2 ms·

> Microsoft confirmed that starting March 2026 (delayed from January), managers will be able to see your real-time location. And no, disconnecting from the offi

> Microsoft confirmed that starting March 2026 (delayed from January), managers will be able to see your real-time location. And no, disconnecting from the office Wi-Fi won't save you. Is there anything more than the Wifi SSID stuff below? > If you connect to a Wi-Fi network that isn't your company's, Teams will simply display the name of that network. So if you decide to take a "working lunch" and connect to "Starbucks_Guest_WiFi", your boss sees it instantly. You can’t hide behind a generic "Remote" status anymore. So how exactly does this work? It'd be pretty trivial setup my access point to provide a work SSID? How much access does Teams really have to get info to discern your location?

iso1631 9mo ago
SSID, signal strength, BSSID, private IP, public IP, ipv6, all trivially available to a binary running on a machine. It sounds far less than the diagnostics data I get from a small go binary. If corporate policy is you can't connect to starbucks wifi, then enforce that at the MDM mangement layer - I assume things like SCCM can do it.
- palmotea 9mo ago
  > SSID, signal strength, BSSID, private IP, public IP, ipv6, all trivially available to a binary running on a machine. So it sounds like if you want to circumvent this: get a travel router that spoofs a work access point, and make sure any kind of identification requests that would reveal a public IP are either blocked or are going through your work VPN.
  - PunchyHamster 9mo ago
    running it in a browser would be enough, no ?
    - palmotea 9mo ago
      If it's only just the teams app that's doing it, but I'm not sure if that's a safe assumption. There's a crap ton of Microsoft stuff installed on my laptop by default, and the IT admins install stuff all the time.
  - iso1631 9mo ago
    Hell of a lot of opsec you need to ensure to lie to your employer. How ware you going to spoof the certificate? I don't get it personally, what's the purpose?

iso1631 9mo ago

SSID, signal strength, BSSID, private IP, public IP, ipv6, all trivially available to a binary running on a machine. It sounds far less than the diagnostics data I get from a small go binary. If corporate policy is you can't connect to starbucks wifi, then enforce that at the MDM mangement layer - I assume things like SCCM can do it.

palmotea 9mo ago
> SSID, signal strength, BSSID, private IP, public IP, ipv6, all trivially available to a binary running on a machine. So it sounds like if you want to circumvent this: get a travel router that spoofs a work access point, and make sure any kind of identification requests that would reveal a public IP are either blocked or are going through your work VPN.
- PunchyHamster 9mo ago
  running it in a browser would be enough, no ?
  - palmotea 9mo ago
    If it's only just the teams app that's doing it, but I'm not sure if that's a safe assumption. There's a crap ton of Microsoft stuff installed on my laptop by default, and the IT admins install stuff all the time.
- iso1631 9mo ago
  Hell of a lot of opsec you need to ensure to lie to your employer. How ware you going to spoof the certificate? I don't get it personally, what's the purpose?