5 ms·

Microsoft Edge sends every URL you visit to Microsoft. Hard pass.

by Dwedit 2y ago

tonyhart7 2y ago
is it true or just some analytical data?
- Dwedit 2y ago
  It was true in 2023, but I haven't found any updates on the story since then. It was sending a request to the domain "bingapis.com" with HTTP referer of the current page. Thus, sending your URL to Microsoft. It was a feature that could be turned off, but was on by default.
  - tonyhart7 2y ago
    how can this possible??? EU or DOJ should sue the fuck out of microsoft since its ON by default
    - thyristan 2y ago
      They should, yes. Don't know why DOJ doesn't. But in case of the EU, Microsoft is handled with very soft gloves in all aspects because corrupt idiotic bureaucrats on all levels can't imagine a life without their Windows, Outlook and Excel. So the throw their hands up in the air, cry "but there are no alternatives, we cannot do anything here" and continue their extended post-lunch-sleep.
  - jasonjayr 2y ago
    What is the feature that can be shut off ?
    - Dwedit 2y ago
      https://www.theverge.com/2023/4/25/23697532/microsoft-edge-browser-url-leak-bing-privacy https://www.theverge.com/2023/4/25/23697532/microsoft-edge-b... It's the "Show suggestions to follow creators in Microsoft Edge" feature. But that's not the only time Edge has been caught with a feature that sends all your URLs to Microsoft: https://x.com/scriptjunkie1/status/1152280517972299777 https://x.com/scriptjunkie1/status/1152280517972299777 - "Anonymous" statistics sends your Windows SID along with the URL visited for the smartscreen feature https://www.reddit.com/r/browsers/comments/147rdv4/microsoft_edges_enhance_image_feature_is_sending/ https://www.reddit.com/r/browsers/comments/147rdv4/microsoft... - an Image Enhancement feature sends image URLs to Microsoft https://www.reddit.com/r/AskNetsec/comments/96nwgd/microsoft_edge_sends_your_urls_to_bing_even_when/ https://www.reddit.com/r/AskNetsec/comments/96nwgd/microsoft... - With search suggestions enabled, search suggestions and URLs entered into address bar go to Microsoft regardless of which search engine is selected (Really, typing http: or https: ought to mean no suggestions generated at all)
evanjrowley 2y ago
FYI, Google Chrome will do the same thing. If you record a network packet capture, you will see it communicating with history.google.com. You might also notice that each time you load your browser history, that domain will be contacted to sync your history with Google's servers. Much of your uploaded data can be seen from here, but you'll need to be logged in to see it: https://myactivity.google.com/myactivity?pli=1 https://myactivity.google.com/myactivity?pli=1
- fsflover 2y ago
  Firefox doesn't.
- dirkg 2y ago
  even incognito?

Microsoft Edge sends every URL you visit to Microsoft. Hard pass.

by Dwedit 2y ago

Microsoft Edge sends every URL you visit to Microsoft. Hard pass.

tonyhart7 2y ago

is it true or just some analytical data?

Dwedit 2y ago
It was true in 2023, but I haven't found any updates on the story since then. It was sending a request to the domain "bingapis.com" with HTTP referer of the current page. Thus, sending your URL to Microsoft. It was a feature that could be turned off, but was on by default.
- tonyhart7 2y ago
  how can this possible??? EU or DOJ should sue the fuck out of microsoft since its ON by default
  - thyristan 2y ago
    They should, yes. Don't know why DOJ doesn't. But in case of the EU, Microsoft is handled with very soft gloves in all aspects because corrupt idiotic bureaucrats on all levels can't imagine a life without their Windows, Outlook and Excel. So the throw their hands up in the air, cry "but there are no alternatives, we cannot do anything here" and continue their extended post-lunch-sleep.
- jasonjayr 2y ago
  What is the feature that can be shut off ?
  - Dwedit 2y ago
    https://www.theverge.com/2023/4/25/23697532/microsoft-edge-browser-url-leak-bing-privacy https://www.theverge.com/2023/4/25/23697532/microsoft-edge-b... It's the "Show suggestions to follow creators in Microsoft Edge" feature. But that's not the only time Edge has been caught with a feature that sends all your URLs to Microsoft: https://x.com/scriptjunkie1/status/1152280517972299777 https://x.com/scriptjunkie1/status/1152280517972299777 - "Anonymous" statistics sends your Windows SID along with the URL visited for the smartscreen feature https://www.reddit.com/r/browsers/comments/147rdv4/microsoft_edges_enhance_image_feature_is_sending/ https://www.reddit.com/r/browsers/comments/147rdv4/microsoft... - an Image Enhancement feature sends image URLs to Microsoft https://www.reddit.com/r/AskNetsec/comments/96nwgd/microsoft_edge_sends_your_urls_to_bing_even_when/ https://www.reddit.com/r/AskNetsec/comments/96nwgd/microsoft... - With search suggestions enabled, search suggestions and URLs entered into address bar go to Microsoft regardless of which search engine is selected (Really, typing http: or https: ought to mean no suggestions generated at all)

evanjrowley 2y ago

FYI, Google Chrome will do the same thing. If you record a network packet capture, you will see it communicating with history.google.com. You might also notice that each time you load your browser history, that domain will be contacted to sync your history with Google's servers. Much of your uploaded data can be seen from here, but you'll need to be logged in to see it: https://myactivity.google.com/myactivity?pli=1 https://myactivity.google.com/myactivity?pli=1

fsflover 2y ago
Firefox doesn't.
dirkg 2y ago
even incognito?