3 ms·
This is the horrifying core issue: "When creating an IMAP account, c't was able to record that the target server, login name and password were being transferred
by bradley13 3y ago
This is the horrifying core issue: "When creating an IMAP account, c't was able to record that the target server, login name and password were being transferred to Microsoft's server. Although TLS protected, the data in the tunnel runs to Microsoft in plain text. Without informing or asking, Microsoft grants itself full access to the IMAP and SMTP access data of users of the new Outlook."
To be clear: this is for accounts not hosted on Microsoft servers. They likely copy all of your existing mails to their servers, and any future mails sent or received also run through their servers.
- singularity2001 3y agoHow is that not a $1 billion fine under European law?
- paganel 3y agoBecause Europe heavily depends on the US for its defense and because most of MS is by now an extension of the US establishment from a strategic pov (the dividends and the profits still go to MS’s private investors, many of them Americans, but that’s not what the US establishment is really after)
- berkes 3y agoNo. Because it's still early. It quite probably will turn out to be fined. Let's wait (for months or years).
- paganel 3y agoIf anything, the fine would be at most a symbolic gesture. Just think how would hell have broken loose if the same practice had been carried out by a Chinese company or even by a Russian one (such as Kaspersky, let's say).
- matrss 3y agoThis shouldn't be just a fine. They exfiltrate a users credentials for another service without explicit consent and intercept a confidential communication channel between the user and their mail provider. This is straight up criminal behavior and should lead to jail time for the responsible person.