Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft lays hands on login data: Beware of the new Outlook

heise.de

Post reply on HN
Print view View original

11–20 of 119 posts

Re: Microsoft lays hands on login data: Beware of the new Outlook

#11

Post by Zetobal »

consp wrote: post #5
r0nny wrote: post #2

The free new Outlook replaces Mail in Windows, and later also the classic Outlook. It sends secret credentials to Microsoft servers.

> It sends secret credentials to Microsoft servers So in a work environment it probably can never be used? I'm willing to bet that it won't make a single bit of difference.

Yep, in our corp you get your account disabled if you use the new outlook or outlook mobile because of that. Outlook Mobile does it for years now...

Re: Microsoft lays hands on login data: Beware of the new Outlook

#13

Post by wannacboatmovie »

> Although TLS-protected, the data is sent to Microsoft in plain text within the tunnel.

Although encrypted, the data is unencrypted when you decrypt it!

They should at least add double ROT-13...

Did whoever wrote this realize you need to be able to recover the cleartext for this to even work?

Re: Microsoft lays hands on login data: Beware of the new Outlook

#15

Post by pyeri »

r0nny wrote: post #2

The free new Outlook replaces Mail in Windows, and later also the classic Outlook. It sends secret credentials to Microsoft servers.

Is this the same company that once created remarkable technological innovations like Windows XP, .NET Framework, Visual Studio Express, etc? I really hope it still is!

Re: Microsoft lays hands on login data: Beware of the new Outlook

#16

Post by fifteen1506 »

wannacboatmovie wrote: post #13

> Although TLS-protected, the data is sent to Microsoft in plain text within the tunnel. Although encrypted, the data is unencrypted when you decrypt it! They should at least add double ROT-13... Did whoever wrote this realize you need to be able to recover the cleartext for this to even work?

The problem is Microsoft using its servers as the middle man, without fair warning. Not what you mentioned.

Re: Microsoft lays hands on login data: Beware of the new Outlook

#18

Post by pyeri »

HenryBemis wrote: post #6

Good thing I'm still running Office 2013!!!! (and I only had to upgrade due to .pst size limits of past versions if I remember correctly - it's been a while since I moved to the brand-new-at-the-time-2013!)(and I got Windows Firewall Control, still on v.4.9.x.x version - before it became 'free' after its acquisition and move to v.5)

I was disillusioned almost a decade ago and switched to LibreOffice back then itself. The only caveat is that the Microsoft's DOCX format isn't fully compatible with open ODT, so documents saved with one word processor may have slight formatting issues in another but I've stopped caring about it now and try to push everyone in my circle to adopt LibreOffice only. My hunch is that in about a decade or so, almost everyone will.

Re: Microsoft lays hands on login data: Beware of the new Outlook

#20

Post by ezconnect »

The new Outlook is really bad. The old one it has a setting to hide images of emails and the new Outlook I can't find it, they probably hidden it somewhere you can't find it. The only option is to use their service to download the image and the image is shown.
Post reply on HN