On: Windows 11 Update 23H2 is stealing users' IMAP credentials

[martin_a]

This is nothing user-facing. Microsoft will run that in the background, firewalling it off breaks it, so they'll have to act.

[__david__ → martin_a]

The emails are user facing. So if, say, the ISP were to detect Microsoft servers connecting and serve them back a mailbox with a single email in it instead of the user's real mailbox, then the user would open Outlook and see just a single message. Ideally non-threateningly titled "MICROSOFT HAS STOLEN YOUR PASSWORD" and containing clear instructions on how to switch back to direct IMAP.

[averageRoyalty → __david__]

That's a great idea and would be extremely easy to roll out. I hope people start doing that!