Hacker News new | ask | show | jobs
by hef19898 1553 days ago
If you take info sec seriously that should be immediate reason to ban one note, IMHO. Because if you are not trying to, MS will just spill company data to your private accounts for you!
1 comments

It’s not just OneNote. They are absolutely confused, as an organisation, about accounts, data privacy and data security.

I can’t, in theory, access my work’s OneDrive from my personal machines, due to a required SSO on top of Microsoft’s, and a VPN requirement. But somehow there are some of my personal files in my work’s OneDrive.

I don’t know how this happened. I can’t log into our VPN as it’s machine-locked (it checks before allowing you on) and therefore OneDrive is supposed to stop me accessing it.

I keep getting emails from Microsoft about an Azure Enterprise agreement that they have decided I have power over, along with a group of people from a random company that I’m not related to in any way. Someone did a typo and included me by accident? Not likely as I have an email address that’s difficult to accidentally use via typo.

Microsoft are taking people’s responses to the group as authorised instructions as to what to do with their enterprise agreement. I’ve responded several times and said I am not related but they keep emailing about it. I know a lot about that company’s people, structure and agreements with Microsoft now!

"emails from Microsoft about an Azure Enterprise agreement" == phishing
They're really not. It's a real person at Microsoft, and they don't know how to fix it.