MS Edge is a Security Concern

TidySean said:

I’m going to have one last go at pointing out how unsecure MS Edge is and see what everyone thinks as I truly believe this should be seen as a greater problem than most seem to believe it to be.
I checked my email, my MS account email in Outlook webmail in Edge, on a friend’s laptop who has their email address linked to their account on their machine. Not guest or anything like that.
After doing so, on my own machine later, I was looking in MS account and my friend’s laptop was showing my devices. On my own machine I use Firefox, don’t have Edge installed and my own device has never shown in my devices. My mates Xbox has, but he used my email for some verification thing for some reason and that is more expected than anything.
Anyway, I have spoken with MS support at length about this and what they tell me is what happened is expected. I should have used an incognito window to check my email or I shouldn’t ask someone to check my email on their laptop (that didn’t happen but I was advised).
I say no one knows that is expected behaviour isn’t that dangerous? There’s an article about it online, they tell me. Like everyone reads those.
Basically, if you have an MS account, found someone somewhere, in a café with their laptop. You could pretend to have no battery on your phone, really need to check your email. I’ll buy you a coffee. Then you have their laptop in your account and can track them, if they have location services on.
Also in the support chat today I was told they would email me instructions to remove Edge from my machine. I’ve already done that with a custom install but I reckon it’s about a 2% chance I get those instructions because Edge is system service and cannot be removed.

I have no edge in my system win10 22h2 VM install. so yeah it is possible to remove edge.
The hard part is to keep it out as it will try to install with every update

and they call me stupid for saying win10spyware

what microsoft says and what you can do is two different things.
but yeah you do sometimes break something when ripping out ground functions as cortana, store and some

People prefer convenience, the same happens with google and pretty much any other account, even banks. People complained, that if they login on a device that they trust, it should remember it. I guess IT can not satisfy everyone. Some accounts should be treated the same way as ID or credit cards, you should not share that info with anyone.

TidySean said:

Hello, yes I am aware of that. I have no Edge and the updates do not bring it back. Ever, the updates fail, not the small security updates just the ones with big changes.

I have disabled updates completely now because it seemed MS were trying to force Win 11 on me and it wasn't clear to me what the update was, might have just been a Win 10 update, wasn’t sure.

No Edge here:



I find it strange how MS Edge linking your machine to potentially someone else's account is a good thing, and it is expected behaviour as far as Microsoft is concerned. Seriously, what is the deal with that?

yeah you really have to work for it to keep the crap outside.
I have debloated my VM even more then that printscreen.. only Firefox is left on that list now.

win7 was the last good windows for power-users and work/home-businesses... I think win10 Enterprise LTSC might be good to.. sadly they don't want regular users to us it as they cant send adds and use as extensive telemetry on the LTSC version

Microsoft is jealous of Apple and Google.. they want to create a Eco-system where the users don't even need to know what is a computer. and they want to make money of the users.
I think it is okay to make money of the users.. but if we pay with our data and adds, then windows/microsoft products should be 100% free as Google's services is.
I do not have any MacOS computer or used one the last 15years.. but i don't think you have adds and crap in the OS as windows has.

why do you think i went over to Linux Desktop, even i have no interest what so ever about Linux or even care about open-source and al that crap linux philosophy
I'm back on Windows the same minute i have six LTSC keys in my hand or windows 12 becomes an LTS version again as win7 was.
I do not even like Linux Desktop i think it sucks.. but i hate windows rolling releases even more... so I'm stuck on Linux for now even i dont want to.

- - - Updated - - -

TairikuOkami said:

People prefer convenience, the same happens with google and pretty much any other account, even banks. People complained, that if they login on a device that they trust, it should remember it. I guess IT can not satisfy everyone. Some accounts should be treated the same way as ID or credit cards, you should not share that info with anyone.

very good point
User friendliness/convenience and security can not coexist... it just isn't doable.
Like a car with high performance made for track racing and high speed..... then having low gas mileage and soft road comfort.. *smiling*

- - - Updated - - -

oh.. i want to add.. If you do care about privacy and security... you don't have a microsoft account or a google account. If you do.. then you dont care anyway

TidySean said:

My point is, I checked my email on someone else's laptop, using MS Edge.

Next time use a portable browser. Download, login, check emails, remove.
You can even put it onto USB or use a portable email client like Pop Peeper.

I think the fact that you checked your ms account email, regardless of the browser used, is the issue. Still not good.