61–70 of 117 posts
I note that this was published in September, has there been any follow up? I did search but didn't find anything.
MSFT should be leading the way. In what universe do they need to be collecting data from kids, especially that which cannot be kept locally. Telemetry data (which I suggest is reasonable that they collect) can be stored in local 'log' style DBs. It's not data they need to repatriate. Although for login and identity management, it might be reasonable to have that quasi centralized for security reasons. While MS could…
If the customers are unwilling, how is this regulatory capture vs customer protection?
Notably, a lot of it results from a new shift in perspective aka they are developing internal security policies consistent with those regulations.
None of this is entirely irrational - when the Internet was born, I was actually shocked at the ultra liberalism of it.
I remember thinking Google's objective to 'organize the world's information' to be a big gliby arrogant - because what kind of person would believe that data in other nations was their right to manage?
In hindsight I'm thankful that it was 'open' because my purview was a bit too narrow, that said, I'm having a 25 year 'I Told You So' moment and I do think we need to find an equilibrium.
Earlier quoted context omitted.
You make it sound like it's fine for an application that has network i/o in the few KB and miniscule UI refreshes when idle to consume that amount?
What % of your RAM did mIRC use back in the day? I bet it was several times that amount.
mIRC used to use ~2MiB when I had 256MiB in 2003 and I was in a lot of channels.
I know this because I used to count every megabyte of usage back then and MSN Messenger with the "animated images" was the real hog back then.
What a clickbaity headline. It's just about one state, and only for schools. (The first sentence of that article is: "The central German state of Hesse’s local Data Protection Authority (DPA) has banned the use of Microsoft 365 in its schools")
It is a bit clickbaity. But on the whole i'd say its warranted. Because these judgements are precedents which bind other DPA's. The scope of the factual findings is broad enough to say that it affects any business using 365 handling personal data. That leaves only the question of legality in the specific case. Which depends on the presence and kind of personal data present in 365.
MSFT should be leading the way. In what universe do they need to be collecting data from kids, especially that which cannot be kept locally. Telemetry data (which I suggest is reasonable that they collect) can be stored in local 'log' style DBs. It's not data they need to repatriate. Although for login and identity management, it might be reasonable to have that quasi centralized for security reasons. While MS could…
MS, G, AWS will end up offering local datacenters operated by local companies owned by them. They'll cost a little more.
Earlier quoted context omitted.
It is a bit clickbaity. But on the whole i'd say its warranted. Because these judgements are precedents which bind other DPA's. The scope of the factual findings is broad enough to say that it affects any business using 365 handling personal data. That leaves only the question of legality in the specific case. Which depends on the presence and kind of personal data present in 365.
> precedents which bind other DPA's. They aren't legally binding. Neither are they in practice. The German DPAs alone are famous for bickering between one another.
Conflicts interpretation and by extension conclusions are typically finally resolved at the EU level. When there is bickering.
In practice you see this happening at several levels, in France as well as in Germany there are bans on 365. And in separate states in Germany. etc..
I expect this will come to a head at the EU level.
And I'm nervous customers will move away from 365. Because Azure AD integrations will then need to be replaced. But I suspect things won't move quite so fast.
Earlier quoted context omitted.
It is a bit clickbaity. But on the whole i'd say its warranted. Because these judgements are precedents which bind other DPA's. The scope of the factual findings is broad enough to say that it affects any business using 365 handling personal data. That leaves only the question of legality in the specific case. Which depends on the presence and kind of personal data present in 365.
What I'm wondering is, how is office 365 really any worse than Windows 10/11 itself?
MSFT should be leading the way. In what universe do they need to be collecting data from kids, especially that which cannot be kept locally. Telemetry data (which I suggest is reasonable that they collect) can be stored in local 'log' style DBs. It's not data they need to repatriate. Although for login and identity management, it might be reasonable to have that quasi centralized for security reasons. While MS could…
A government would be stupid to hand over all their citizens data to the US via US technology companies.
There should be two directions of attack on this issue. Legislation to try and force US companies to legally protect personal data of citizens from other countries. And to build competitors to Microsoft, Amazon etc.
Obviously creating a viable competitor is hard, and has been badly neglected. Not least because any non-US competitor would have to fight the US Government itself which would attempt to protect the US tech companies dominant positions.
I'll take the GDPR and other countries attempts at the legislative route as a start however.