Chrome's and MS's cloud-powered spell-checking features could exfiltrate passwords and sensitive data?

Talk about internet security, computer security, personal security, your social security number...
Post Reply
barbaz
Senior Member
Posts: 10841
Joined: Sat Aug 03, 2013 5:45 pm

Chrome's and MS's cloud-powered spell-checking features could exfiltrate passwords and sensitive data?

Post by barbaz »

https://www.bleepingcomputer.com/news/s ... pellcheck/

At least it sounds like these features are disabled by default. Checking in Chromium, it does not seem to have this feature at all.
*Always* check the changelogs BEFORE updating that important software!
-
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Chrome's and MS's cloud-powered spell-checking features could exfiltrate passwords and sensitive data?

Post by therube »

Big deal. That's only for purposes of "telemetry", & for our benefit, of course. :evilgrin:

Now, is this "simply" a function of needing to send data "to the cloud" for the wanted functions to work? (Instead of having the spell check/translate features available, locally.)

(And even though Google/MS end up with this data, I'm sure they simply perform the wanted functions on it, return that to you, & discard it immediately thereafter.)

You would think (not that I know), that "field data" could be excluded, & only page content sent?

And I'm sure there is a great big disclaimer warning users of this situation ;-).

(In each browser, the user needs to actually enable the setting [Chrome] or extension [Edge]. [Though I'm sure, on doing so, the end user is none the wiser.])

https://privacy.microsoft.com/en-us/privacystatement (there, I feel better now)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Chrome's and MS's cloud-powered spell-checking features could exfiltrate passwords and sensitive data?

Post by therube »

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0
Post Reply