@dwaites @jernej__s @ptrc They're going to let random...

@dwaites @jernej__s @ptrc They're going to let random threat actors inject raw javascript into your email inbox. Where it will be executed and install all sorts of malware on Microsoft's customer base.

(When I saw the shit about Outlook365 importing all email messages to Microsoft's cloud without consent last year I deleted Outlook and deactivated Microsoft Mail on my one Windows PC, replaced with Thunderbird for my own purposes, and I'm never going to let that shit back in again.)

Like 27 April at 19:54 | Wall-to-wall | Open on wandering.shop

3 comments

Jernej Simončič �

@cstross @dwaites @ptrc I run my own mail server, and I've got one mailbox that's probably 200 GB of random, mostly unimportant crap. I've been thinking about using the new Outlook in some VM, and add that mailbox just to see what'd happen (and if Microsoft would try to cache it all on their servers).

27 April at 19:58 | Open on infosec.exchange

Daniel Waites :donor:

@jernej__s @cstross @ptrc would be interesting to see if they slurp it all or just envelopes. In IMAP you can choose.

27 April at 20:02 | Open on infosec.exchange

Charlie Stross

@dwaites @jernej__s @ptrc IIRC they slurp it all (and use it for training their LLMs).

27 April at 20:08 | Open on wandering.shop