• Skip to main content
  • Skip to header right navigation
  • Skip to site footer
iGuRu

iGuRu

Real-time Technology News. Opinions & Tweaks

  • / news
  • / tools
  • / tweaks
  • / dummies
  • / opinions
  • / support
  • / yourpost
home / News / Microsoft Edge sends URLs and SIDs to Microsoft

Microsoft Edge sends URLs and SIDs to Microsoft

23/07/2019 11:52 by giorgos

Microsoft Edge that comes preinstalled on Windows 10 sends the full URLs of the websites you visit to Microsoft, according to a security researcher.

The data sent by the Microsoft browser includes not only the information of each page you visit, but also the SID, which means security ID, according to a Publication by researcher Matt Weeks on Twitter.

edge - Microsoft Edge στέλνει URLs και SID στην Microsoft

Edge obviously sends the full URL of the pages you visit (except for some popular sites) to Microsoft. And, unlike the documentation, it includes your non-anonymous account ID (SID).

Microsoft is known to use a feature called SmartScreen to protect users from potentially dangerous sites each time they load into the browser.

SmartScreen works by comparing the URL to a list of links that Microsoft has, so the page you visit is submitted to a Microsoft server to determine whether or not you are allowed to access the site.

However, Weeks found that information sent without being encrypted also included the SID.

But Microsoft mentions the following about the SID in the official documentation of the operation:

The security identifier (SID) is used to uniquely identify a security authority or security group. Security authorities can represent any person who may exist in an operating system, such as a user account, a computer account, or a link or process running within the security of a user account or computer.

Theoretically, by including the SID in the report, Microsoft can tell exactly who is visiting a website when SmartScreen is enabled in Windows 10, of course.

By default, SmartScreen for Microsoft Edge uses the "Warn" setting on Windows 10 devices.

However, Microsoft states:

When you check a file, the data for that file is sent to Microsoft. The data includes the file name, the hash of the file contents, the download location, and the digital certificates of the file.

The researcher says that this system could be improved using an approach similar to that used by other browsers.

Firefox, Chrome, and Safari do not send your browsing history to the company, as Edge does. Compare hash prefixes of 4-byte URLs with built-in malicious mailing lists.

Microsoft has not yet made an official statement.

___________________

  • Privacy the history of a lost affair
  • FaceApp when the idiot looked at the finger
  • Windows 10 1809 cumulative update KB4505658
Microsoft Edge sends URLs and SIDs to Microsoft was last modified: 23 July, 2019, 11: 52 am by giorgos

spread the news

  • Facebook
  • Twitter
  • Reddit
  • Printing
  • Email

Read them Technology News from all over the world, with the validity of iGuRu.gr

Follow us on Google News


Competition: Newstag: browser, byte, chrome, Edge, URL

You May Also Like

Windows 10 error gives BSOD when you go to this site
Make Chrome always display the full URL
Chrome will test HTTPS when loading web pages

About Us giorgos

George still wonders what he's doing here ...

Previous Post: « Game Mods: Official support comes in Windows 10
Next Post: Huawei accidentally leak for North Korea's 3G wireless network? »

Reader Interactions

Comment Policy:

IGuRu.gr does not publish the comments immediately. Malicious comments, comments that include ads, or comments that are offensive are deleted without notice. We do not adopt the opinions expressed by our readers.
Your comments will be displayed after approval by the administrators


Leave your comment
Ακύρωση απάντησης

Your email address is not published. Τα υποχρεωτικά πεδία σημειώνονται με *

 

 © 2021 · iGuRu.gr · ☢ · Keep It Simple Stupid Genesis theme

about  ·   get in touch  ·  rss  ·  sitemap  ·  cough

loading Cancel
Could not post post - check your email address!
Email verification failed, please try again
Your blog can not post posts via email.