• Home
  • News
  • Big Data & Analytics
  • DevOps
  • Security
  • GDPR
  • AI & ML
  • Women in Tech
  • Cloud & Infrastructure
  • CIO
  • Deskflix
  • Events
  • Whitepapers
  • Spotlights
  • IT Leaders 250
  • Research
  • Delta
  • Tech Marketing Hub
  • About Us
  • Newsletters
  • Sign in
  •  
      • Newsletters
      • Account details
      • Contact support
      • Sign out
     
     
    • You are currently accessing Computing via your Enterprise account.

      If you already have an account please use the link below to sign in.

      If you have any problems with your access or would like to request an individual access account please contact our customer service team.

      Phone: +44 (0) 1858 438800

      Email: customerservices@incisivemedia.com

      • Sign in
     
  • Follow us
    • Twitter
    • LinkedIn
    • Newsletters
    • Facebook
    • YouTube
  • Register
  • Events
    • Upcoming events
      event logo
      The Pesky Password Problem: What place do passwords have in the modern workplace?

      In this webinar you'll learn: Why passwords are so easy to hack, and how the bad guys do it. How to craft a secure, risk-focused password security policy. The truth about password managers and multi-factor authentication and how they impact our risk. How to empower your end users to become your best last line of defence

      • Date: 21 Jan 2021
      event logo
      Where the buck stops: Why a shared responsibility model will help you own your cloud security flaws

      This webinar, and accompanying dedicated research, will reveal to what extent organisations are practicing a shared responsibility model for cloud security today and the degree to which IT leaders are aware of what they should be doing to ensure the secure use of their multi- and hybrid-cloud environments.

      • Date: 27 Jan 2021
      event logo
      Leveraging the Cloud to Defeat Data Disasters

      Join us and learn how your IT team can realize many of the powerful advantages of the cloud and solve the operational complexity behind managing data across hybrid and multi-cloud IT environments with centralized management, automation, end-to-end security, and lower TCO.

      • Date: 28 Jan 2021
      event logo
      Deskflix Hybrid and Multi Cloud

      One of the most powerful tools for breaking down silos and integrating resources is cloud computing. But multi-tenancy cloud is not the ideal environment for every application or every class of data and some will need to remain on-prem for the foreseeable future; nor are all clouds equal. Tune in to Deskflix season 1 to hear industry experts speak on the questions you need answered on hybrid and multi cloud.

      • Date: 10 Feb 2021
      View all events
  • Whitepapers
    • LATEST WHITEPAPERS
      Darktrace 120x194
      Cyber AI Response: Threat Report 2019

      This white paper details 7 case studies of attacks that were intercepted and neutralised by Darktrace cyber defense AI, including a zero-day trojan in a manufacturing company's network. Learn how Darktrace Antigena AI Response modules fight back autonomously, no matter where a threat may emerge, extending to the Cloud, Email and SaaS.

      Download
      Darktrace 120x194
      Cyber AI & Darktrace Cloud

      This white paper explores how cloud is a security blind spot for many organisations who struggle with the limited visibility and control in this new environment, where their existing security tools are often not applicable.

      Download
      Find whitepapers
      Search by title or subject area
      View all whitepapers
  • Spotlights
    • Spotlights

      Welcome to Computing's Spotlight section, where we focus in on particularly important themes and topics of enterprise IT.

      Intel logo

       

      Endpoint Management and Security Hub

  • IT Leaders 250
  • Research
  • Delta
  • Tech Marketing Hub
  • About Us
Computing
Computing
  • Home
  • News
  • Big Data & Analytics
  • DevOps
  • Security
  • GDPR
  • AI & ML
  • Women in Tech
  • Cloud & Infrastructure
  • CIO
  • Deskflix
 
    • Newsletters
    • Account details
    • Contact support
    • Sign out
 
 
  • You are currently accessing Computing via your Enterprise account.

    If you already have an account please use the link below to sign in.

    If you have any problems with your access or would like to request an individual access account please contact our customer service team.

    Phone: +44 (0) 1858 438800

    Email: customerservices@incisivemedia.com

    • Sign in
 
  • Security

Microsoft Edge InPrivate photos can be easily recovered with freeware

Was that the sound of tightening sphincters?

Microsoft Edge InPrivate photos can be easily recovered with freeware
Microsoft Edge InPrivate photos can be easily recovered with freeware
  • Chris Merriman
  • Chris Merriman
  • @ChrisTheDJ
  • 21 March 2017
  • Tweet  
  • Facebook  
  • LinkedIn  
  • Send to  
0 Comments

MICROSOFT EDGE users need to take care with ‘anniversary present buying', as an INQ reader has tipped us off that the browser's InPrivate browsing mode doesn't always expunge photos that you've viewed.

The tipster told us that he had successfully looked at websites using the InPrivate browsing mode on the Windows 10 browser, which is supposed to provide a level of anonymity to the user, though is not exactly covering itself in security glory so far.

However, he was able to successfully able to recover all the images from those web pages using popular freeware tool 'Recuva', part of a suite with the better known 'CCleaner'.

By using the ‘deep search' option, the reader was able to capture images embedded in private browsing pages with varying degrees of success. Retrying the experiment with equivalent features such as Chrome's Incognito Mode and Firefox's Private Browsing, didn't yield any results whatsoever.

INQ tried to recreate the bug (using a website about chicken husbandry, since you ask) and sure enough, even where we couldn't get the photos back to view, their filenames and metadata were still visible - enough to be incriminating.

The fact that InPrivate browsing doesn't do what it says on the tin was previously discovered by InfoSec researcher Brent Muir, who points out that all the data from Edge browser is set up to sync by default to any other browser with the same Microsoft account.

But the recovery of jpegs with a freeware program means that the whole process is something that can be easily done by anyone without an interest in forensic detection. It also means that there's the potential for these photos to be automatically uploaded to the cloud if the user misguidedly accepts the wrong prompt.

We asked Microsoft to come back to us about this on Friday, with the Creator's Edition on the horizon, and a Microsoft spokesman told us: "When you use Microsoft Edge in InPrivate mode, your browsing information, such as cookies, history, images or temporary files, aren't saved on your device after your browsing session has ended.

"Microsoft Edge clears all temporary data from your device. InPrivate mode also blocks any browsing history information from being sent to Microsoft."

Which seems to be the usual "Lalalalalalala we can't hear you" mentality we've come to expect. However, we have gone back to them, and we have our tipsters details, as we think this might be a bug bounty issue.

In the meantime, we strongly recommend not using InPrivate browsing in Edge or Internet Explorer (Muir's research shows they actually share a cache) for your ‘wife's anniversary present' as it might come back to haunt you more easily than you thought. µ

  • Tweet  
  • Facebook  
  • LinkedIn  
  • Send to  
  • Topics
  • Security
  • Microsoft
  • software
  • Security
  • Windows
  • Security,
  • theinquirer

More on Security

New SolarWinds hack victims emerging every day, as Malwarebytes goes public on breach
New SolarWinds hack victims emerging every day, as Malwarebytes goes public on breach

No quick fix to massive hack say security experts as a fourth malware strain is discovered

  • Security
  • 20 January 2021
Cybersecurity in 2021: Looking ahead to another unpredictable year
Cybersecurity in 2021: Looking ahead to another unpredictable year

The big topics will be the cloud, social engineering, automation and security budgets, as firms work to address corners cut in the pandemic

  • Security
  • 19 January 2021
sNCSC launches CyberFirst Girls Competition - aims to boost female representation in cyber security
NCSC launches CyberFirst Girls Competition - aims to boost female representation in cyber security

Women make up just eight per cent of the cyber workforce in the UK

  • Security
  • 18 January 2021
BA faces possible £800m data breach claim

Claim would be the largest group action personal data claim in UK history

  • Legislation and Regulation
  • 13 January 2021
Boosting cyber resilience when the odds are stacked against you

2020 exposed gaps in our ability to trust information, ignited cloud migrations, and put overburdened security teams under more strain. In 2021 we must focus on the danger areas

  • Security
  • 13 January 2021
blog comments powered by Disqus
Back to Top

Most read

Software errors wipes 'thousands' of arrest records from police databases
Software errors wipes 'thousands' of arrest records from police databases
Women in IT: don't get stuck in 'glue work' if you want to get on
Women in IT: don't get stuck in 'glue work' if you want to get on
Delta: Microsoft's identity management lead is under threat
Delta: Microsoft's identity management lead is under threat
BT faces possible £500m claim for overcharging landline-only customers
BT faces possible £500m claim for overcharging landline-only customers
New SolarWinds hack victims emerging every day, as Malwarebytes goes public on breach
New SolarWinds hack victims emerging every day, as Malwarebytes goes public on breach
  • Contact
  • Delta
  • Marketing solutions
  • Enterprise IT Events
  • Incisive Media
  • Terms & conditions
  • Policies
  • Careers
  • Twitter
  • LinkedIn
  • Newsletters
  • Facebook
  • YouTube

im_logo

© Incisive Business Media (IP) Limited, Published by Incisive Business Media Limited, New London House, 172 Drury Lane, London WC2B 5QR, registered in England and Wales with company registration numbers 09177174 & 09178013

Digital publisher of the year
Digital publisher of the year 2010, 2013, 2016 & 2017
Loading