There's a key logger in microsoft edge.
There's a key logger in microsoft edge.
Seems microsoft edge has a key logger built in.
I noticed repeated requests to nleditor.osi.office.net, when I was writing a message in the forum.
It's supposedly a spelling and grammar service but the fact it's key logging should be a little worrying.
If it's unblocked it establishes a tls connection and sends off encrypted packets to nleditor.osi.office.net 52.109.112.219
I don't have the time to MITM it to see exactly what it sends but it seems to be a fairly recent as far as I can tell and it is also reported to be present in the webview2 browser control if anyone is using that.
Dnscope blocked it, which is why I saw it. see in the log.
I noticed repeated requests to nleditor.osi.office.net, when I was writing a message in the forum.
It's supposedly a spelling and grammar service but the fact it's key logging should be a little worrying.
If it's unblocked it establishes a tls connection and sends off encrypted packets to nleditor.osi.office.net 52.109.112.219
I don't have the time to MITM it to see exactly what it sends but it seems to be a fairly recent as far as I can tell and it is also reported to be present in the webview2 browser control if anyone is using that.
Dnscope blocked it, which is why I saw it. see in the log.
Re: There's a key logger in microsoft edge.
yes that disables it
go to edge://settings/languages , and either turn writing assistance off or set it to basic.
The fact it's on by default is just wrong, the behavior's has been reported in the edge webview2 control just a week ago.
go to edge://settings/languages , and either turn writing assistance off or set it to basic.
The fact it's on by default is just wrong, the behavior's has been reported in the edge webview2 control just a week ago.
Re: There's a key logger in microsoft edge.
Come on, it's Microsoft corporation.The fact it's on by default is just wrong
They only have your best interests at heart
LOL
Re: There's a key logger in microsoft edge.
I better be careful with the key words I use or a swat team might turn up.
The real worry is the risk it poses for developers using the webview2 control.
-
- Addict
- Posts: 4527
- Joined: Thu Jun 07, 2007 3:25 pm
- Location: Berlin, Germany
Re: There's a key logger in microsoft edge.
Android and Windows both have multiple telemetry subsystems... Even if a process isn't logging some native subsystem is sending keywords and source code and binary data along with stats and specs... I think MacOS does too.. Commercial Linux distros have some kind of telemetry around package managers...
Pretty sure they all collect data from cloud and sync services too despite claims of encryption...
Pretty sure they all collect data from cloud and sync services too despite claims of encryption...
The truth hurts.
Re: There's a key logger in microsoft edge.
Spelling and grammar can easily be checked in the browser itself, it doesnt need to upload your key strokes to the cloud for processing or collection. The fact it does this by default and also does it in the webview2 control presents a pretty serious security risk which is rife for abuse in my opinion.
tj1010 wrote: Android and Windows both have multiple telemetry subsystems... Even if a process isn't logging some native subsystem is sending keywords and source code and binary data along with stats and specs... I think MacOS does too.. Commercial Linux distros have some kind of telemetry around package managers...
Pretty sure they all collect data from cloud and sync services too despite claims of encryption...
I expect they all do to some exent but we don't need to accept it.
In my current session, Dnscope has blocked 90% of the requests out of a total of 29,623 only ~3000 have got through, most of those domain requests are related to microsoft and google related domains and that's just on my desktop.
Re: There's a key logger in microsoft edge.
Sure is. It's not so much the browser though but the implications it has for applications using the embedded controls.
Re: There's a key logger in microsoft edge.
I am not surprised Microsoft would do something like this. Years ago when I still used Windows I went on a crusade to turn off the forced updates and stumbled upon their data collection service that when toggled off warns you that you're making your system unsafe by not allowing them to collect your personal data. It's pretty scummy, and I would be very surprised if Google wasn't doing the same thing.
▓▓▓▓▓▒▒▒▒▒░░░░░
Re: There's a key logger in microsoft edge.
The worst thing is if the system sends the MFT of the hard disk, for example, when the OS boots, when the user cannot control the OS. Moreover, it will send it in a couple of seconds, and then someone will analyze the data structure and decide which data is of interest to him.
Re: There's a key logger in microsoft edge.
Amazing what they try to pass as legitimate software these days...
SolveMyIssue_() - No QuickHelp available.