New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 753562 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 2
Type: Bug



Sign in to add a comment

suggested articles load on account using custom passphrase before passphrase enterered

Project Member Reported by wfh@chromium.org, Aug 8 2017

Issue description

PRIVACY ISSUE

I have a custom passphrase on my account.

I install Chrome Canary and then add my account to sync. I am them prompted to enter my custom passphrase.

Before I have entered it, the new tab page shows 'suggested stories' for my account - see screenshot i.e. it knows I am interested in Pokemon Go and Witcher 3.

I am disturbed that Google has this data without entering my passphrase, why isn't this data encrypted with my passphrase?


VERSION:
Chrome Version: 62.0.3178.0 canary
Operating System: Android 7.1.2; Pixel XL Build/NJH47D

REPRODUCTION STEPS
Please provide detailed reproduction steps, and any additional
information below. Include an URL demonstrating the issue and attach a
screenshot if
applicable. Be sure to include in your description how this issue
affects your privacy.

 
Screenshot_20170808-153234.png
566 KB View Download
Cc: msramek@chromium.org nepper@chromium.org
Components: UI>Browser>NewTabPage
Owner: nepper@chromium.org
Status: Assigned (was: Untriaged)
If you're signed in to Chrome with your Google account, these suggestions come from that Google account, which may contain data from other sources than just Chrome.

You can manage that in https://myaccount.google.com/activitycontrols

nepper@: It would be really helpful in these cases if we were able to annotate the source of suggestions.
Labels: zine-triaged

Comment 3 by wfh@chromium.org, Aug 24 2017

can I set a custom passphrase on my Google account data, like I can with Chrome sync data?
Owner: tschumann@chromium.org
Status: WontFix (was: Assigned)
No. If you don't want your Web and App activity (as outlined in the page msramek referenced) to be used to get an improved/customized experience, you need to switch off that setting. 

Sign in to add a comment