link to group website

[web.git] / personal / _posts / 2020-07-24-outlook.com-considered-harmful.md

diff --git a/personal/_posts/2020-07-24-outlook.com-considered-harmful.md b/personal/_posts/2020-07-24-outlook.com-considered-harmful.md
index eced515051a67071628a39b5d9bfaa845e395800..5f982598a3d41d11d073b34d04079f637ecdac00 100644 (file)
--- a/personal/_posts/2020-07-24-outlook.com-considered-harmful.md
+++ b/personal/_posts/2020-07-24-outlook.com-considered-harmful.md
@@ -58,7 +58,7 @@ They say "+" is an invalid character, which of course is just plain wrong.)
 
 I am not sure what "activity" they have detected while I was not using my account for a month (yes I used a strong password); maybe that on its own is already violating their ToS.
 Subsequently, they insist on me giving them my mobile phone number.
 
 I am not sure what "activity" they have detected while I was not using my account for a month (yes I used a strong password); maybe that on its own is already violating their ToS.
 Subsequently, they insist on me giving them my mobile phone number.

-Needless to say, that is an entirely unacceptable request; my phone number is a way too sensible piece of personal information (comparable to my physical mail addresses) for me to share it with Microsoft.
+Needless to say, that is an entirely unacceptable request; my phone number is a too sensitive piece of personal information (comparable to my physical mail addresses) for me to share it with Microsoft.

 Better stay away from Azure CI if you care about such matters.
 
 Given the lack of proper security for text messages, this process is also unsuited to establish account security; if that was really their interest, they would insist on setting up two-factor authentication via some standard [OTP protocol](https://en.wikipedia.org/wiki/One-time_password#Standardization).
 Better stay away from Azure CI if you care about such matters.
 
 Given the lack of proper security for text messages, this process is also unsuited to establish account security; if that was really their interest, they would insist on setting up two-factor authentication via some standard [OTP protocol](https://en.wikipedia.org/wiki/One-time_password#Standardization).