News: 1706645554

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Microsoft Edge ignores user wishes, slurps tabs from Chrome without permission

(2024/01/30)


Windows users, take notice: Microsoft's Edge browser seems to be actively importing open Chrome tabs and slurping other data from Google's browser without your permission – even if the "feature" that makes that happen is disabled.

Buried within Edge's browser settings on Windows machines is code that goes well beyond a one-time import of favorites and stored passwords, and has been present in some form as far back as [1]mid-2022 at least. It gives gives Edge the ability to import [2]practically all the browser data from Chrome each time Redmond's browser is launched.

Ostensibly a way for Microsoft to simplify the process of getting Windows users to switch to Edge, the feature has a [3]classic Microsoft problem: it's right now doing so without full permission. As the Windows maker is wont to do, it'll also [4]sync that data to the cloud too, provided users are signed into a Microsoft account - not great if you had intended to keep your Chrome and Edge environments separated.

[5]

[6]More data for Redmond; even less privacy for users, as we've covered in the past.

[7]

[8]

Windows users – even those who don't make a habit of using Edge – have been reporting problems and surprises with the import feature since last year. Other outlets have [9]covered the feature's on-by-default nature and suggested steps to fix it (for example by opening up edge://settings/profiles/importBrowsingData and making sure it's off), but reader responses to those stories suggest settings don't matter, and the import happens regardless.

The issue was most recently flagged up again this week by The Verge's Tom Warren, who [10]said he noticed Edge opening on a system reboot in the same state that Chrome was in before the restart. Warren claimed he neither imported Chrome data to Edge nor gave it permission to import open browser tabs from Chrome, yet there it was. Warren said he never toggled the setting on, and that it was off when he checked.

[11]

Taking a quick spin around the internet, it's clear that this is happening to plenty of people – data being pulled into Edge by default, without permission – though it doesn't appear universal.

[12]Microsoft's plucky challengers, Bing and Edge, might gain DMA exemptions

[13]Did all that AI chatbot hype boost Bing's market share? Oh, wait, never mind

[14]Microsoft confirms Windows Server 2025 is on the way

[15]What's really going on with Chrome's June crackdown on extensions – and why your ad blocker may or may not work

[16]Multiple Microsoft [17]support [18]threads from the past few months allege the same issue – that Edge is importing data from Chrome unexpectedly, even when the setting is toggled off. Several posts on Reddit [19]allege the same.

Responses from Microsoft staff and independent advisers suggest checking ImportBrowsingData settings as well as manually disabling auto import by manually adding a registry key to Group Policy settings, but responses are universal: Nothing seems to turn it off.

Reports that Edge is opening on startup populated with Chrome tabs that were open before reboot appear to be a new problem that came along with Windows 11 update [20]KB5034204 , released on January 23. Though the opt-out feature was greedy in the past, this update seems to be heavily forcing itself on users.

[21]Others have reported similar issues with Edge asserting itself dressed in Chrome's data since installing the update, though security researcher Zach Edwards [22]noted on X/Twitter that Microsoft may have an excuse this time. Screens in the update installation steps mention Edge will "regularly bring in data from other browsers available on your Windows device."

[23]

It's all out in the open – somewhat – since Microsoft stuck a brief mention of it in splash screens with the installation of the infamous KB5034204 update.

Beyond the issues with Edge, KB5034204 appears to have a number of issues affecting lots of Windows 11 users, as evidenced by a [24]Reddit thread posted a few days after its rollout. Users have reported failed installations and boot issues, while other sites have [25]reported broken apps, file explorer and taskbar [26]trouble and other issues. We've reached out to Microsoft again to inquire about broader problems with KB5034204, but haven't heard back about that, either.

Regardless of whether Microsoft asked permission for Edge to ingest data from other browsers in that update, the issue isn't new - it's well documented in forum posts and help requests. We've asked Microsoft for an explanation, and while we're told they're looking into it, we have yet to receive an actual response.

In the meantime, best to hold off installing the latest round of Windows 11 updates until Microsoft patches the patch. Or explains itself. Ah, who are we kidding. ®

Get our [27]Tech Resources



[1] https://www.windowslatest.com/2022/05/30/microsoft-edge-new-feature-will-constantly-pull-data-from-chrome/

[2] https://support.microsoft.com/en-us/microsoft-edge/what-s-imported-to-microsoft-edge-ab7d9fa1-4586-23ce-8116-e46f44987ac2#:~:text=What%27s%20imported%20from%20Google%20Chrome%3F

[3] https://www.theregister.com/2015/09/28/windows_10_data_collection/

[4] https://support.microsoft.com/en-us/microsoft-edge/change-and-customize-sync-settings-in-microsoft-edge-be529080-f2e9-b642-538f-976956b8da6b

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zbl-lVv6RYB9IAK2HkZLEAAAAMQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[6] https://www.theregister.com/2023/11/15/google_amazon_microsoft_mozilla/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zbl-lVv6RYB9IAK2HkZLEAAAAMQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zbl-lVv6RYB9IAK2HkZLEAAAAMQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[9] https://www.ghacks.net/2023/10/13/how-to-stop-microsoft-edge-from-importing-google-chrome-browsing-data-at-launch/

[10] https://www.theverge.com/24054329/microsoft-edge-automatic-chrome-import-data-feature

[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zbl-lVv6RYB9IAK2HkZLEAAAAMQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[12] https://www.theregister.com/2024/01/24/microsoft_edge_bing_dma/

[13] https://www.theregister.com/2024/01/18/bing_ai_search/

[14] https://www.theregister.com/2024/01/29/microsoft_confirms_windows_server_2025/

[15] https://www.theregister.com/2023/11/18/google_kills_legacy_extensions/

[16] https://answers.microsoft.com/en-us/microsoftedge/forum/all/how-to-make-edge-stop-importing-from-chrome/4bcb43bb-b54a-4413-b24c-ea43b49cea54

[17] https://answers.microsoft.com/en-us/microsoftedge/forum/all/why-edge-keep-syncing-all-data-from-chrome-even/1efde161-5c8b-411b-a59a-1bfa2b8cedcc

[18] https://answers.microsoft.com/en-us/microsoftedge/forum/all/how-do-i-stop-edge-from-importing-bookmarks-and/22d7af7f-d111-481d-9ef3-13a703e61c18

[19] https://www.reddit.com/r/MicrosoftEdge/comments/17xglpc/edge_keeps_importing_chrome_bookmarks_on_startup/

[20] https://support.microsoft.com/en-au/topic/january-23-2024-kb5034204-os-builds-22621-3085-and-22631-3085-preview-7652acf2-56dc-430e-b8ef-ec8f56ec1028

[21] https://www.reddit.com/r/Windows11/comments/19e118i/january_23_2024kb5034204_os_builds_226213085_and/

[22] https://twitter.com/thezedwards/status/1750952950598672455

[23] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zbl-lVv6RYB9IAK2HkZLEAAAAMQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[24] https://www.reddit.com/r/WindowsHelp/comments/1abedvs/update_kb5034204_fails_to_install/

[25] https://windowsreport.com/windows-11-kb5034204-issues/

[26] https://www.windowslatest.com/2024/01/28/windows-11-kb5034204-is-crashing-file-explorer-taskbar-and-wont-install-for-some/

[27] https://whitepapers.theregister.com/



Tom Chiverton 1

Google should treat leaking tabs without explicit user action as a CVE?

Martin-73

This too!

GDPR breach here we come

FirstTangoInParis

So if you normally run Edge because you’ve got MS359, and you use Chrome to access some system based on Google apps, and said apps containing GDPR-protected data, if Edge now slurps that and exports it to some random server outside of required country boundary, MS is in for one heck of a bill from national authorities.

Re: GDPR breach here we come

Dave559

Yep, I'm pretty sure I can hear the EU and NOYB sharpening their pencils already!

Re: GDPR breach here we come

Gene Cash

Hm, I wonder if it's a productive thing to file an Federal Trade Commission (FTC) complaint on this side of the pond...

Yet

Martin-73

another reason for not using a microshaft (yes i am reusing that 90sism, because it's appropriate) account, even if it's painful not to. I am really not sure if they are totally clueless or totally evil. Or... [need icon of the why not both girl]

> I am really not sure if they are totally clueless or totally evil.

cyberdemon

Easy answer to that one.

(re-using an old icon here)

msedgewebview2.exe

dkloke

Hello, wondering whether the good, kind, and devastatingly attractive people at The Register could take a look at the Windows service executable known as msedgewebview2.exe? It's called by other apps like Zoom and Adobe products to do things like present interactive content within the host app. Blocking it w/firewall breaks some features of those apps. Microsoft updates this app a lot, and it's getting called by (or is calling?) msedge.exe a lot when the Edge browser itself is not open. TIA!

Minor correction.

AVee

Here's what the sentence at the end of the article should be:

"In the meantime, best to hold off installing Windows"

Bendacious

Seems like this data slurping only happens if you have previous chosen to sync Edge with another browser. I'm not saying there is any excuse for this behaviour, just that people anal enough to read every pop-up (like myself) might avoid this. If you chose not to sync when you first launched Edge (sorry, when Windows first launched Edge) and have never manually chosen to sync since then, then this 'slurp on start-up' isn't enabled. At least that's how it looks, who can tell what's going on in the background. I refuse to tell Edge what my Microsoft account is, so I can't check what would be stored in the cloud, for my convenience.

I use Edge for the Google apps my company makes me use and Chrome for the Microsoft apps and Firefox for my browsing. I like to think this helps reduce tracking but that's probably wishful thinking. The more steps you take to avoid being tracked the more unique your browser fingerprint becomes. I'm not ready to give up trying though.

You don't have to think too hard when you talk to teachers.
-- J. D. Salinger