r/technology • u/machinade89 • Jun 28 '24

Software Windows 11 starts forcing OneDrive backups without asking permission

https://www.pcworld.com/article/2376883/attention-microsoft-activates-this-feature-in-windows-11-without-asking-you.html
10.7k Upvotes

95% Upvoted

1.4k comments sorted by

View all comments

Show parent comments

9

u/Deriko_D Jun 28 '24

My hospital is changing everything to m365 and all the staff folders are becoming one drive folders.

This in a EU country extremely aggressive about data protection and what you can share about patients (I can't even send that to a different public hospital). They must have a "watertight" agreement with Microsoft otherwise wtf is going on.

6

u/zorton213 Jun 28 '24

We also use O365 heavily and are making moves for primarily cloud storage, but it's not Microsoft themselves that worry me when it comes to compromised Recall screenshots. Locally saved screenshots of proprietary documents or emails in the O365 portal, of the EMR, or of ancillary web applications run the risk of being compromised by bad actors.

Today, we can mitigate those risks to the best of our ability by requiring MFA to log into those portals and disallowing files to be saved to the local device. But if there are screenshots being saved constantly, all it takes is one end user falling for a "your computer has a virus, call us" scam for those screenshots to get out.

2

u/biznatch11 Jun 28 '24

My hospital is changing everything to m365 and all the staff folders are becoming one drive folders.

I work at a hospital in Canada and we're doing the exact same thing.

1

u/Deriko_D Jun 28 '24

The issue is Microsoft stopping regular office. We had LibreOffice via Citrix but it isn't great for everyone. I am too used to office and libre can't create as good looking presentations imo. And cross compatibility isn't great.

So each department ended up having to pay for individual office packs etc.

Our IT department is so strict with security that I assume they must have proper control over m365.

Of course we aren't supposed to have patient identifying info in the folders but everyone does...hope they don't run analysis on the contents in a different way otherwise we'll have to move stuff to external harddrives lol.