Fable cannot be stopped: “wrote its own custom web application to capture information via CORS, then ran that as a local server and opened a page with JavaScript”