this post was submitted on 30 Jan 2026
225 points (98.7% liked)

Technology

79879 readers
2773 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 

Look, we all knew it was coming, but now it's official. Microsoft just handed middle managers the ultimate weapon. Their new update for Microsoft 365 allows companies to track exactly where you are, and the days of pretending to be at your desk are over.

top 50 comments
sorted by: hot top controversial new old
[–] wizardbeard@lemmy.dbzer0.com 100 points 2 days ago* (last edited 2 days ago) (6 children)

While making this easier to access isn't a positive, there are a ton of ways that this can, and already is, being done at companies that actually care about this shit.

Yeah you're totally in the office, but your laptop just magically has an IP from the subnet for devices connected over VPN 🙄

Once again I must insist that people need to stop expecting any privacy on work devices. It is possible to find out anything on them, including location, it's just a matter of how much effort your workplace is willing to expend on looking.

Edit: While I appreciate the article being short and to the point, a link to any documentation on this would have been nice. The claim is that it will display the SSID of the Wi-Fi AP you're connected to. While being able to get that from your phone is a new bit of reach, it's possible to gather that from work devices easily.

[–] atomicbocks@sh.itjust.works 22 points 2 days ago

Any company going this far will almost certainly be requiring device management on whatever device you put your work email on. So if you have your email on your personal phone the likelihood that they can already track your location 24/7 using your phone’s gps is extremely high.

[–] corsicanguppy@lemmy.ca 18 points 2 days ago (1 children)

You don't know how Cisco is triangulating your laptop's position from APs in range, do ya? It's 2015 tech, and it's insane.

Being able to see where everyone's cell phone is in the middle of an open-air concert ... and whether and where it has been on the muni network since ... has been valuable for cops looking to question a potential witness.

But yeah, if you're reading this in the company loo, your IT people probably know, if they cared. They don't care.

Hell, knowing when the boss's phone lights up on the site wifi was great for ambushing him with a purc req first-thing. ..or so I hear.

TL;DR: they don't need to know which IP range you're on, as their layer-1 has already ratted you out.

[–] hodgepodgin@lemmy.zip 7 points 1 day ago* (last edited 1 day ago)

my direct supervisor has showed me what information he has access to w.r.t. wireless client information, such as client position.

My first thought would be how that is even possible, but given the fact that we record the location of each AP install, this makes a lot more sense.

[–] chocrates@piefed.world 12 points 2 days ago (1 children)

I'm more worried about them listening to my mic and recording my camera at this point.

[–] lightnsfw@reddthat.com 6 points 1 day ago (2 children)

That's why mine's pointed at my dick 24/7. Wouldn't want them to miss anything.

[–] pastermil@sh.itjust.works 1 points 1 day ago

So you point their mic to yours! They definitely won't miss that piss!

[–] regedit@lemmy.zip 1 points 1 day ago

Comment matches username!

[–] mrnobody@reddthat.com 4 points 1 day ago

Thank God my company is so antiquated they don't even know about half the tech that exists to spy on employees. Thankfully I'm also head of IT so imma keep them in the dark about that loll. Every time I upgrade the simplest things it's like I've shit out actual magic. It's great!

[–] thisbenzingring@lemmy.today 9 points 2 days ago (2 children)

just use vpn all the time, even when at your desk in the office

[–] TipRing@lemmy.world 9 points 2 days ago (2 children)

This will break a lot of applications.

[–] thejml@sh.itjust.works 22 points 2 days ago (1 children)

This is literally how our corporate network is setup. You MUST be on vpn or you cant get to anything. Makes the access permissions super simple. Prior to this setup there were authorization settings that differed between on-prem/off, on vpn or off, which office you were in, etc. now they just deny all unless you vpn in and then it uses your vpn account to validate access there, in one place. Saved a lot of headaches.

[–] TipRing@lemmy.world 3 points 2 days ago (1 children)

That is certainly a direction. I hope you have robust redunacies on the concentrator.

[–] rainwall@piefed.social 6 points 1 day ago* (last edited 1 day ago)

The above is just modern network security. The model is called zero trust.

Zero trust assumes there is no implicit trust granted to assets or user accounts based solely on their physical or network location (i.e., local area networks versus the internet) or based on asset ownership (enterprise or personally owned). Authentication and authorization (both subject and device) are discrete functions performed before a session to an enterprise resource is established. Zero trust is a response to enterprise network trends that include remote users, bring your own device (BYOD), and cloud- based assets that are not located within an enterprise-owned network boundary. Zero trust focus on protecting resources (assets, services, workflows, network accounts, etc.), not network segments, as the network location is no longer seen as the prime component to the security posture of the resource.

Google pionerred it in the 2000s I believe, but its very normal now. A commom deployment will have an always on vpn agent on each device, which will then use mesh vpn tech like wireguard to do peer to peer connections between the client and server. There is no need for a central vpn controller. At most their is a dns-ish directory service that runs to let each agent queiry to get public keys for the other agents. Access is gated with RBAC and ACLs.

Tailscale is well known name that provodes this model. Netbird is a FOSS example.

[–] Creat@discuss.tchncs.de 2 points 2 days ago* (last edited 2 days ago)

That really depends on how the VPN is setup and configured on the company side. And possibly how the applications it their servers are configured as well. In our case, absolutely nothing breaks and it just works.

[–] CCMan1701A@startrek.website 1 points 1 day ago

Can't use a vpn it shows location is from unexpected location and gets my passport reset. Its really annoying.

[–] THE_GR8_MIKE@lemmy.world 9 points 2 days ago* (last edited 2 days ago)

That's why I send passive aggressive messages about my company on my work computer. Hopefully they see me laughing at their incompetence and obvious nepotism.

We'll, uh, see how it works out.

[–] xylogx@lemmy.world 5 points 1 day ago

Your IP address can be correlated with your location without needing this Microsoft cruft. Combine this with MDM and badge reader logs and your employer already has all the information they need to track you.

[–] Buffalox@lemmy.world 39 points 2 days ago* (last edited 2 days ago) (1 children)

This is what many of us warned against already 20 years ago. It's one of the inherent dangers of ALL proprietary software.
Back then most people didn't believe or understand it, now that such dangers are out in the open, nothing continues to happen about it.
Everybody knows today, but (almost) nobody gives a shit.

[–] homesweethomeMrL@lemmy.world 14 points 2 days ago (2 children)

Member when “the government is listening!” Was ‘just crazy paranoids’?

Yeah.

[–] msage@programming.dev 17 points 2 days ago (1 children)
[–] CeeBee_Eh@lemmy.world 2 points 1 day ago

People in the 90s and early 2000s were the ones most paranoid about that. I don't think people in the 60s were anywhere near as worried or aware of wiretaps.

[–] otacon239@lemmy.world 10 points 2 days ago (1 children)

Back then the reality was more “the government wish they had the power to listen to everything” and now that they have the power, no one believes it because it was previously ridiculous to think they were already doing it.

The conspiracy was just ahead of its time.

[–] homesweethomeMrL@lemmy.world 2 points 2 days ago

I mean ECHELON was reading satellite traffic in the 70s. Although now we call it Five Eyes. Encryption for regular people just wasn't a thing until the 90s. Still isn't for 90% of everyone on most platforms.

[–] TipRing@lemmy.world 25 points 2 days ago (3 children)

This shit makes my job harder. I am required by law to provide a PSAP with the location data of any 911 caller (within a pretty tight radius). I have to use software in concert with softphones which requires the user enter their location when logging in the phone on their computer, just in case it is used to dial 911. This isn't optional, we could face serious legal penalties if a user dials 911 and the response is delayed because the responders go to the wrong place.

My stuff is only used for 911. We don't keep track. Really. There's not even a mechanism to do that.

But when MS pulls this invasive bullshit it makes people afraid that my 911 software is doing the same thing. It makes them lie on the form or refuse to put anything in it. It makes them less safe and it makes my life difficult trying to convince them that the software we are using really is just for safety and that nobody, not even me, has access to it.

[–] UnspecificGravity@piefed.social 25 points 2 days ago

It doesn't help that pretty much every single thing that has ever been done in the name of "safety" in America has eventually been used to rip us off or harm us in some way, and that isn't even counting the fake shit that was a fraud from the get-go (like the patriot act and the like).

[–] dukemirage@lemmy.world 3 points 2 days ago (1 children)

But when MS pulls this invasive bullshit it makes people afraid that my 911 software is doing the same thing.

How’s that?

[–] TipRing@lemmy.world 8 points 2 days ago (1 children)

Because if middle managers even in other companies are tracking people's locations then people are more likely to think that my software that asks for their location will be used to track them even though it doesn't.

[–] Archer@lemmy.world 4 points 2 days ago

Not yet. Private equity is probably eyeing new data sources to snap up all the time

load more comments (1 replies)
[–] shittydwarf@piefed.social 28 points 2 days ago (1 children)
[–] eleijeep@piefed.social 21 points 2 days ago
[–] lividweasel@lemmy.world 16 points 2 days ago (2 children)

The lack of a source in that article led me to go looking for something official. Here’s the MS article on the feature: https://learn.microsoft.com/en-us/microsoft-365/places/configure-auto-detect-work-location

What jumped out at me (called out twice in dedicated boxes):

By default, users are opted out of work location detection. Users are prompted to provide consent for automatic location detection in the Teams desktop client on Windows or macOS. It is not possible for admins to consent on users' behalf.

This just doesn’t seem like as big of a deal as some are making it sound.

[–] Hegar@fedia.io 16 points 2 days ago

I don't think it's wise to believe tech oligarchs saying that orwellian surveillance tech cannot be exploited for orwellian surveillance.

Besides companies can just require employees to opt in - "we just built this fresh horror, how companies use it is up to them" doesn't really fly.

[–] ramble81@lemmy.zip 7 points 2 days ago

By default users are opted out…

… unless your company admin overrides that choice with a policy and force enables it.

[–] zod000@lemmy.dbzer0.com 11 points 2 days ago

That's why you leave your work laptop at work and tunnel in from home!

[–] infin@quokk.au 5 points 1 day ago

Use Teams in the web browser instead of the Edge Webview wrapper client?

It's trivial to set your SSID and AP's MAC address to match whatever they're looking for.

[–] Darkcoffee@sh.itjust.works 9 points 2 days ago (1 children)

Uninstalled. You can use these apps in a chromium browser, where you control what it can use.

[–] pinball_wizard@lemmy.zip 4 points 2 days ago (1 children)

Exactly. When I have to interact with Microsoft, I feel best keeping it in a browser.

[–] Darkcoffee@sh.itjust.works 2 points 1 day ago

For work/school I keep it all in Edge. So I keep all the garbage in the same bin 🤣

[–] tidderuuf@lemmy.world 8 points 2 days ago (1 children)

This has been in Teams for years. Let's be serious if your boss actually cares then get a different job or a different fucking boss.

[–] bridgeenjoyer@sh.itjust.works 4 points 2 days ago

My work/manager has the best possible way of managing: get your work done, dont make drama, work as little or much as you need. We have to try to get 45 hours but almost no one does or they pad their timesheet. But then there's weeks you travel and work 60 hours (but its actually work not wasting time)

Works great for people like me who are useless from 1 pm to about 3 pm, but really able to get a lot of work done from 5 to 7 ish. Unless youre missing meetings, no one cares where you are. I could go to Hawaii tomorrow with my laptop and do the exact same work I do now.

[–] troed@fedia.io 8 points 2 days ago (3 children)

Why is it a bad thing that employees can't pretend to do something they're not?

If you're doing a good job, managers don't care if you spend the afternoon at a café.

/ex manager

[–] baronvonj@piefed.social 28 points 2 days ago

good managers don't care.

[–] atomicbocks@sh.itjust.works 4 points 2 days ago

I’ve been in software development for 15 years and never had a manager that wasn’t at least a little bit of a micromanager. The reality is that it rarely takes 8 hours or more to do the things that need to be done in a day but the expectation most often is still that if my AuDHD ass isn’t in my often windowless office for 9 hours a day then I must not be working.

[–] Mirshe@lemmy.world 2 points 2 days ago

Except your managers might think it's important, or you're a shitty manager trying to fill their time and look important by micromanaging your employees.

[–] _haha_oh_wow_@sh.itjust.works 6 points 2 days ago (1 children)

Good thing my manager isn't a piece of shit.

Also, I have it blocked on all my stuff because fuck off with your tracking.

load more comments (1 replies)
[–] nightmare786@leminal.space 5 points 2 days ago* (last edited 2 days ago)

So is it just teams? I'm confused

[–] MagicShel@lemmy.zip 5 points 2 days ago (1 children)
[–] Beep@lemmus.org 5 points 2 days ago

I edited it, thank you for alerting me.

[–] MonkderVierte@lemmy.zip 4 points 2 days ago* (last edited 2 days ago)

Great job MS. This is illegal here.

load more comments
view more: next ›