NHacker Next on Rails
  • top
  • new
  • best
  • ask
  • show
  • jobs
login
GuidelinesFAQListsAPISecurityLegalApply to YCContact

Hacker News on Rails, powered by React on Rails Pro. Open the source on GitHub by ShakaCode.

Commit 06fc0df

Rendered at 09:46:49 GMT+0000 (Coordinated Universal Time) with Rails + React on Rails RSC.

Ask HN: New Outlook` sends everything through Microsoft Servers

4 points by NicoJuicy 2d ago | 4 comments

gnabgib 2d ago
We talked about it in 2023

Windows 11 Update 23H2 is stealing users' IMAP credentials (666 points, 278 comments) https://news.ycombinator.com/item?id=38212453

And 2024

Microsoft's new Outlook client moves your email to the cloud (2023) (162 points, 131 comments) https://news.ycombinator.com/item?id=41666945

### Inflammatory too (2023):

Microsoft lays hands on login data: Beware of the new Outlook (231 points, 113 comments) https://news.ycombinator.com/item?id=38219568

New Outlook sends passwords, mails and other data to Microsoft (150 points, 25 comments) https://news.ycombinator.com/item?id=38233694

Microsoft steals access data: Beware of the new Outlook (161 points, 40 comments) https://news.ycombinator.com/item?id=38217457

NicoJuicy 2d ago
Okay, I'm just a bit suprised that I missed this.
runjake 1d ago
Yep, it's been like that for many years. Well before the pandemic. First noticed when it started triggering our automated incident response systems. Everything is proxied through distributed MSFT proxies.

As far as I know, there is no way to turn it off and "regular" functionality doesn't even exist in the mobile apps anymore. The Outlook mobile app itself is a basic proxy client. I believe the new Outlook is now, or is in the process of becoming the same.

bigfatkitten 2d ago
This is not a novel situation for Microsoft. From 2015:

https://www.securityweek.com/researcher-calls-out-microsoft-...