Edge really wanted Bing to know where you had been
Edge bug sent nearly every site you visited to Bing's API
The market's verdict: +8.4% on MSFT in the week after.
What actually happened
In April 2023 it emerged that a bug in Edge's new creator follow feature, switched on by default, was sending the address of nearly every site users visited to a Bing API to check whether a follow button could appear there. There was no setting named anything close to "send my browsing history to Bing", because that setting would have been declined. Microsoft said the data was not used or shared beyond validating the feature, and fixed the behavior server side within days. A privacy leak introduced by a feature whose entire job was to be a button.
This one is officially acknowledged.
Links
↳ caused by Edge 112 creator follow feature
Timeline
- Apr 25, 2023 Confirmed First reports came in.
- Apr 27, 2023 Fixed Server-side fix; Microsoft acknowledged the behavior.