Privacy

31915 readers

533 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

[email protected]

436

Proton Mail says that the new Outlook app for Windows is Microsoft's new data collection service - gHacks Tech News (www.ghacks.net)

submitted 7 months ago by [email protected] to c/[email protected]

41 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 84 points 7 months ago (3 children)

You cannot use the new Outlook app without syncing these data with Microsoft's servers, i.e. your usernames and passwords are sent to the company's cloud servers. While the data is sent using TLS, the IMAP and SMTP username and password are sent to Microsoft in plain text. This could allow the company to access your emails, and share the data with third-parties.

Not only that, but sending usernames and passwords in plaintext allows for MITM attacks.

[–] [email protected] 3 points 7 months ago

I think outlook iOS has been storing credentials on server since day one, even before it was acquired by Microsoft. I’m not sure what the new outlook app means.

[–] [email protected] 9 points 7 months ago

I expect what they mean is that the credentials are encrypted only in transit

[–] [email protected] 17 points 7 months ago (1 children)

Isn't MS on the government shit list right now over security missteps that led to the breach of gov officials?

[–] [email protected] 2 points 7 months ago

Not sure what difference that makes since the military uses the MS office suite for everything