https://news.ycombinator.com/front?day=2026-09-05 · https://news.ycombinator.com/front?day=2026-09-06
That’s today’s diff. I’m Niko from Axrisi — merge responsibly.
YouTube · thedailydiff.dev · forward this to whoever deployed on Friday.