2 ms·
Acompli, the mobile mail app Microsoft bought and rebranded as Outlook, was like Newton and other email apps of its day - it used OAuth and cloud APIs to check
by lstamour 3y ago
Acompli, the mobile mail app Microsoft bought and rebranded as Outlook, was like Newton and other email apps of its day - it used OAuth and cloud APIs to check messages on its servers and then created a combined inbox by sending push notifications to your phone as it received new emails on your behalf in the cloud.
It sort of sounds like maybe the same infrastructure was borrowed here to set up the iCloud account in the local Outlook app. Presumably the local app is now based on the prior Acompli infrastructure.
That said… it really doesn’t pass the sniff test, it feels like Microsoft wants your contacts the same way LinkedIn (also Microsoft) wants your contacts. Personally, I wish I hadn’t trusted Google, Meta and LinkedIn as much with my contacts as I did in the past. Live and learn, I suppose.
- dylan604 3y agothe entire concept of having the users provide their credentials to a third party for them to access their accounts to provide a service is one of those things that should be included in the anti-phishing training. i don't care if the service doesn't provide a proper API for third party access or not ESPECIALLY if it is for a cloud provided service. if it was a locally running app, i might consider it only slightly less egregious.