Microsoft changes policies for snooping on Outlook.com accounts


Recommended Posts

Microsoft revealed earlier this week that the company scanned a blogger?s Hotmail account to track down a Windows 8 leaker. An ex-Microsoft employee, who allegedly leaked confidential copies of Windows 8 and anti-piracy software, was subsequently arrested and charged after Microsoft identified the individual from a search of a French blogger?s Hotmail account. Microsoft used a clause in the company?s terms of service for Outlook.com to allow it to scan the account. The move has triggered widespread debate over the practice, and Microsoft tells The Verge that it?s planning to alter its policies in future.


 


While courts don?t issue orders to authorize a company to search its own data, Microsoft?s John Frank, VP and deputy general counsel, admits "even we should not conduct a search of our own email and other customer services unless the circumstances would justify a court order, if one were available." As a result, Microsoft?s policies are being changed so that a legal team, separate from the internal investigations team, will assess any cases to determine whether they would justify a court order. Microsoft says it will also submit the evidence to an outside attorney and only conduct a search if the former judge deems it necessary.


 


Microsoft is also planning to publish a bi-annual transparency report that will detail the number of searches and number of customer accounts affected."The only exception to these steps will be for internal investigations of Microsoft employees who we find in the course of a company investigation are using their personal accounts for Microsoft business," explains Frank. "And in these cases, the review will be confined to the subject matter of the investigation." Microsoft?s full statement is available below:


 


We believe that Outlook and Hotmail email are and should be private.  Today there has been coverage about a particular case.  While we took extraordinary actions in this case based on the specific circumstances and our concerns about product integrity that would impact our customers, we want to provide additional context regarding how we approach these issues generally and how we are evolving our policies.


 


Courts do not issue orders authorizing someone to search themselves, since obviously no such order is needed.  So even when we believe we have probable cause, it?s not feasible to ask a court to order us to search ourselves. However, even we should not conduct a search of our own email and other customer services unless the circumstances would justify a court order, if one were available.  In order to build on our current practices and provide assurances for the future, we will follow the following policies going forward:


  • To ensure we comply with the standards applicable to obtaining a court order, we will rely in the first instance on a legal team separate from the internal investigating team to assess the evidence. We will move forward only if that team concludes there is evidence of a crime that would be sufficient to justify a court order, if one were applicable. As an additional step, as we go forward, we will then submit this evidence to an outside attorney who is a former federal judge.  We will conduct such a search only if this former judge similarly concludes that there is evidence sufficient for a court order.
  • Even when such a search takes place, it is important that it be confined to the matter under investigation and not search for other information.  We therefore will continue to ensure that the search itself is conducted in a proper manner, with supervision by counsel for this purpose.
  • Finally, we believe it is appropriate to ensure transparency of these types of searches, just as it is for searches that are conducted in response to governmental or court orders.  We therefore will publish as part of our bi-annual transparency report the data on the number of these searches that have been conducted and the number of customer accounts that have been affected.

The only exception to these steps will be for internal investigations of Microsoft employees who we find in the course of a company investigation are using their personal accounts for Microsoft business.   And in these cases, the review will be confined to the subject matter of the investigation.


 


The privacy of our customers is incredibly important to us, and while we believe our actions in this particular case were appropriate given the specific circumstances, we want to be clear about how we will handle similar situations going forward. That is why we are building on our current practices and adding to them to further strengthen our processes and increase transparency.


 


John Frank, Vice President & Deputy General Counsel


 


http://www.theverge.com/2014/3/20/5531428/microsoft-changes-outlook-com-email-policies


Do you think Microsoft will add themselves to the Scroogled campaign: "Google [& Microsoft] violates your privacy by reading every single word of every single email sent to and from [your] accounts..." http://www.scroogled.com/email :laugh: 

  • Like 1

Who knows.  But it didnt take long for MS to release a statement.  Damage control apparenlty since it was a hot topic.  Appears to be a postive result tho.

 

Damage control indeed, after getting caught with their hands in the cookie jar.

Do you think Microsoft will add themselves to the Scroogled campaign: "Google [& Microsoft] violates your privacy by reading every single word of every single email sent to and from [your] accounts..." http://www.scroogled.com/email :laugh:

Kind of a big difference between scanning all mail for ad targeting versus looking at a single account while investigating a crime. 

Kind of a big difference between scanning all mail for ad targeting versus looking at a single account while investigating a crime. 

 

Something which, as far as I was aware, required a search warrant and police involvement...

Kind of a big difference between scanning all mail for ad targeting versus looking at a single account while investigating a crime. 

 

Similar scans are made by all parties to search for malware or spam.  Google makes their money from ads and people seem to forget that and get upset that they are getting more ads.  Dont want to support a company who makes their money from ads, then users need to switch to something different.

Something which, as far as I was aware, required a search warrant and police involvement...

They're not the police and they're searching their computers for their stolen property.  If it were police or another government agency doing the search, then yes, they'd need a warrant.. searching their own hardware for their stolen property, not so much. Since people are bringing Google into this, even they say users should have no expectation of a right to privacy.

 

 

Similar scans are made by all parties to search for malware or spam.  Google makes their money from ads and people seem to forget that and get upset that they are getting more ads.  Dont want to support a company who makes their money from ads, then users need to switch to something different.

I'm not dissing GMail, I don't even use it (or Outlook) aside from random forum registrations, got my own ISP's mail server for my real stuff, just commenting on trying to compare Scroogled versus looking at a single account for stolen property.  Apples and oranges just to make a silly jab at big bad Microsoft.

They're not the police and they're searching their computers for their stolen property.  If it were police or another government agency doing the search, then yes, they'd need a warrant.. searching their own hardware for their stolen property, not so much. Since people are bringing Google into this, even they say users should have no expectation of a right to privacy.

 

 

MS own the hardware, not the user account. They should have no legal right to access that account without a search warrant, and in the EU at least, certainly wouldn't be allowed to do this.

So Microsoft are saying if the data is hosted on their servers then it belongs to them??

In this particular case, Microsoft was notified that stolen materials were being shared from the e-mail account in question, and were given access to the stolen materials and (presumably) given permission to read the conversation exchange between the blogger who owned the e-mail account, and the person who ratted out the blogger to Microsoft. This constitutes some pretty damning evidence.

Microsoft is also obligated to investigate when it receives strong evidence that their services are being used to commit a crime. Given these circumstances, I think that they had a strong case for accessing the e-mails. I think many people are getting hooked on the fact that in this case, Microsoft was being self-serving, but they're obligated to pursue any criminal activity as long as they receive evidence that their services are being used to facilitate it.

So Microsoft are saying if the data is hosted on their servers then it belongs to them??

 

Pretty much.  And they used a loophole in the EULA that pretty much every users is oblivious about to look at the users emails.  Lots of people are not happy with MS right now and is why MS was quick to release new changes their policy and put stricter measures on how/when a users info is viewed.  Tho, along with most companies, this is just an upfront show and the will continue to do what they want regardless I am sure.  Why I keep saying that the user him/herself needs to take their own steps to protect their data and not just trust MS, Apple, Google, or anyone else to do it all themselves.

 

I also have a feeling the Scroogled campaign against Google accusing them of reading emails/stealing email data will be dead soon.

 

Although the move could be perceived as a breach of trust, Microsoft says it's allowed to make such unilateral decisions. It pointed to its terms of service: When you use Microsoft communication products -- Outlook, Hotmail, Windows Live -- you agree to "this type of review ... in the most exceptional circumstances," Frank wrote.

 

So basically if MS itself suspects any wrong doing, they have the ability to go in and look at what you are doing.  Dont need a warrant or anything like that.

Microsoft is also obligated to investigate when it receives strong evidence that their services are being used to commit a crime.

 

...

 

they're obligated to pursue any criminal activity as long as they receive evidence that their services are being used to facilitate it.

 

I am not so sure, i think it should be up to the police to investigate. Microsoft get the tip off then pass it on to the police who get a search warrant to access the data. That way you don't end up with any privacy related issues, if you REALLY cared about your users privacy why would you want to jeopardize it??Microsoft are just too big to really care??

This topic is now closed to further replies.
  • Posts

    • 10 games join Xbox Free Play Days this weekend by Pulasthi Ariyasinghe Another Free Play Days offer has just landed, and this one is a unique one. On top of offering 10 games to jump into for Xbox players, all the titles are from a single publisher: No More Robots. The promotion has games like Little Rocket Lab, Spirittea, Descenders Next, Let's Build a Zoo, and much more. Almost every game in the selection does need an Xbox Game Pass Ultimate, Premium, or Essential subscription, so keep this in mind when browsing. Many of the titles are Xbox Play Anywhere titles though, so both Xbox console and PC players can jump in. Here's how the announcement blog post described some of the available titles: There is one game that's available to all Xbox players without the need for any subscriptions, which is Descenders. Here are the announced games and the platforms they are available to play on: Little Rocket Lab (Xbox Series X|S, Xbox One, PC) Spirittea (Xbox Series X|S, Xbox One, PC) Soccer Story (Xbox Series X|S, Xbox One, PC) Descenders Next (Game Preview) (Xbox Series X|S, Xbox One, PC) Let's Build a Zoo (Xbox Series X|S, Xbox One, PC) Hypnospace Outlaw (Xbox Series X|S, Xbox One, PC) Slayers X: Terminal Aftermath: Vengance of the Slayer (Xbox Series X|S, Xbox One, PC) Nowhere Prophet (Xbox Series X|S, Xbox One, PC) Family Man (Xbox Series X|S, Xbox One) Descenders (Xbox Series X|S, Xbox One, PC) To easily find the titles on Xbox consoles, first head to the Store, then in the sidebar, find the Home section. In there, open the Subscriptions tab. The Free Play Days collection will show up in this area. This week's Free Play Days promotions will end on Sunday, June 7, at 11:59 pm PT.
    • It STILL has horrid theme support. Hard to look at for me. The white is too bright, and the black too dark. I'm using classic outlook for the Dark Grey theme. It's just right for me.
    • inb4 someone leaves the usual "what an unfortunate name" comment
    • Cuktech 10 Ultra charger review: big display, four ports, 110W total power by Taras Buria Cuktech recently announced a couple of Ultra-branded chargers, including a desktop 300W charger, which I reviewed a few weeks ago. For those who do need that much (or who do not want to spend that much on a charger), Cuktech also offers the 10 Ultra, a traditional wall charger with similar features. Four ports, a big display, and up to 110W of power output. After using it for a few weeks, here are my impressions. Disclaimer: Cuktech provided the review unit without any editorial input or pre-approval. Like the 30 Ultra, the 10 Ultra arrived in a box made of nice cardboard with quality print all over it. Inside, besides the charger, you will find a 240W 6A charger, which, this time, is fully braided. While Cuktech always bundles high-power cables with its chargers and power banks, they are usually regular and unassuming. This time, the cable is much nicer, matching the charger's $59.99 price tag. The charger itself measures 67 x 76 x 33 mm or 2.6 x 3.0 x 1.3 inches and weighs about 250 grams. Considering the charger has four ports and a big display, I would say the compact size is quite impressive, albeit a little hefty. The overall design is similar to other chargers from the manufacturer, minus the chrome Cuktech logo next to the four ports. The Cuktech 10 Ultra has retractable prongs for better portability. Its front side is covered with piano black plastic housing two elements: a capacitive button with backlight and a quite large display for various charging stats. Ports are downward-facing, and I have mixed feelings about such a design. It is not the most convenient when you frequently connect and disconnect cables. It makes you bend over to find the right port to connect, and it is a no-go with outlets mounted closer to the floor. On the bright side, design like this eliminates clutter and sagging, especially when using four cables at once. Plus, you get plenty of space for a big display. Ports include two high-speed USB Type-C ports, one Type-C for less demanding devices, and one classic USB Type-A. The first two ports deliver full 100W, while the third is capped at 45W. As for the Type-A port, its maximum output is 18W. In total, the charger delivers 110W of power, but in my testing, I managed to squeeze 117W when charging two power banks and a tablet. Quite impressive. Type-C1 Type-C2 Type-C3 Type-A Single-port 100W 100W 45W 18W Two ports 80W 20W - - Three ports 65W 20W 20W - Four ports 65W 20W 10W 10W The charger can detect handshake protocols and balance power across all four ports according to each device's needs. As such, power is not limited to the values in the table above. You can have two ports charging at 55W, three ports at 45W + 20W, and more. For some reason, Cuktech is not listing the supported protocols, but a quick test showed that it is compatible with PD3.0, PPS, QC5, DCP, and UFCS. When you connect a compatible device, the charger automatically detects its charging standard and displays it on the screen, for example, Apple 6A or Samsung 3A. Speaking of the screen. The main highlight of the 10 Ultra is its 1.57-inch display with a maximum brightness of 700 nits and 160-degree viewing angles. The display takes up most of the front, and it shows various charging-related information, including total output power, current temperature, power distribution across ports with watts, volts, and amps, a screensaver, and more. You can toggle between the different views by tapping the button, and holding it changes the screen orientation (portrait or horizontal, plus flipped) according to your socket position. The screen is very nice. It is sharp, vivid, and the fonts are easy to read. As for settings, you can change the following: Keep the screen on or off Lock the screen orientation (hold the button to change the screen orientation) Keep the USB Type-A port on Toggle power modes The charger has three power modes: AI: standard mode that automatically allocates power to each connected device. Power Priority: prioritizes power for high-demand devices, such as laptops or power banks. Balanced: splits power evenly across connected devices according to their needs I was skeptical at first, but after testing a few devices in different modes, I can see the benefit of these three modes. The most useful is power priority, which gives the first Type-C port more power. When I was charging a 100W power bank (port 1) alongside a 140W power bank (port 2), Power Priority split the total output about 75-30. Balanced mode, as the name suggests, splits the total output between the two ports more or less equally. As for AI mode, the charger uses its brain to detect which device needs more power. In my testing, it figured out that the 140W power needs a bit more juice. As I said, I expected this to be more of a gimmick, but the three built-in modes turned out quite useful. For example, you can prioritize your laptop while giving other ports a little less power, but still enough to charge at acceptable speeds. Unfortunately, unlike the 30 Ultra, this charger cannot display the battery level of the device being charged. This small feature turned out to be very useful when I was testing the 30 Ultra, as it allowed me to see my phone's battery level without picking it up. Like other Cuktech chargers I tested, the 10 Ultra one proved itself reliable and well-made. It uses Gallium nitride semiconductor technology to reduce the charger's size and improve efficiency. It is also better at dissipating heat, but I have to say that when charging two power banks at 117W total, the charger got hotter than what I would call comfortable (hold it for a few seconds, and you start feeling a burning sensation at your fingertips). However, the built-in thermal indicator remained below the temperature threshold, with the screen reassuring that the device operated at "High performance" (I tested it in a 21 °C / 69 °F room). Overall, the Cuktech 10 Ultra is a solid choice. If you need four ports and you like to nerd out on various stats, it is a very easy recommendation. It will take care of your laptop, phone, tablet, and power bank without breaking a sweat, plus the build, material, and cable quality are top-notch. The mode switcher is handy when charging different devices with different power needs, too. I cannot say a display is a must-have in a charger, especially when it makes you more conscious about where to plug it, but it is a neat addition if you have a socket at your table or bed level, so that you can actually use the display and its features. The more important fact is that despite its size and quality, the display does not make the charger that much more expensive than similarly powerful chargers from competitors. Plus, you can save 10% on the 10 Ultra with a promo code on Amazon. Buy Cuktech 10 Ultra charger - $53.99 on Amazon with a promo code As an Amazon Associate, we earn from qualifying purchases.
    • Last week I was investigating an issue with contacts and tried using the new Outlook. In the real (Classic) Outlook, you can easily go to any Outlook folder and present it in a Table View, then customize the columns to show/sort any field, which was exactly what I needed. But of course, the new Outlook doesn't have this feature at all. I gave up. Oh, and can we possibly stop claiming the new Outlook has PST support? What it really has is the ability to use the real Outlook in the background to pretend to have PST support. There is no PST support without the real Outlook installed.
  • Recent Achievements

    • Conversation Starter
      mobandz earned a badge
      Conversation Starter
    • Apprentice
      fernan99 went up a rank
      Apprentice
    • One Month Later
      nothanks earned a badge
      One Month Later
    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      476
    2. 2
      PsYcHoKiLLa
      247
    3. 3
      Skyfrog
      79
    4. 4
      FloatingFatMan
      76
    5. 5
      Michael Scrip
      60
  • Tell a friend

    Love Neowin? Tell a friend!