• streetfestival@lemmy.ca
    link
    fedilink
    English
    arrow-up
    42
    ·
    1 day ago

    It appears that it does not matter if the target is an individual, organization, or government. As long as the legal request is considered valid in the United States, the target or location of the data does not matter.

    As an example, the Department of National Defence and Canadian Armed Forces make significant use of Microsoft 365. They have their own defence-tailored instance called Defence 365, which serves as a common cloud infrastructure for collaboration across DND/CAF, with stakeholders and other government departments.

    In theory, any data on or using Microsoft or a U.S.-based organization’s products and infrastructure which is not isolated from the Internet could be subpoenaed by the United States government.

      • Reannlegge@lemmy.ca
        link
        fedilink
        arrow-up
        7
        ·
        23 hours ago

        The data is encrypted, hopefully really hard with some safe guards like a canary, so we should be safe if they decided today to try and crack it but I see your point. If that canary is killed we need a system to move it to.

        • Avid Amoeba@lemmy.ca
          link
          fedilink
          arrow-up
          20
          ·
          23 hours ago

          Honestly I’d like to believe that but I doubt it. This would only be believable if MS’s apps supported E2E encryption and they don’t. Any encryption likely refers to in-transit and at-rest data. Which means the server owner can read anything they like.

          • Reannlegge@lemmy.ca
            link
            fedilink
            arrow-up
            5
            ·
            22 hours ago

            I strongly hope it is true as well, especially since we are paying for their military version office, but yeah I have my doubts.

            • Avid Amoeba@lemmy.ca
              link
              fedilink
              arrow-up
              8
              ·
              22 hours ago

              I recall over a decade ago, when various instituions like banks and universities were considering cloud apps. Everyone was concerned of data falling into US hands under the PATRIOT Act and how that’d breach Canadian privacy laws. I worked fot a Big 5 bank then. The cloud pushers kept coming up with various schemes to circumvent Canadian law so they can stop supporting their Canadian datacenters. I’m sure they got there eventually.

              • Reannlegge@lemmy.ca
                link
                fedilink
                arrow-up
                9
                ·
                22 hours ago

                I really wish the Canadian government would look at all of this and see that we need more protection. I do not remember where I saw this so take it with a grain of salt but it is my understanding that Canada is running a fibre line over the North Pole, like the trans Atlantic and Pacific lines, to get to Sweden to integrate Canadian financial institutions more with the EU. If this is true hopefully we can also get off of Microsoft things at the national level.

                I had accidentally found out my ISP was using an exchange server for their email, Exchange was probably the best option for them because they are getting out of hosting email. So I looked at the Canadian web host I got to replace my Wordpress blog with and bit the bullet after I paid for the following month of Apple’s Hide my email service I gave myself the month to move all my hide my addresses to a pseudo random email address at my domain. Then I started cancelling emails going to my ISPs address and creating new address for services that I still use or may use in the future.

                Highly recommend separate email addresses for everything and the use of a pihole, give the Google the big F you!

  • DaddleDew@lemmy.world
    link
    fedilink
    arrow-up
    21
    ·
    edit-2
    24 hours ago

    Even more terrifying, everything is cloud based and/or has intrusive server-based DRM. They effectively have a kill switch for all MS services used by the government and military.

    • Reannlegge@lemmy.ca
      link
      fedilink
      arrow-up
      5
      ·
      23 hours ago

      F-35 kill switch anyone?

      Scary to think that maybe MS is running a fighter jet, sure as hell hope not but who knows.

  • TheAgeOfSuperboredom@lemmy.ca
    link
    fedilink
    arrow-up
    16
    ·
    1 day ago

    It’s difficult to know if a business you frequent uses Microsoft, but I suppose you can always ask.

    But, as an individual you can choose to avoid MS. Linux is really good these days and Libre Office will do most of what you need. It may not be identical to the MS experience, but you do have a choice.

    • FrogFlogging@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      It’s actually quite simple to determine who an organization uses for their mail and data. All you need to do is review a domains DNS records (using a tool like dnschecker.org) and look at the MX record.

      For Microsoft/office365, you’ll see some variation of “protection.outlook.com”/“exchange.domain.com”. For google, you’ll see a variation of " MX.google.com".

      DNS records are public information. The two biggest players in the space are Microsoft and google, the majority of SMBs do not host their own mail servers.

    • Diplomjodler@lemmy.world
      link
      fedilink
      arrow-up
      17
      arrow-down
      3
      ·
      1 day ago

      It’s not identical and there is a learning curve. That applies both to Linux and to LibreOffice. But that’s a choice everyone has to make. Do you want convenience or do you want digital sovereignty? You can’t have both. On the positive side, once you get over the initial hump Linux provides an altogether better user experience just on account of not being enshittified.

  • engene@lemmy.ca
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    3
    ·
    23 hours ago

    So if it’s US-based it’s ok, but if Chinese-based it’s not ok!? 🤔

  • SirMaple__@lemmy.ca
    link
    fedilink
    English
    arrow-up
    7
    ·
    edit-2
    22 hours ago

    So glad I’ve been self hosting for years. Email on a server in Canada at OVH. Everything else I self host from home and access through the same OVH server or direct WireGuard connection to my home network.

  • humanspiral@lemmy.ca
    link
    fedilink
    arrow-up
    5
    arrow-down
    4
    ·
    22 hours ago

    Canada is already part of 5 eyes, and war declared to destroy its economy has not caused Canada to rethink its membership. NATO states operate firmly under CIA control including full allegiance from every “legitimate” political party. EU parliament members are appointed with CIA approval. You can know this because even if US political leadership pursues peace with Russia, and aggresses memebers, US colonies are apoplectic over the possibility of peace or resisting further colonial oppression. CIA allegiance will save us from Trump is thinking. Meanwhile, black site torture centers in Libya, Lebanon, and Syria must have thought the same.

    5 eyes is already integrated with internet tech giants. It is a means to provide CIA/NSA with complete information over all 5 nation citizens, and using the other 4 to loophole info about Americans.

    I doubt you need to worry about MS employees accepting CIA information requests. The monster is already in the house, as per US law, that no company is allowed to admit cooperating with.