Live data from Hacker News

Microsoft lays hands on login data: Beware of the new Outlook

heise.de

111–119 of 119 posts

Re: Microsoft lays hands on login data: Beware of the new Outlook

#111

New Outlook on Mac is terrible - it lacks basic critical functionality such as tabular view (1 line per message) with column sorting by: From, To, Date received, Subject etc. Fortunately old Outlook is still available - I have to switch back after every update.

I turned on new outlook briefly when the banner popped up at home.

Then I got rid of it entirely when the top unread email was an ad instead of actual emails. The fuck?

Re: Microsoft lays hands on login data: Beware of the new Outlook

#112

New Outlook on Mac is terrible - it lacks basic critical functionality such as tabular view (1 line per message) with column sorting by: From, To, Date received, Subject etc. Fortunately old Outlook is still available - I have to switch back after every update.

I turned on new outlook briefly when the banner popped up at home. Then I got rid of it entirely when the top unread email was an ad instead of actual emails. The fuck?

that’s actually unhinged of MSFT

Re: Microsoft lays hands on login data: Beware of the new Outlook

#113
post #93

Why use Outlook without Office 365 or Exchange at all? Only reason I could think of: some very specialized extensions that are only available for Outlook. I'm really happy that Thunderbird recently got some updates, I think it's the only good free desktop mail client that is still around. Evolution looks really dated nowadays. Personally I can recommend eM Client for Windows users as an Outlook replacement (and they…

It 'just works'.

I've got Office 365 for Business for my personal email. Comes with OneDrive for Business (built on SharePoint) with 1TB storage, all the Office apps, Bing Chat(GPT) for Enterprise, Outlook app on Android/iOS etc. etc. Integrates perfectly on Windows.

The email service is great, works as expected and emails don't go undelivered with great spam filtering.

Can't think of a better provider. I used to be with Google Workspace but after transferring my Google account it's irreversible and can't go back to a 'personal' account while losing access to many Google services like (I know it's dead now) Stadia. Had to create a new 'personal' Google account and transfer everything over manually after doing a takeout - lost a few things like my old YouTube account and Google Play purchases.

Re: Microsoft lays hands on login data: Beware of the new Outlook

#114
post #82

Earlier quoted context omitted.

Could it be the cookie prompt? The page has 15+ trackers on it, so it must definitely ask for consent, and it shows as a big dialog with 3 buttons at the bottom.

Yes, it appeared it was. But as a non-german speaker, how would I know?

Select some text > translate, or translate the entire page? The same way one browses pages in languages one doesn't (yet) understand.

Re: Microsoft lays hands on login data: Beware of the new Outlook

#115
post #94

Oh wow, it posts your cleartext email credentials to an API endpoint called “/ows/beta/ShadowService/getShadowToken”. But it least it calls the password string a “Secret” in the JSON payload so you can REST assured knowing the Shadow Service agents will handle this data appropriately.

How do you think login works for almost all network/web services? Very few do anything different. I wish they would, of course. Crypto/signature logins please!

The thing is that this isn't logging in to your web server, it's just sending a copy of your password to Microsoft in plaintext.

Re: Microsoft lays hands on login data: Beware of the new Outlook

#116
post #114

Earlier quoted context omitted.

Yes, it appeared it was. But as a non-german speaker, how would I know?

Select some text > translate, or translate the entire page? The same way one browses pages in languages one doesn't (yet) understand.

Or I could just close the tab, and move on with my day.

It may be a regulatory requirement to display the info. It's my opinion doing it in such a disruptive and unintuitive manner is a good way to increase the bounce rate on a given site, especially when I've already got multiple browser settings enabled indicating my preference.

Re: Microsoft lays hands on login data: Beware of the new Outlook

#117
post #108

OT: Classic Outlook can be a database and file server portal. I have never seen anyone use it for this purpose. I tried to build an application using this feature. It was difficult because of how poorly documented this is.

Aren't you describing Lotus Notes?

What is Lotus NOtes?

Re: Microsoft lays hands on login data: Beware of the new Outlook

#118

Earlier quoted context omitted.

Most of the issues I've seen have been in the Outlook client app.

Ya I would never use that crap. Like if you have it setup in an alternative client, is that alright?

3rd party apps would likely work fine for this. You would lose some functionality, but ultimately, email would work.
Post reply on HN