Can this be changed to the normal twitter URL, not the mobile version?
Edge sends full URLs of pages visited to Microsoft
31–40 of 161 posts
Re: Edge sends full URLs of pages visited to Microsoft
#32Earlier quoted context omitted.
Mozilla does not send full URLs to a third party. As mentioned in the thread, they use “4-byte URL hash prefixes.” Documentation: https://developers.google.com/safe-browsing/v4/urls-hashing (Disclosure: I work for Google but have nothing to do with the safe browsing API.)
Wait, this is not happening locally, against bloom filters or something?
There is a first step which uses bloom filters, and if the filter gives a result, it is hashed and the hash is sent to the google service to double-check.
That being said, a four byte / 32 bit hash is enough to almost uniquely identify a website. There number of 32 bit numbers and websites is roughly the same order of magnitude. It's a problem without a good solution because if you create many collisions then you also generate plenty of sites falsely reported as phishing and which admin would want that to happen on their site. If you avoid creation of collisions, you have this identifyability problem.
There is this CRLite proposal [1] using layered bloom filters to stop reliance on web services. Maybe it can be adopted for phishing sites, as well.
Re: Edge sends full URLs of pages visited to Microsoft
#33Earlier quoted context omitted.
The good part of Microsoft is the division responsible for languages, compilers and cloud. Meanwhile an old Microsoft makes Windows, Office, etc. While the latter has improved somewhat, only the former has reformed.
>The good part of Microsoft is the division responsible for languages, compilers and cloud. Putting their telemetry in your compiled binaries is ... real good? Marketing is the only thing that changed.
Yes. I have absolutely no problem with the way that works. It’s clearly spelled out how it works and how it’s configured. Seems few who actually use these tools have problems with this...
Re: Edge sends full URLs of pages visited to Microsoft
#34Earlier quoted context omitted.
The good part of Microsoft is the division responsible for languages, compilers and cloud. Meanwhile an old Microsoft makes Windows, Office, etc. While the latter has improved somewhat, only the former has reformed.
>The good part of Microsoft is the division responsible for languages, compilers and cloud. Putting their telemetry in your compiled binaries is ... real good? Marketing is the only thing that changed.
Source?
Or are you talking about when they enabled generation of ETW events (as in used by YOU in OFFLINE to debug your app.) generation by default?
People like you spreading fud make it difficult to discuss actual cases (like this appears to be)
Re: Edge sends full URLs of pages visited to Microsoft
#35Not to defend Microsoft, but SIDs are non unique. I think theyre only guaranteed to be unique per AD forest with the addition of the RID subauthority. Lots of domains are domain.local or other such commonalities and so may have duplicates. Microsoft would know this, so the intent does not appear surveillance or data collection.
> Microsoft would know this, so the intent does not appear surveillance or data collection.
Personally identifiable data collection. The goal is obviously data collection.
Re: Edge sends full URLs of pages visited to Microsoft
#36Edge is the number one browser in the world for installing chrome.
Because google is any better? And engine-wise they're the same these days.
Re: Edge sends full URLs of pages visited to Microsoft
#37Earlier quoted context omitted.
Following tweets explain that other browsers send an hashed URL instead. (but I guess it's easy to associate the hash with actual URLs)
Other browsers use a _truncated_ hash. Easy enough to match to a known list of bad sites, but exceptionally difficult to reverse engineer a list of sites the user has visited.
Those hashes have to be essentially unique to prevent blocking good sites erroneous;y, and as such are easily associated to actual sites when you’re the scale of MS or Google.
Re: Edge sends full URLs of pages visited to Microsoft
#38Not to defend Microsoft, but SIDs are non unique. I think theyre only guaranteed to be unique per AD forest with the addition of the RID subauthority. Lots of domains are domain.local or other such commonalities and so may have duplicates. Microsoft would know this, so the intent does not appear surveillance or data collection.
According to wikipedia, a SID looks like this
S-1-5-21-3623811015-3361044348-30300820-1013
[1] There might be a few duplicates due to the birthday paradox.
Re: Edge sends full URLs of pages visited to Microsoft
#39Edge is the number one browser in the world for installing chrome.
Because google is any better? And engine-wise they're the same these days.
because the rumor has it that "Edge sends full URLs of pages visited to Microsoft" and we haven't yet caught google in such embarrassing situation
Re: Edge sends full URLs of pages visited to Microsoft
#40Edge is the number one browser in the world for installing chrome.
Doesn't Chrome send your entire browsing history to Google as well?
Edit: I thought this was a well know fact and if it isn't I might have been to harsh about Google and Chrome.
Edit 2: Thinking about it and searching a bit I conclude that IIRC Google at least used to have access to your browsing history as part of syncing it unencrypted.