81–84 of 84 posts
Earlier quoted context omitted.
If Microsoft said it didn't happen, why would anyone believe them?
Considering fraud is a crime, yes.
It happened to me too. And then they used this data to show me creepy ads.
One of the comments on that link has offered this URL where Force Sync is mentioned. https://docs.microsoft.com/en-us/deployedge/microsoft-edge-p... To me it's absolutely mind boggling the amount of text in that link. There are nearly 100.000 words, which is the same as: A 100,000 word count will create about 200 pages single-spaced or 400 pages double-spaced when using normal margins (1″) and 12 pt. Arial or Times N…
Earlier quoted context omitted.
https://docs.microsoft.com/en-us/microsoft-edge/privacy-whit... > All synced data is encrypted in transit over HTTPS when transferred between the browser and Microsoft servers. The synced data is also stored in an encrypted state in Microsoft servers. Sensitive data types such as addresses and passwords are further encrypted on the device before being synced. That's pretty flowery language for "basically all your dat…
But everything is encrypted on your device itself, so I could imagine they could grab those bookmarks if they don't encrypt. Google and Firedox do it for their passwords, I'm not sure about bookmarks.
Once received, MS decrypts your data, does whatever serverside things it wants to on your data (OCR, NSA, search indexing), and then re-encrypts it with a key only they know. Protects your data from unauthorized rogues within Microsoft and random attackers, but not from Microsoft betraying your trust.
If you ask for your data, they decrypt it with their storage keys, re-encrypt it with their transfer keys (which you can decrypt) to guard against middlemen.
You receive the data, you decrypt it.
The model is secure, in that it's resilient against attackers, but requires you to trust the provider to be trustworthy and uncompromised.
That model is much better than some indie apps, which do encrypt your data between your machine and their server and the reverse, but store your data at rest on their server in a plain, unencrypted format. This means attackers and rogue employees have an easier time getting to your data.
True end-to-end or zero knowledge encryption encrypts the data on your device, and the provider's server only ever sees encrypted nonsense, they don't have the keys to undo the decryption even if they wanted to (thus the name zero knowledge). Your data is only decrypted on your device locally.
Edge stores passwords and some other data end to end encrypted, as far as I know, but only some data types. You can't make everything zero knowledge if you tried to. As far as I know, Chrome doesn't do zero knowledge by default, but can be set up to do it.
Firefox, Brave and Vivaldi all run their own sync services and all are (as far as I know) zero knowledge setups.