3 ms·
This is totally insane. I'm totally baffled by the idea that Microsoft considers it okay for anyone except the owner to have any level of access to personal em
by 0xffff2 8y ago
This is totally insane. I'm totally baffled by the idea that Microsoft considers it okay for anyone except the owner to have any level of access to personal email accounts.
- mrmuagi 8y agoHaving the 'owner' of the e-mail address have the only access is a better extreme than having everyone have access, but I don't think that's feasible. People within Microsoft will always have the ability to access e-mail accounts, the question is if they are the right people and how big that group of people should ever be. If you are talking about secure e-mail cryptography philosophy along the lines of PGP, ProtonMail, et cetera, sure you can achieve that through those means. Otherwise it's a pipe dream with a product like Outlook that's built for businesses and having AD style control.
- kerng 8y agoOf course there has to be a way to access email- how would they troubleshoot or fulfill legal investigations? The problem is that an attacker can follow the "legitimate" path - and such attacks should be audited and detected, which is what obviously failed here. Makes you wonder how vulnerable less mature services are...