Microsoft Criticised For Accessing Blogger’s Hotmail

Microsoft has drawn public anger after it accessed the Hotmail account of a blogger during the investigation of a former employee.

Alex Kibkalo, an ex-employee of Microsoft, was arrested in Seattle on 19 March in connection with leaks at the software giant. During the company’s investigation, it accessed the Hotmail account of a blogger who had been in touch with Kibkalo and allegedly collected confidential files from the former Microsoft software architect, including a software development kit (SDK) used in validating product keys. Microsoft gathered the information from Hotmail (now Outlook.com), which it owns, without a court order.

‘Stupid’ move

Jennifer Granick, a Stanford Centre for Internet and Society attorney, called the move “stupid” in a New York Times report. “What blogger will use that service now?”

No laws appear to have been broken by Microsoft, as its “actions were within the boundaries of the Electronic Communications Privacy Act, which allows service providers to read and disclose customers’ communications if it is necessary to protect the rights or property of the service provider”, said the report. Nonetheless, the law isn’t shielding the Redmond, Washington-based tech behemoth from criticism.

“Microsoft essentially decided that whatever privacy expectation that its own customers supposedly had was basically a dead letter,” Edward Wasserman, the dean of the Graduate School of Journalism at University of California, Berkeley, told the paper. “It simply decided that in its own corporate interest, it can intrude on a person’s email.”

Prefacing his remarks by stating that it’s his company’s belief that “Outlook and Hotmail email are and should be private”, John Frank, Microsoft general counsel, said in a statement that in this particular case, his company “took extraordinary actions based on the specific circumstances”. The company acted to “protect our customers and the security and integrity of our products”, he added.

New legal process

Frank then laid out the legal reasoning guiding Microsoft’s actions, which adhered to its own terms of service, as it conducted its investigation.

He argued that courts do not “issue orders authorising someone to search themselves, since obviously no such order is needed”. No applicable court process exists “for an investigation such as this one relating to the information stored on servers located on our own premises”, even when Microsoft believes it has probable cause.

“While our actions were within our policies and applicable law in this previous case, we understand the concerns that people have,” admitted Frank. He said that as a result of those concerns, Microsoft “will not conduct a search of customer email and other services unless the circumstances would justify a court order, if one were available”.

Part of the process involves a legal team that operates independently from the internal investigating team to determine if a court order would otherwise be issued by a judge. “As a new and additional step, we will then submit this evidence to an outside attorney who is a former federal judge. We will conduct such a search only if this former judge similarly concludes that there is evidence sufficient for a court order,” assured Frank.

Do you know all about Edward Snowden And the NSA? Take our quiz.

Originally published on eWeek.

Pedro Hernandez

Pedro Hernandez covers Microsoft products and services, such as Office, Windows, Windows Phone, Azure and Skype.

Recent Posts

Apple Sales Rise 6 Percent After Early iPhone 16 Demand

Fourth quarter results beat Wall Street expectations, as overall sales rise 6 percent, but EU…

17 hours ago

X’s Community Notes Fails To Stem US Election Misinformation – Report

Hate speech non-profit that defeated Elon Musk's lawsuit, warns X's Community Notes is failing to…

18 hours ago

Google Fined More Than World’s GDP By Russia

Good luck. Russia demands Google pay a fine worth more than the world's total GDP,…

19 hours ago

Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

Google Cloud signs up Spotify, Paramount Global as early customers of its first ARM-based cloud…

2 days ago

Meta Warns Of Accelerating AI Infrastructure Costs

Facebook parent Meta warns of 'significant acceleration' in expenditures on AI infrastructure as revenue, profits…

2 days ago

AI Helps Boost Microsoft Cloud Revenues By 33 Percent

Microsoft says Azure cloud revenues up 33 percent for September quarter as capital expenditures surge…

2 days ago