Outlook app for iOS and Android
Beware of new Outlook app for iOS and Android
ETH Media Relations
The IT Services at ETH Zurich has advised members not to use the new app from Microsoft Outlook. The software does not connect directly to the mail server at ETH; instead, it directs all traffic via a number of proxy servers abroad. This means that credentials and mail data are stored on those servers. Based on its current state of knowledge, the IT Services has classified these servers as a security risk. All ETH members have been duly informed of the pertinent facts by email. The ITS refrains from making any recommendations regarding other apps.
IT Services Information
Yesterday Microsoft released a new application in the Apple and Android stores: «Outlook for iOS» respectively «Microsoft Outlook preview».
At present, the ETH IT Services strongly advises against using this application! Access of this application to the ITS central mail server has already been blocked.
Reason
The software does not connect directly to the mail server at ETH, instead it directs all traffic via a number of proxy servers in the United States. This means that your credentials (username and password) and email data are temporarily stored on those servers. While this is declared in the privacy policy of the application, it is not explicitly mentioned when setting up email account.
In case you have already installed the «app» and configured your mailbox, delete the software and change your email password:
Additional Links
More information regarding this problem can be found at the following links:
- http://www.heise.de/newsticker/meldung/Microsofts-Outlook-App-schleust-E-Mails-ueber-Fremd-Server-2533240.html?wt_mc=rss.ho.beitrag.rdf
- http://www.msxfaq.de/mobil/outlook4ipad.htm
- http://www.theregister.co.uk/2015/01/30/dev_finds_bleak_security_outlook_for_ios_app/
Contact
For all inquiries contact the ITS Service Desk. Inquiries and problems can be presented by phone, email, web-form, or at the counter.
erstellt am
in News
