Microsoft is phoning home the content of PowerPoint slides

Post by MichaelCollins » Mon, Nov 07, 2022, 4:35 PM UTC

real_dogbert wrote: post #60

semi-extrinsic wrote: post #35

I've raised this point repeatedly in different orgs. It's met with some combination of indifference and lack of understanding and not-my-responsibility-ism, but I'm sure that this will eventually blow up hard in some company's face - like 9-digit settlement for breach of contract, or worse things like breach of export control laws. Enterprise data security on the "MS Office level" at this point is like driving 60 mph…

Yeah, I'm surprised every healthcare related business doesn't either ban PowerPoint or block this "feature" somehow. HIPAA is a hell of a drug.

Post by lolinder » Mon, Nov 07, 2022, 4:35 PM UTC

mavhc wrote: post #88

rjsw wrote: post #83

Earlier quoted context omitted.

Same speed limit in the UK, and there are roads without painted lines.

The speed limit and the speed you should be driving are different though

Post by mejutoco » Mon, Nov 07, 2022, 4:37 PM UTC

cultofmetatron wrote: post #72

Semaphor wrote: post #63

Earlier quoted context omitted.

> is like driving 60 mph on a road with no lane dividers That’s somewhat funny, because a Landesstraße in Germany has no lane dividers and the speed limit is 100 km/h (about 60 mp/h). Unless I’m misunderstanding and lane dividers mean the printed lines.

the bar to drive in Germany is significantly higher than in the united states. Requirements for getting a drivers license in America is ridiculously lenient because the American lifestyle is completely car centric. taking someone's license away is tantamount to sentencing someone to poverty.

Post by 3pt14159 » Mon, Nov 07, 2022, 4:38 PM UTC

kccqzy wrote: post #130

3pt14159 wrote: post #87

Earlier quoted context omitted.

> with TLS/SSL inspection built in (you'd need some OS API to enable that). I'm not sure of that. Provided you can add a cert to your OS, you should be able to get away with a piece of protocol downgrade network gear that you can then pipe to a different (ideally, offline other than UDP receive) computer for analysis. You'd need to disable HSTS, but other than that I think it should be the solution you're looking for…

A well-designed OS API doesn't need to do MitM and therefore would work with HSTS or cert pinning enabled. Of course for obvious reasons, few commercial apps would actually use this API unless they have some other incentive.

Post by proee » Mon, Nov 07, 2022, 4:39 PM UTC

exceptione wrote: post #133

user3939382 wrote: post #64

What I want is Little Snitch on steroids built into the OS where every process, including all native ones, including UI apps, are blocked from network connectivity by default, and the user gets an easy monitor of outgoing traffic with TLS/SSL inspection built in (you'd need some OS API to enable that). Kind of like granular oauth permissions, apps should have to declare which outgoing they have, a description/why, an…

What I want is Little Snitch on steroids built into the OS where every process, You cannot trust an OS you cannot build yourself. That's why I see Linux as the only option for professionals and privacy minded people.