News for hackers. Stuff that matters.

A comment on Microsoft’s enterprise products covertly gather personal data on users. Parent comment

Re:Microsoft’s enterprise products covertly gather personal ... by bunderbunder on Friday November 16, 2018 @09:44AM (#18469046)
It's also worth mentioning that Microsoft is, to the best of my knowledge, relatively scrupulous about keeping their telemetry data anonymous. Meaning that they're still being way less sketchy about this stuff than your average e-tailer, or mass market retailers like Wal-Mart and Target.
[ Parent | on HN ]
Re:Microsoft’s enterprise products covertly gather personal ... by olyjohn on Friday November 16, 2018 @07:02PM (#18472967)
Except they are taking things like file names, e-mail headers, recipients, and even in some cases they are taking documents. The recent recommendation from them was as follows:

From - https://www.theregister.co.uk/2018/11/16/microsoft_gdpr/

"...[Microsoft] also recommends simply not using the web-only version of Office 365, or SharePoint Oneline. And it recommends periodically deleting the Active Directory accounts of VIP users and creating new accounts for them so that the diagnostic data associated with those accounts is eventually deleted."

Seriously, we should be deleting and recreating accounts in our own fucking domain to keep the data anonymous? Why is that on us?

They have you AD account info, and diagnostic data directly tied to it. There's no anonymization going on here at all. They're gathering it recklessly.

Also from that link:

"Much of what Microsoft collects is diagnostics, the researchers found, and it has seemingly tried to make the system GDPR compliant by storing Office documents on servers based in the EU. But it also collected other data that contained private information and some of that data still ended up on US servers."

[ Parent | on HN ]
Re:Microsoft’s enterprise products covertly gather personal ... by r00fus on Friday November 16, 2018 @05:53PM (#18472610)
Do you have a cite for how well they anonymize? Is it as strong a position as Apple (e.g. differential privacy)?
[ Parent | on HN ]