Oh no, I'm utterly shocked that a mega corporation would blatantly break the law then find a patsy 😱
this post was submitted on 06 Jun 2024
226 points (97.9% liked)
privacy
2880 readers
12 users here now
Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.
Partners:
- community.nicfab.it/c/privacy
founded 2 years ago
MODERATORS
all 16 comments
sorted by:
hot
top
controversial
new
old
[deleted]
Unfortunately privacy in schools is at the lowest point yet, not only with Microsoft and stuff, but with Google providing the whol ecosystem of Chromebooks/ Sheets/Presentations/ Writing/Device administration and stuff.
You are pretty much left no choice but to either submit everything to these corps or go to another school where it's probably gonna be the same.
Ad an example, lately, to combat AI usate in writing assignments, teachers nave starter accepting only Google Docs, so that they can see the writing history and determine if it's written by hand. Not only is this easily bypassable with a couple brain cells, but it also forces you to use yet another online service, as writing it and then pasting it on Google would be counted as AI.
Schools should prepare children for work and the software they use should ideally reflect the software you would use at a job.
At best you learn some basic formatting and table calculations, there's no need to get specific into MS word/excel. There's essentially no difference between MS and Libre office here. Same with the operating system, if you're just sitting in an office, reading and answering emails in a browser you don't have to care about the OS.
Besides, school should teach critical thinking and how to transfer skills, not shoehorn pupils into specific roles and software.
The absolute opposite. Software changes all the time and even the same software won't look the same in a few years. Children will live a decade or two before they start work. Decades of ever faster change and development. Only fundamentals and science stats same.
It would be important to learn with maximum variety so you see the patterns and principles of the task and find your own creative solutions to get the results you want. Just like at a job.
Disagree. Computer literally does not mean to learn where exactly to click, but to learn how to navigate the computer and what does what mean. Every UI is different, every app behaves differently, and most of the time you won't land on the same screen.
It is not about "turn the wheel left to go left" hard-coded truth. Sometimes you wanna go left, you have to turn right, accept ToS, and select a file to open.
Just wait until they roll out Copilot+Recall. People won’t even remember what privacy used to be….
on schools that provide Microsoft 365 Education services to their pupils or students.
Well, don't. Teach your pupils that there are alternatives.
I read "Microsoft violates children" and I'm sticking with that thought, because it is accurate.
It is their fault. This shit is clearly documented and yes there are configuration options you must set.
and yes there are configuration options you must set.
The point of GDPR is privacy per default.
~~The whole point~~ A big part of the problem is that it's not clearly documented.
Yes, there's a ton of documentation, but correlating the settings across multiple different constantly changing web UIs plus the shit that's only available through PowerShell is easily a full time job. That's without talking about the vagueness, edge cases, and situations that simply aren't discussed in the docs.
Good example: Litigation Holds on mailboxes. LitigationDate does not update when settings of an active hold are changed, only when the status changes from disabled to enabled. Duration has no connection to the LitigationDate, so setting a duration of 100 days does not mean that the hold expires 100 days after the LitigationDate. It means that each individual email in the box will be retained for 100 days past when it was created.
So let's say for legal reasons you need to retain emails for a year, even if the user deletes them. Litigation Holds also will retain copies of deleted emails behind the scenes, so perfect. Pretty simple, set duration to 365 days and enable the hold.
What about if you need to hold onto all emails in the mailbox at the time when an employee is fired, but you only want to have those for 100 days past their firing date? You have to take the normal retention duration of 365, add how many days post firing you need to hold onto everything. So 465 days for how old the oldest email can be, so 465 days for the duration. But you only want to set that after the separation now, else you hold onto more while the person is still employed.
Automating this step is something not directly supported as some sort of automatic policy. You have to either do it manually whenever someone leaves, or start looking into automating manual changes using other tools.
Okay, so how do you ensure that at 100 days post-firing it all goes away? You must disable the 465 day duration hold entirely after 100 days. Again, manual change or welcome to learning automation land.
Now lets mix in email retention policies in Exchange, but you can't solely rely on those because those only define the maximum time an email can live before deletion and don't prevent a user from deleting everything themselves. Now you need to account for their maximum length with the duration you set when a user is fired as well.
Why not just make things easy and set all separated employees to unlimited? Now there's too much exposure risk if you get a subpeona. Legal department says no, we need it exactly as described above. And no exporting a mailbox to file after someone is fired, for security reasons relating to data portability.
So we're automating now. How do we track separation date in a way that the automation can use 100 days after it as a trigger?
Now how about having a verifiable audit trail for all of those changes?
I've fudged specifics but that scenario, requirements, and restrictions are not a hypothetical. I work in finance, so our requirements will be heavier than some other places, but it illustrates a point.
None of the little information I've given about how these features work is laid out nearly so straight forward in the official documentation.
Yes, there's a ton of documentation, but correlating the settings across multiple different constantly changing web UIs plus the shit that's only available through PowerShell is easily a full time job.
Soumds like the thing they did with their 600-pages OOXML (.docx, .xlsx) specificaton during standardization, with most of it being proprietary extensions.
If you can't hide, confuse.
Yes, it is a full time job and hard. That's how MS is able to configure and sell it to so many different customers. For those without the capabilities there are more simple products. We should start taking legal action against AWS because you can implement things in a shitty way if you hire experts?
The issue is that Microsoft is marketing these as "easy" solutions (requiring less work and manpower than older on-prem options) for specific use cases (in this case education) where the defaults don't match the requirements for said use case. It's not easier, and it doesn't meet the needs it is sold for out of the box.
I was only addressing your claim that it's all documented and the implication that it was a simple matter of configuration.