An investigation into Gemini Nano, the on-device language model Google quietly placed inside Chrome, conducted on a stock Windows install of Chrome 147.0.7727.138 stable, extended into a full security and exploit catalog and a parallel analysis of Microsoft Edge's Phi-4-mini install. What follows is a complete forensic, technical, and offensive-security walkthrough, including every working JavaScript exploit path I found, every API output, and the moment the model was caught generating Wikipedia-grade technical writing live in DevTools.

Part 1: The discovery

It started as a simple question in a post on X. That got me wondering about it. Why does Chrome's user data folder contain a 4-gigabyte file called weights.bin ?

The file lives at:

%LOCALAPPDATA%\Google\Chrome\User Data\OptGuideOnDeviceModel\<version>\weights.bin

Enter fullscreen mode

Exit fullscreen mode

On the test machine, the version directory was 2025.8.8.1141 , and the folder size came in at 4,072.13 MiB .…