I wonder how they did it. The sync data is supposed to be protected by E2EE where the key is derived from the user password or an separate sync password, at least before I abandon Chrome and go FF few years ago.
Last I looked, Chrome’s sync is not E2EE. Next to nothing (user space) is E2EE, in Google’s ecosystem. By default it’s only Encryption in Transit. I think you can enable a Passphrase (encryption on device), but that’s optional.
Honestly, I’m not surprised. Not just because of their lack of privacy (them knowing your bookmarks), but also legally. Some countries are trying to crack down on piracy, and other illegal material, asking companies (like Google) to do this.
Bottom line, don’t use Chrome, and Google Sync.
It’s like big tech corporations have been having a tournament called ‘Who’s Most Fucked Up’ Cup for past few years, we’re getting into the finals lately and Google and Microsoft are favourites for the golden medal.
laughing in firefoxian.
Not bookmarks. Google collection
