Hacker News Reader

Comment by tyingq | Hacker News Reader

>As of Feb 2017 Outlook (https://outlook.live.com/) scans emails

Makes me curious if only the free, online, Outlook does this. There's also paid O365 online Outlook and the fat client Outlook.

View on HN

Office 365 just seems to make links useless for security now.

Our 365 instance now turns every link into this massive monolith of safelink checking URLs through Microsoft, making literally every email undeterminable if it is a phishing attempt or otherwise without turning to pasting it into one of many online 'decoders'...

Oh, probably this thing: https://docs.microsoft.com/en-us/microsoft-365/security/offi...

Though that is optional and configurable.

At work they enabled safelinks whilst all the mandatory training stated best practice was to check the links before clicking.

Its a shame those links can't have an alttext to show the real link.

You don't want to train users to disambiguate phishing with alt texts which can be spoofed in other contexts.

It's not just the free client. My university uses O365 (?) and the links are in emails checked on other clients (Mail.app of ios/macos).

Admin has also turned on "You don't often get email for __" warnings that edit the email so that gets included in replies. Very useful when you could a new large cohort of student email correspondents each semester :(

Exactly what I was thinking - what really worries me is it also seems to have happened to a lot of @gmail users too. I still can't figure out how Bing managed to find email tokens sent to gmail. Maybe users who connected their gmail account to Outlook...?

Reply on news.ycombinator.com