September 27th, 2024

Microsoft's new Outlook client moves your email to the cloud

Microsoft's new Outlook client for Windows replaces older applications, featuring cloud integration and AI capabilities, but raises privacy concerns by requiring data syncing without opt-out options, risking sensitive information exposure.

Read original articleLink Icon
Microsoft's new Outlook client moves your email to the cloud

Microsoft has launched a new version of its Outlook client for Windows, designed to replace the older Windows Mail and classic Outlook applications. This updated client features a modern design, enhanced cloud integration, and new generative AI capabilities. However, it raises significant privacy concerns as it requires users to sync their emails, events, and contacts to Microsoft Cloud, effectively transferring user data without clear consent. Upon logging in, users are informed that their data will be synced, but they cannot opt out of this integration. The client acts more as a gateway to Microsoft's cloud services rather than a traditional email client, which means that all email processing occurs in the cloud. This setup poses risks, especially for businesses, as sensitive data could be accessed and potentially used for training AI models without explicit user knowledge. The lack of transparency regarding data collection practices and the implications for user privacy are critical issues that Microsoft needs to address.

- Microsoft’s new Outlook client integrates tightly with the cloud, raising privacy concerns.

- Users must sync their data to Microsoft Cloud without an option to refuse.

- The client functions primarily as a wrapper for cloud services, not as a traditional email client.

- Sensitive business data could be exposed, potentially breaching regulatory requirements.

- Transparency regarding data collection practices is lacking, necessitating clearer user disclosures.

Related

Windows: Insecure by Design

Windows: Insecure by Design

The article discusses ongoing security issues with Microsoft Windows, including recent vulnerabilities exploited by a Chinese hacking group, criticism of continuous patch releases, concerns about privacy invasion with Recall feature, and frustrations with Windows 11 practices. It advocates for considering more secure alternatives like Linux.

Microsoft lays hands on login data: Beware of the new Outlook (2023)

Microsoft lays hands on login data: Beware of the new Outlook (2023)

Microsoft's new Outlook raises privacy concerns by sending login data to Microsoft servers. The program replaces Windows Mail and Calendar in 2024, prompting users to store email credentials with Microsoft, potentially compromising data privacy. The Federal Commissioner for Data Protection in Germany plans to investigate Microsoft's data practices. Users are warned about data security risks and unauthorized data transfers.

Even MS's AI says the new Outlook is worse than Mail and Calendar on Windows 11

Even MS's AI says the new Outlook is worse than Mail and Calendar on Windows 11

The new Outlook on Windows 11 faces criticism for design, performance, and features compared to Mail & Calendar. Users prefer the latter's simplicity, lack of ads, and better multitasking. Critics highlight issues like poor performance, lack of unified inbox, and missing features, despite Microsoft's aggressive promotion. Users express disappointment with Microsoft's focus on AI over functionality.

Every Microsoft employee is now being judged on their security work

Every Microsoft employee is now being judged on their security work

Microsoft has prioritized security for all employees, affecting performance evaluations, promotions, and bonuses. Employees must integrate security into their work, while the Secure Future Initiative enhances overall security measures.

Microsoft tweaks fine print to warn everyone not to take its AI seriously

Microsoft tweaks fine print to warn everyone not to take its AI seriously

Microsoft's updated Services Agreement, effective September 30, 2024, clarifies AI service limitations, prohibits data extraction, addresses Xbox user privacy, and outlines mass arbitration processes for customer claims.

Link Icon 43 comments
By @skrebbel - 7 months
The worst thing about this, to me, is that Windows Mail client, the one they're discontinuing, is a fantastic piece of software. It's simple, lean, capable, and elegantly designed. It's perfect for a novice computer user to check their email on.

The new cloud thing is worse in every way. It confusingly copies your email over from your email provider's servers onto Microsoft's servers, and then shows an ad that looks exactly like an email in the middle of all the emails. In other words, it injects spam, but the spam is special because you can't delete it. Also, it needs to run in a browser for no apparent reason. For anybody currently using Windows Mail, it's a pure downgrade.

I understand that a company running a cloud service needs to finance this service, eg with ads, but this doesn't need to be a cloud service at all. It's so extremely backward that I simply can't comprehend how it made it through all the management layers at Microsoft. If all builtin software that comes with Windows turns into a bad, ad-ridden cloud apps then that's just one more reason for people to switch to Chromebooks, right? What's next, ads in Solitaire?¹

I miss the time when Microsoft wanted to make useful software.

¹) At the risk of ruining the joke by explaining it: Microsoft already did this. They removed Solitaire from Windows and replaced it with a terrible Windows Store app which indeed is loaded to the rim with screamy animated banner ads. I assume that the PM responsible for that got promoted to the email team or something.

By @ggm - 7 months
The lack of tech documentation and the fact they obfuscate or even don't provide "don't do that" options goes very strongly into older Microsoft dark patterns "for your convenience"

They did this with backup. Want to backup to local media? Why would you do that when we will back it up in one drive which you must pay for.

By @omega3 - 7 months
Every email program attempts to expand its features until it can no longer efficiently send email. Those programs which resist this expansion are eventually replaced by ones which cannot.
By @thrdbndndn - 7 months
Outlook (new) (Windows desktop client) is one of the worst product from MS I've used in recent years. The lack of polishing is staggering.

Let's be fair first, it works most of time (I know it's a low bar). And I actually prefer its aesthetics than the Outlook (classic) and Mail app.

Now, back to its bugs/issues:

1. Open an email in a search folder will not mark it as read. This is the biggest gripe I have. Since Outlook (new) does not provide any native way to add a label of "unread" on the sidebar, I created a search folder with "select a type = Unread mail" and added it to my favorite. However, it's almost unusable due to the bug mentioned above.

2. You CANNOT search non-ASCII (i.e. Chinese, Japanese, etc.) category (tag). You can add them, (and if you use a, say, Chinese client, the default color categories are literally in Chinese!) but searching these categories (or just click from a tagged email) returns nothing. This fucked me so badly when I categorized 1000+ emails before realizing.

3. The state of the client at various places are often not in sync. For example you may have cleared your unread email already but the icon on taskbar still shows unread dot. Or you opened multiple windows and some say you have 0, some say you have 5. Or within the same window, the inbox sidebar label says 0 but a search folder label for certain condition (say, from certain email address) says otherwise when it's impossible. And there is no refresh button -- so if that happens you have to re-open manually or click a random label and then go back and wish it fixes itself.

I'm sure there are lots of others, but these are more than bad enough.

I'm genuinely concerned how they can ship a software at this stage, particularly issue 1 and 2 are very easily reproducible and I've reported them multiple times through feedback with only canned reply, and they're still not fixed after months.

By @canistel - 7 months
Meanwhile, Thunderbird is rolling out MS Exchange capability by v130 (which I am hoping must be very soon)
By @Neil44 - 7 months
They've recently renamed Outlook to Outlook (classic). So you can see which way the wind is blowing on this. Outlook (new) is still missing tons of big features and the UI sucks.
By @7952 - 7 months
Its maddening how software doesn't benefit anymore from fast local storage. We have massive inexpensive SSD's sitting empty whilst you wait for a tiny PDF to download.
By @kleiba - 7 months
The problem is not that email gets moved to "the cloud" - naturally, email has always lived on somebody's servers. The problem is non-tech people get tricked into doing something they would likely not want if they understood the implications - like, allowing MS to copy all of your existing email from a different account (say, gmail), when all you want is to manage multiple accounts from a single piece of software.

This whole "cloud" lingo serves to hide technological realities and privacy implications with the only goal to improve business.

By @ddmf - 7 months
The amount of issues this has caused as a sysadmin - no, don't open new outlook, open the new old outlook.

ah bugger it, add to intune - required uninstall.

By @ra120271 - 7 months
It's one bad thing to sync all one's email to the their cloud. It's another bad thing to give the cloud the credentials to sync one's email directly. So in theory even if you stop using the client they can still get your email without your knowledge and explicit permission (ie you are not using the client and would reasonably expect they don't have access to new emails).

Also the cloud service now have the capability to save then retrieve the credentials in plain text making them a rich target for being compromised.

By @klreaj - 7 months
The MSFT P/E ratio went up from around 10 in 2010 to 37 now. Presumably due to hype strategies like Azure and AI.

Why do businesses tolerate the spying and data collection? Is there no industrial espionage? A German university advised researchers not to use Skype due to the possibility of research theft.

It's a pretty dangerous game that MSFT is playing here. What goes up can come down.

By @29athrowaway - 7 months
They move it to the cloud where it becomes AI food.
By @sirolimus - 7 months
This is over a year old news.
By @nunobrito - 7 months
Same "brading" as we see on Discord "servers" which basically all run on the company side.

Now there is really no way of verifying what kind of access they do with your personal email data.

By @sub7 - 7 months
I have a hotmail account from the 90s and they've made it impossible to use not-Outlook clients to authenticate with IMAP servers - calling it a "bug" that's being "worked on" (for over a year now apparently)

Basically trying to push you to paid Exchange/Office365 subscriptions.

The more aggro these big tech cos are trying to move you from buying great products to paying for overpriced subscriptions, the closer we get to them trading at their historical PEs (down ~50% from today)

By @ashildr - 7 months
So even if your company has its own mailserver everyone is locked out of email if some Microsoft services are down, again. Brilliant.
By @blackeyeblitzar - 7 months
Break them up. We need revised antitrust laws.
By @tcfhgj - 7 months
WinoMail is a good replacement for the Mail app, in case anyone is using it and is being shoved to using the Outlook App
By @Alifatisk - 7 months
My worst fear is if Microsoft decides to fiddle with Hotmail/outlook and make it into something I have to pay for. I've had my email address for 15+ years, it's going to be a impossible task to change email address everywhere.
By @type0 - 7 months
I know this is anecdata but many Outlook users I spoke with few years ago was wanting this feature to happen. And given how rampant cryptolockers were in those organisations, they're probably joyful about it not being stored locally.
By @blacklight - 7 months
If you still use Outlook for ANYTHING then it's self-inflicted and well deserved.
By @albertopv - 7 months
New Outlook is 100% shit. So many features missing. Even adding attachments is sick. Of course, given it's an embedded web app.
By @chakintosh - 7 months
Can't train your AI if your customers' emails are stored locally.
By @gloosx - 7 months
Ah, classic micro$oft ramming their thing down the users throats while they are shouting into the void.

Steady market share decline trend for the past 10+ years. Lovely stuff ;)

By @pestatije - 7 months
one step closer to finally merge hotmail and outlook together
By @s_m_r - 7 months
For those looking for a simple, lightweight, and nice-looking mail client, check out Mailspring, It has a free version that satisfies most of your needs.
By @BodyCulture - 7 months
The website is forcing me to disable ad blocking, but I am just using Orion browser and am happy with it, so can not see the content.
By @trustno2 - 7 months
Well, it has more Copilot AI stuff baked in, that's what people want nowadays.
By @kleiba - 7 months
Folks, don't complain. You wanted the cloud, you're getting the cloud.
By @daft_pink - 7 months
are we just waiting for excel to exhibit this behavior shortly?
By @pndy - 7 months
Article mentions it's "a wrapper around Microsoft's cloud services" but I wonder if is it actually a native application or some electron/chromium embedded framework app?
By @senectus1 - 7 months
its so, so very bad.

but... if you want co-pilot... you have to have it.

All my exec's and their PA's want it. but.. they also want Offline access to their mail.

For some reason its MY FAULT they cant have both.

so very very shit.

By @tgv - 7 months
So now Outlook users' emails have two points to leak from? And we all know how good MS' security is.

> ... Co-pilot ...

Make that three. And beware:

> The offloading ... removes the ability for security engineers or researchers to easily inspect what the client is doing

By @Yaggo - 7 months
Can it yet do proper quoting?
By @bachmeier - 7 months
Yet another example of why I won't take a consulting job without written permission to upload data to Microsoft's cloud. The client will expect you to use Windows but they want you to promise that you won't share their data with anyone. There's no way to promise "local only" anything if you're using Windows.
By @wkat4242 - 7 months
Welcome to the Extinguish phase...
By @BodyCulture - 7 months
So like IMAP?
By @tamrix - 7 months
I don't mind the new outlook. The meeting notifications are far less intrusive. You can update a meeting without spamming new emails. The simplified views do 95%of what I use it for. The calendar view is easier to read.

Everyone will hate this but whatever, internal company email is dead. It causes more issues than solutions. Phishing, spam, malware, etc. It's legacy tech.

The new outlook client is linking it with more modern medium specific communication such as loop, teams, sharepoint online, one drive etc.