BeepMicrosoft Just Killed the "Cover for Me" Excuse: Microsoft 365 Now Tracks You in Real-Time
MagicShelThis is what many of us warned against already 20 years ago. It’s one of the inherent dangers of ALL proprietary software.
Back then most people didn’t believe or understand it, now that such dangers are out in the open, nothing continues to happen about it.
Everybody knows today, but (almost) nobody gives a shit.
Back then most people didn’t believe or understand it, now that such dangers are out in the open, nothing continues to happen about it.
Everybody knows today, but (almost) nobody gives a shit.
Back then the reality was more “the government wish they had the power to listen to everything” and now that they have the power, no one believes it because it was previously ridiculous to think they were already doing it.
The conspiracy was just ahead of its time.
Microsnitch
So it
troedWhy is it a bad thing that employees can't pretend to do something they're not?
If you're doing a good job, managers don't care if you spend the afternoon at a café.
/ex manager
baronvonjI’ve been in software development for 15 years and never had a manager that wasn’t at least a little bit of a micromanager. The reality is that it rarely takes 8 hours or more to do the things that need to be done in a day but the expectation most often is still that if my AuDHD ass isn’t in my often windowless office for 9 hours a day then I must not be working.
wizardbeardWhile making this easier to access isn’t a positive, there are a ton of ways that this can, and already is, being done at companies that actually care about this shit.
Yeah you’re totally in the office, but your laptop just magically has an IP from the subnet for devices connected over VPN 🙄
Once again I must insist that people need to stop expecting any privacy on work devices. It is possible to find out anything on them, including location, it’s just a matter of how much effort your workplace is willing to expend on looking.
Edit: While I appreciate the article being short and to the point, a link to any documentation on this would have been nice. The claim is that it will display the SSID of the Wi-Fi AP you’re connected to. While being able to get that from your phone is a new bit of reach, it’s possible to gather that from work devices easily.
That’s why I send passive aggressive messages about my company on my work computer. Hopefully they see me laughing at their incompetence and obvious nepotism.
thisbenzingringjust use vpn all the time, even when at your desk in the office
This is literally how our corporate network is setup. You MUST be on vpn or you cant get to anything. Makes the access permissions super simple. Prior to this setup there were authorization settings that differed between on-prem/off, on vpn or off, which office you were in, etc. now they just deny all unless you vpn in and then it uses your vpn account to validate access there, in one place. Saved a lot of headaches.
The above is just modern network security. Thr model is called zero trust.
Zero trust assumes there is no implicit trust granted to assets or user accounts based solely on their physical or network location (i.e., local area networks versus the internet) or based on asset ownership (enterprise or personally owned). Authentication and authorization (both subject and device) are discrete functions performed before a session to an enterprise resource is established. Zero trust is a response to enterprise network trends that include remote users, bring your own device (BYOD), and cloud- based assets that are not located within an enterprise-owned network boundary. Zero trust focus on protecting resources (assets, services, workflows, network accounts, etc.), not network segments, as the network location is no longer seen as the prime component to the security posture of the resource.
Google pionnered it in the 2010s I believe, but its very common now.
socsaI’m more worried about them listening to my mic and recording my camera at this point.
You don’t know how Cisco is triangulating your laptop’s position from APs in range, do ya? It’s 2015 tech, and it’s insane.
Being able to see where everyone’s cell phone is in the middle of an open-air concert … and whether and where it has been on the muni network since … has been valuable for cops looking to question a potential witness.
But yeah, if you’re reading this in the company loo, your IT people probably know, if they cared. They don’t care.
Hell, knowing when the boss’s phone lights up on the site wifi was great for ambushing him with a purc req first-thing. …or so I hear.
TL;DR: they don’t need to know which IP range you’re on, as their layer-1 has already ratted you out.
my direct boss has showed me what access he has to wireless client information, which includes client position. At first I thought this was really weird, even though I was paranoid enough to know that an SSID can track you in the general vicinity through roaming. But exact location is just so weird.
Any company going this far will almost certainly be requiring device management on whatever device you put your work email on. So if you have your email on your personal phone the likelihood that they can already track your location 24/7 using your phone’s gps is extremely high.
_haha_oh_wow_Good thing my manager isn’t a piece of shit.
Also, I have it blocked on all my stuff because fuck off with your tracking.
how block? Firewall rules?
You just turn it off in settings, but I also run a VPN and have the permissions denied at the OS level on my phone (Android 16). On my personal computer, I only use web apps when it comes to work stuff, and on my work computer, I have all location settings turned off for OS and apps (but I am an admin and work in IT).
This has been in Teams for years. Let’s be serious if your boss actually cares then get a different job or a different fucking boss.
My work/manager has the best possible way of managing: get your work done, dont make drama, work as little or much as you need. We have to try to get 45 hours but almost no one does or they pad their timesheet. But then there’s weeks you travel and work 60 hours (but its actually work not wasting time)
Works great for people like me who are useless from 1 pm to about 3 pm, but really able to get a lot of work done from 5 to 7 ish. Unless youre missing meetings, no one cares where you are. I could go to Hawaii tomorrow with my laptop and do the exact same work I do now.
Gtreat job. This is illegal here.
It’s only illegal if “here” files a lawsuit against Microsoft.
Will it?
I'll either deny permission or straight up fucking uninstall it.
The lack of a source in that article led me to go looking for something official. Here’s the MS article on the feature: …microsoft.com/…/configure-auto-detect-work-locat…
What jumped out at me (called out twice in dedicated boxes):
By default, users are opted out of work location detection. Users are prompted to provide consent for automatic location detection in the Teams desktop client on Windows or macOS. It is not possible for admins to consent on users’ behalf.
This just doesn’t seem like as big of a deal as some are making it sound.
Uninstalled. You can use these apps in a chromium browser, where you control what it can use.
Exactly. When I have to interact with Microsoft, I feel best keeping it in a browser.
For work/school I keep it all in Edge. So I keep all the garbage in the same bin 🤣
This shit makes my job harder. I am required by law to provide a PSAP with the location data of any 911 caller (within a pretty tight radius). I have to use software in concert with softphones which requires the user enter their location when logging in the phone on their computer, just in case it is used to dial 911. This isn’t optional, we could face serious legal penalties if a user dials 911 and the response is delayed because the responders go to the wrong place.
My stuff is only used for 911. We don’t keep track. Really. There’s not even a mechanism to do that.
But when MS pulls this invasive bullshit it makes people afraid that my 911 software is doing the same thing. It makes them lie on the form or refuse to put anything in it. It makes them less safe and it makes my life difficult trying to convince them that the software we are using really is just for safety and that nobody, not even me, has access to it.
It doesn’t help that pretty much every single thing that has ever been done in the name of “safety” in America has eventually been used to rip us off or harm us in some way, and that isn’t even counting the fake shit that was a fraud from the get-go (like the patriot act and the like).
paraphrandThat sounds like such a drain.
But when MS pulls this invasive bullshit it makes people afraid that my 911 software is doing the same thing.
How’s that?
Because if middle managers even in other companies are tracking people’s locations then people are more likely to think that my software that asks for their location will be used to track them even though it doesn’t.