You must log in or # to comment.
I’m still pissed the email I had managed to keep junk free for years was leaked because my insurance company had a breach.
Simplelogin/anonaddy
That having been said, keeping an email “private” is roughly as silly as people who think phone numbers are private, as if the white pages never existed.
Does your company/school provide employee/student Microsoft 365 licences? Ask your Windows-using colleague to check that “Optional Connected Experiences” are enabled and tell the IT team that they are likely allowing genAI training on internal documents (Microsoft seems to have reserved the right to do that and never denied the allegations). Yes, they can disable this organization-wide and will likely contact Microsoft over this, and if enough of us do this they’ll know they crossed a line.
If your company’s IT team does not respond, you’ll have another argument getting your peers over to LibreOffice.
We’re working hard to get rid of Microsoft as last we checked, we can’t disable copiloi using our data used on SharePoint without also removing all required user functionality like searching documents from SharePoint. We searched everywhere and literally couldn’t find a way to remove that.
I know that government is storing citizens data there…
WTF, why have companies ever decided to use Microsoft ?
Dump Microsoft, now.
Because the IT Manager is a clueless imbecile who only wants things his way and will not take in any other alternatives whatsoever. Doesn’t matter if it’s better for the company, they insist on having everything their way.
I remember bringing up possibly switching to linux to my IT manager at my previous job, I was told, and I quote:
I would love to, windows sends a lot of junk network traffic and that sometimes makes it hard to investigate shit, but I was told by corporate that people already know windows and we already paid for the licenses, so no.
That’s basically been my experience as well whenever I recommend linux over Windows to corpos, they can’t understand that there are valid reasons to switch, they are corporate and they know better than you, even when they know nothing about your field!
I believe the government gets a different version of Windows. My work has blocked copilot and all the AI tools. The search function in Sharepoint works for me though. Companies cannot afford to dump Windows. They need to hire people with Linux knowledge or train existing employees and most importantly rewrite programs still using MS DOS.
programs still using MS DOS
Ever heard of DOSBox, the multiplatform DOS emulator?
But yes, the lack of support for Office and other programs on Wine is a problem.
Until there is serious consequences to data breaches and criminal charges it doesn’t matter. It’s been a free for all for a long time the best we can do is simply keep using products or services that respect your privacy and discourage or not use services.
Yeah, our response to the Equifax breach was the end of data privacy. Oh, you lost literally all of the data for all of the adults in the US that you have been tracking without consent? All good, don’t worry.
Really, the response should have been the FBI taking all of their equipment, figuring out exactly what was stolen, notifying all the victims, then formatting and shredding all the equipment and sending Equifax a bill, on top of a huge fine.
I can control if I use Linux or not. I can’t control my government being
bribedlobbied by big tech that shits on consumer rights. I know what can reasonably change. Also the therapist and doctor offices are bad examples, because they have strong legal defenses through HIPAA.They do have HIPAA. That doesn’t mean their IT departments configured Windows correctly. Especially if it’s a government facility that’s required by law to accept the lowest bid from a third-party IT provider.
I work in municipal government, and our third-party IT is absolutely terrible. They can’t manage to set up an email address or image a computer without inventing 19 new ways to fuck it up. They’ve called me for help with my coworkers’ computers. If I worked in tech, that wouldn’t be so bad, but I work in the planning department.
Technical issues are irrelevant. If Microsoft is caught acting on this data, then they are in a lot of legal trouble. As far as I know, HIPAA doesn’t have exceptions for unintentional data leakage from inept admins.
This is exactly the same argument we had with the loss of anonymity brought about by social media participation, primarily of Facebook. Now more and more of the digital space connects with the real world and other people end up giving out info about you. Then we had cameras and microphone put in every smart device and people bought those eagerly just so they could play with the equivalent of the latest dog face filter, putting them everywhere so you get spied on all over the place.
The average person is walking civilization into a nightmare and individuals who notice can do nothing about it. People will not let responsibility ruin their recess. They’re children handing control of everything in their lives over to psychopaths who are re-enslaving all of us. Lemmings off a fucking cliff bought off with a series of damned toys.
got ‘Hogwarts Legacy’ for $17 on a sale ($60 normally) and after starting it up I got put on a shader caching screen for literally 10 minutes It instantly put me on a screen that forced me to go to some 3rd party website to enter my email and IRL location for them to delete my data if they had it, BUT IT DIDN’T EVEN WORK. It showed an error message!!
Then it gave me literally 15 customizeable items I don’t care about then after literally 20 minutes of playtime IT CRASHED.
… what?
Karma, I’d say
Pretty sure we all know that. I’ve been using Linux full time for about 8 years now. I’m also EXTREMELY aware that I can’t change what OS an organization runs. It’s a systemic problem.
On a side note, I don’t discuss anything with gmail users that I don’t want indexed and stored in Google’s dossier of me.
But does your medical clinic do? Does your therapist do? Does your family member…
Surprisingly, yes. Though they’re not happy with it, for various reasons. But it was refreshing to rant to my therapist about snap, apt and systemd and have them truly understand me.
Dude, I can’t even demand my health care insurance cover anesthesia for a procedure. Demanding anything from the government or a corporation is absolutely pointless at the moment.
deleted by creator
I hate to say this, but PRIVACY IS DEAD… Atleast online… Unless, you are an IT expert and been using VPNs since 2001.
it died a long time ago
Using Linux does not make you safe either. Given that almost every server runs Linux, you can bet good money that most intelligence agencies have a few full time employees adding backdoors to the kernel XZ Utils style, and at least one of them has succeeded.
True, but I’m a betting man and I bet that the US intelligence agency is so deep in Microsoft that Linux looks totally free and clear by comparison.
Well they were first in line to participate in PRISM so yeah safe bet
Valid. I also don’t have the “I don’t care” stance but rather that medical providers etc should go to jail for storing data on unsecure infrastructure
Don’t forget with the Recall feature, you may be on Linux and are using a secure communication application, but if who you are talking to is on windows your conversation can be scraped.
Same thing with email. It’s all well and good if you’re using ProtonMail or Tuta or Posteo, but you’re still cooked if the other side is using Gmail.
Old problems, new modi operandi.
Afaik, with proton you can send messages that won’t open through gmail if you protect them with a password. The other person receives a message with a link to open the mail in a browser after entering the password. It’s not the easiest solution but if you want to avoid gmail from knowing the contents of a message, you can do that.
But windows recall scrapes your screen, so even that wouldn’t work.
“But they are stored locally! Certainly, Microsoft won’t have access to those, right? Right???”
True
You can send self destructing messages with Protonmail
Do Proton remotely erase the message on the recipient’s email server? Even if it’s not a protonmail server?
They burn down the datacenter if they are not deleted in time.
Someone correct me if I’m wrong because I don’t know how proton works on this. These type of things usually don’t send the protected content in the email to the recipient’s server, they just send a link that the recipient opens and it’s all still kept on the private service’s server.
Good morning, Mr. Phelps.
It’s not like companies that use Linux don’t get breached either. Your personal data is in thousands of databases that have varying levels of security. Personal choices don’t affect any of that, regulations like GDPR are what’s needed.
GDPR has much the same problem: it can only actually be enforced against entities with a presence in Europe. When Europeans do international business, the GDPR only protects them if that foreign site has a business presence within Europe. When they have no bank accounts or business assets inside the EU, they are not subject to the GDPR.
Even though the GDPR covers your side, it doesn’t always cover the other side.
That’s why I said “regulations like the GDPR”. The US and other blocs need similar regulations. Especially the US is important, as they’ve shown that they’re willing to stretch the size of their jurisdiction to sometimes absurd lengths.
That’s usually a bad thing, but in this case that might be good.
I think you missed my point…
I am not subject to the GDPR. I don’t have to abide by it. Even if my country adopted a GDPR-like regulation, that regulation would only apply to my privacy. Not yours.
Microsoft has proven themselves overtly hostile to privacy. Yours, mine, and everyone’s. The available options are:
-
Attempt to regulate them into behaving like decent human beings.
-
Avoid their business.
When my therapist is using a system that is overtly hostile to their privacy and mine, the solution is not to ask the government to chastise their attacker. The solution is to eliminate their reliance on their attacker, and get them in a system the attacker doesn’t control.
I’m not saying we should avoid GDPR-like regulation altogether. I’m saying that at the OS level, Linux is intrinsically compliant with the intent of such regulation but may not comply with the letter, if the letter requires some sort of affirmative confirmation or certification of compliance that would be complicated for the developer to implement.
Microsoft will be able to be technically compliant with the law, but will definitely subvert it’s intent and purpose however it can.
Regulation will likely have chilling effects on the better option, while promoting the worse.
Even if my country adopted a GDPR-like regulation, that regulation would only apply to my privacy. Not yours.
That could depend on how the regulation is written, so we should push to have these new regulations cover all users of services hosted in our countries.
-
getting breached is different from using spyware.
this goes for pretty much every single chat app out there. most of the popular ones are proprietary and go through private servers.
privacy is important kids.
So it’s not enough to brag about being on Linux ourselves, we should be encouraging our friends to switch to Linux as well?
How’s this different from someone just record your call? The thing you are worrying about has been possible long before Recall is a thing.
But does your medical clinic do?
No, they don’t, and it pisses me off. Every time I see it, I think, Well, there goes my medical privacy.
But where else can I go? There’s only one health company in town, and they bought all the doctor’s offices.
Who can I complain to? The doctors and nurses are visibly frustrated with Windows every time I see them use it. If they can’t change it, how could I?
I work in IT for healthcare, and our CTO, CIO, and head of Cybersecurity are all ex-Microsoft. We’re a “Windows Shop” adopting anything Microsoft has ever made, from Windows to Azure DevOps to Access
That ship has sailed anyway. I’ve had no less than 5 breach notifications show up in the mail from things related to my health care in the last 2 years, and it’s not like I’m constantly at the doctor. The whole system is a disaster.
They might not know there are alternatives. So they likely do not ccomplain to their IT person.
Dont be a “jUsT uSe LiNuX” guy, but when you see them frustrated maybe say “hey I see you are frustrated as well and I as a patient are concerned about my medical data privacy. You know there are better and safer alternatives, maybe you could ask your IT if it would be possible to switch to Linux?”
Realistically, they can’t switch because the software to use some $€1m medical device only runs on windows.
I’ve had the se thought as expressed in the last paragraph the other day and isn’t the anwser in compatibility layer? Like can’t they install and run windows medical software using WINE?
Having worked in healthcare IT. Adding more complexity will only make things harder for them. A lot of healthcare staff can barely operate the Windows PCs and applications they’re used to. Change anything and they act like the sky is falling.
That opens up a legal liability for the people creating the compatibility layer. You’ve gone from two points of failure (the doctor and the machine) to three.
For sure it can be done but most people / companies won’t want to take on that liability.
I work for a healthcare company and when we launched we made a huge deal about only using Linux on our backend and only giving Macs to employees. It’s been almost 10 years and we’ve hired a small army of morons since then and they fired our CTO. These idiots have demanded windows so they can “do analytics” despite all our analytics being in looker and dbt and a bunch of fucking business bros in the csuite and vp level who demanded windows laptops because they just like it. They eventually canned our head of IT ans well and replaced him with a dumbass and that guy is currently trying to take MacBooks away from engineering. Then the head of “cloud engineering” just started outsourcing half our shit to consultants who keep building one off snowflake windows machines because nobody gives a shit anymore. So what used to be a clean ecosystem is now a giant botched pile of lowest effort garbage.
Stay away from this entire industry. There’s some brain rot where they only hire people with healthcare backgrounds even if the role has nothing to do with healthcare. What that turns into is people from ancient out of date orgs who have no idea what they are doing being hired over people from legitimate tech roles or any other background that is more advanced in other fields and the company will always slowly roll backwards into stupidity.
I sell encryption. Send me the lead dog ;p
