diff --git a/Windows Settings/Windows Security.md b/Windows Settings/Windows Security.md index eada38b..7ecd748 100644 --- a/Windows Settings/Windows Security.md +++ b/Windows Settings/Windows Security.md @@ -39,7 +39,7 @@ This sends hashes and file paths to Microsoft. It will also sends the URL of whe ### SmartScreen for Microsoft Edge -This setting is independant from Smart App Control. Extremely privacy invasive. Sends **FULL URLs** to Microsoft. Whether to keep this on or not depends on the threat model, though it probably should be off in most cases. +This setting is independent from Smart App Control. Extremely privacy invasive. Sends **FULL URLs** to Microsoft. Whether to keep this on or not depends on the threat model, though it probably should be off in most cases. Consider scenarios where you use Proton Drive/Mega/PrivateBin which append the encryption key in the URL. Now you are sending both the URL and the key to Microsoft. Something that's supposed to be private / end-to-end encrypted now gets leaked just like that. Or if you use PHPMyAdmin with the username & password appended for logins - now you are leaking access to your database.