Email or username:

Password:

Forgot your password?
Niels's posts Post Back to profile
Top-level
railmeat

@unixtippse @nielsk

It sounds like they proxy all the connections so all the mail passes through their servers. I wonder how long they keep it? I guess everyone’s emails become grist for AI.

I wonder what their terms of service say about that?

28 June at 10:07 | Wall-to-wall | Open on fosstodon.org
13 comments
Niels K.

@railmeat @unixtippse I dunno. But it is more less the same what they do with the mobile Outlook-clients

28 June at 10:08 | Open on mastodon.social
railmeat

@nielsk @unixtippse

I guess that is the world we live in now. Not really my preference.

Yet another reason to move my computing to self hosted and possibly Linux.

28 June at 10:11 | Open on fosstodon.org
Mr Cool

@railmeat @nielsk @unixtippse If we don't stop companies from implementing toxic business culture, it will get worse. Someday we will live in a world we don't really want to live in. We will no longer own anything, not even our data.
Too many people don't care and even defend these companies.

28 June at 10:40 | Open on social.tchncs.de
Tom

@mrcool @railmeat @nielsk @unixtippse

Agreed, except for the word 'someday'.

It will get worse for sure, but that's already the world we live in.

28 June at 11:27 | Open on social.crinstamcamp.com
Mr Cool

@Tom @railmeat @nielsk @unixtippse You are right. Even I can see how I'm slowly getting used to it. And that's how it will continue. Small steps, so that people don't realize that their rights and their data are gradually being taken away from them.

28 June at 11:42 | Open on social.tchncs.de
Menel :xmpp:
X

@mrcool

Too late! We already gave up our entire life to them.
Sadly, this is true.

28 June at 14:19 | Open on mstdn.social
Chewie

@railmeat if you have time, bandwidth and money, I would highly recommend self-hosting, I've learnt loads by doing it!

28 June at 12:14 | Open on mammut.gogreenit.net
seism0saurus 🦕

@railmeat @unixtippse @nielsk

It's documented, that they store the credentials to the Mailservers in cleartext on their servers and fetch the Mails there. It's a shitty design.

28 June at 10:09 | Open on infosec.exchange
railmeat

@seism0saurus @unixtippse @nielsk

Credentials in plain text? I thought we got past that in the’90s.

Where is that documented?

28 June at 10:13 | Open on fosstodon.org
seism0saurus 🦕

@railmeat @unixtippse @nielsk

Otherwise they can't access your Mailservers.
I'm not sure if the data at rest is unencrypted but at least it is reversible since they need it for login to your mailservers.
It is definitely not a standard like bcrypt or scrypt there the credentials are secured by a one way function

heise.de/en/news/Microsoft-lay

@railmeat @unixtippse @nielsk

Otherwise they can't access your Mailservers.
I'm not sure if the data at rest is unencrypted but at least it is reversible since they need it for login to your mailservers.
It is definitely not a standard like bcrypt or scrypt there the credentials are secured by a one way function

28 June at 10:18 | Open on infosec.exchange
Go Up