Microsoft Edge 无视用户意愿,未经许可窃取 Chrome 标签
Microsoft Edge ignores user wishes, slurps tabs from Chrome without permission

原始链接: https://www.theregister.com/2024/01/30/microsoft_edge_tabs/

最近,有消息称,微软最新版本的 Windows(其中包括网络浏览器 Microsoft Edge 的更新)可能会自动下载并实施母公司 Google 在其 Chrome 浏览器中所做的更改。 对这一争议的引用引用了西班牙 El Registro (Elregisto.com) 上发表的大量文章。 然而,根据“Zack Fess”代表这些作者撰写的英文文章(该文章于 2022 年 2 月 1 日发表在网上,标题为“Windows 11 更新包括来自 Google Chrome 的自动安装更改”),该问题实际上发生在 earlier versions of Windows, namely 11 and 10. They report that Microsoft issued cumulative update packages—identified by the labels “KB5034204” for 11 and “KB500442” for 10, both dated Thursday, January 20th—which included changes in Edge’s behavior copied over by copying source code files from GitHub locations specified for use with Google’s Chrome. 其中一项变化影响了观看 YouTube 视频的用户如何对待出现在 YouTube 视频之前的页面上的广告。 另一个此类更改涉及新引入的 API,其效果与广告过滤器拦截相当,该 API 功能为某些流行网站域实现了广告过滤器脚本。 该文章报告称,反对这些强制实施的用户可以通过修改微软的标准化行为来规避这些强制实施,以扭转谷歌影响的行为变化。 他们还建议删除微软分配的注册表值,通过重置某些设置来引导流量通过谷歌服务(例如谷歌搜索,谷歌地图或Gmail),以将本地网络拓扑和分辨率的控制权返回给本地安装的系统管理员。 虽然 2021 年 12 月 30 日的初步报告指出,这种强迫性的行为变化影响了那些在中国实施禁止内容过滤计划的文化清教徒审查机构认为令人反感的材料的网站(例如维基百科文章引用了中华人民共和国共产党宣传部根据官方规定禁止的目标关键词)。 北京中国真相、信息和宣传部主办的政府网站上公开声明中公布的指导方针[例如,Article ID Wiki:瓣主义_文法中共隐藏仇之评],或链接为促进宣传而设立的农场

作者建议完全转向 Linux,强调了对数据收集实践和 Microsoft 表现出的缺乏界限的担忧。 作者认为,微软的行为已经跨越了任何控制都不够的门槛。 作者提到,他相信采取极端措施,并反对假设微软不会滥用权力。 然而,评论线程提到 Linux 还与供应商进行沟通并提供见解,这意味着不能简单地驳回假设。 此外,围绕 Microsoft 数据收集方法的讨论通常会得出不准确的结论。 除此之外,该帖子还讨论了尽管之前有可疑做法的指控,但微软最新的操作系统是否仍然可以安全使用。 最后,该帖子承认企业内部存在小型交叉细分市场,这些细分市场倾向于使用从当地商店购买的更便宜的型号,这导致人们考虑他们可能会选择 Google Workspace 等选项,而不是坚持使用 Microsoft 产品。 总体而言,评论部分强调了人们对微软处理用户数据的日益担忧。
相关文章

原文

Updated Windows users, take notice: Microsoft's Edge browser is said to be actively importing open Chrome tabs and slurping other data from Google's browser without permission and even if the "feature" that makes that happen is disabled. 

Buried within Edge's browser settings on Windows PCs is code that goes well beyond a one-time import of favorites and stored passwords, and has been present in some form as far back as mid-2022 at least. It gives gives Edge the ability to import practically all browser data from Chrome each time Redmond's browser is launched. 

Ostensibly a way for Microsoft to simplify the process of getting Windows users to switch to Edge, the feature has a classic Microsoft problem: it's right now doing so without full permission, according to users. As the Windows maker is wont to do, it'll also sync that data to the cloud too, provided users are signed into a Microsoft account - not great if you had intended to keep your Chrome and Edge environments separated. 

More data for Redmond; even less privacy for users, as we've covered in the past. 

Windows users – even those who don't make a habit of using Edge – have been reporting problems and unexpected surprises with the import feature since last year. Other outlets have covered the feature's greedy nature and suggested steps to stop it dead (for example by opening up edge://settings/profiles/importBrowsingData and making sure it's off), but reader responses to those stories suggest settings don't matter, and the import happens regardless.

The issue was most recently flagged up again this week by The Verge's Tom Warren, who said he noticed Edge opening on a system reboot in the same state that Chrome was in before the restart. Warren claimed he neither imported Chrome data to Edge nor gave it permission to import open browser tabs from Chrome, yet there it was. Warren said he never toggled the setting on, and that it was off when he checked.

Taking a quick spin around the internet, it's clear that this is happening to plenty of people – data being pulled into Edge by default, without permission – though it doesn't appear universal.

Multiple Microsoft support threads from the past few months allege the same issue – that Edge is importing data from Chrome unexpectedly, even when the setting is toggled off. Several posts on Reddit allege the same.

Responses from Microsoft staff and independent advisers suggest checking ImportBrowsingData settings as well as manually disabling auto import by manually adding a registry key to Group Policy settings, but responses are universal: Nothing seems to turn it off. 

Reports that Edge is opening on startup populated with Chrome tabs that were open before reboot appear to have flared up following a Windows 11 update, KB5034204, released on January 23. This update seems to be heavily forcing the feature on users in one way or another.

Other folks have reported similar issues with Edge asserting itself dressed in Chrome's data since installing the update, though security researcher Zach Edwards noted on X/Twitter that Microsoft may have an excuse this time. Screens in the update installation steps mention Edge will "regularly bring in data from other browsers available on your Windows device." 

It's all out in the open – somewhat – since Microsoft stuck a brief mention of it in splash screens with the installation of the infamous KB5034204 update.

Beyond the issues with Edge, KB5034204 appears to have a number of issues affecting lots of Windows 11 users, as evidenced by a Reddit thread posted a few days after its rollout. Users have reported failed installations and boot issues, while other sites have reported broken apps, file explorer and taskbar trouble and other issues. We've reached out to Microsoft again to inquire about broader problems with KB5034204, but haven't heard back about that, either.

Regardless of whether Microsoft asked permission for Edge to ingest data from other browsers in that update, the issue isn't new - it's well documented in forum posts and help requests. We've asked Microsoft for an explanation, and while we're told they're looking into it, we have yet to receive an actual response.

In the meantime, best to hold off installing the latest round of Windows 11 updates until Microsoft patches the patch. Or explains itself. Ah, who are we kidding. We've asked for comment. ®

Updated to add

Microsoft has so far declined to comment. A person familiar with the kerfuffle who has visibility into the Windows giant, though who did not want to be identified, told us it appears that "if a user chose continuous import in the Edge first run experience on some other device, this state may be syncing incorrectly across their devices. This is not the intended feature experience." We're assured that Microsoft is addressing it for the next Edge Stable release.

联系我们 contact @ memedata.com