4 Gigabytes You Didn’t Download
Summary
Google Chrome is silently installing Gemini Nano, Google's on-device large language model, on users' machines without explicit consent or notification. This installation creates a folder containing a `weights.bin` file, consuming approximately 4 gigabytes of storage. The process occurs automatically on reasonably modern systems running Chrome, and attempts to delete the file result in Chrome re-downloading it. Privacy researcher Alexander Hanff documented this behavior, observing the installation on a fresh Chrome profile and tracing the download and file writing process through macOS kernel filesystem logs, which took over 14 minutes.
Key takeaway
For AI Engineers and privacy-conscious users, this silent installation of Gemini Nano by Chrome highlights a significant concern regarding user control over local resources and data. You should regularly audit your system for unexpected large file installations by applications. This behavior sets a precedent for how large models might be deployed without explicit consent, potentially impacting system performance and privacy expectations. Consider alternative browsers if this practice conflicts with your operational security or privacy policies.
Key insights
Chrome silently installs Gemini Nano, consuming 4GB, with no user consent or control.
Principles
- Software can install large components without user awareness.
- Default settings can bypass explicit user consent.
Method
Chrome creates temporary directories, downloads model components, and writes the `weights.bin` file to disk, a process observed taking over 14 minutes.
In practice
- Check `~/Library/Application Support/Google/Chrome/OptGuideOnDeviceModel/` on macOS.
- Check `%LOCALAPPDATA%\Google\Chrome\User Data\OptGuideOnDeviceModel` on Windows.
Best for: Software Engineer, AI Engineer, AI Security Engineer
Related on AIssential
Editorial summary, takeaway, and curation by AIssential. Original article published by AI Advances - Medium.