Latest in Gear

Image credit: SOPA Images via Getty Images

Microsoft contractors reportedly reviewed Cortana clips on insecure PCs

One of the firms Microsoft hired to do the work reportedly did very little to protect the recordings.
75 Shares
Share
Tweet
Share

Sponsored Links

SOPA Images via Getty Images

New details have emerged about how Microsoft operated its Cortana and Skype grading programs in the past. Building on a Vice report from last summer, The Guardian says that for several years, the tech giant contracted a company in China that used almost "no security measures" to protect the recordings.

According to a former contractor who spoke with The Guardian, the firm allowed workers to review both Cortana and Skype recordings from homes across Beijing while using a personal laptop. The contractor says they listened to "thousands" of interactions this way. Moreover, the Chrome web app they used to do their work required only a username and password to access. Additional security measures such as two-factor authentication weren't necessary when they worked from home.

"For ease of management," every new employee the third-party firm hired over a given year was provided with the same password. What's more, those passwords were emailed to new employees in plain text over email. The firm also reportedly did little to no vetting of potential hires to ensure they were fit to do the job.

"I heard all kinds of unusual conversations, including what could have been domestic violence," the contractor told the publication. "It sounds a bit crazy now, after educating myself on computer security, that they gave me the URL, a username and password sent over email."

Following the initial Vice report, Microsoft says it ended its Skype and Cortana for Xbox grading programs, as well as moved any remaining ones into "secure facilities." None of those facilities, according to the company, are in China anymore.

"This past summer we carefully reviewed both the process we use and the communications with customers," Microsoft told The Guardian. "As a result we updated our privacy statement to be even more clear about this work, and since then we've moved these reviews to secure facilities in a small number of countries. We will continue to take steps to give customers greater transparency and control over how we manage their data."

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
75 Shares
Share
Tweet
Share

Popular on Engadget

Google fully explains why its apps aren't on new Huawei phones

Google fully explains why its apps aren't on new Huawei phones

View
WSJ: Comcast's NBCUniversal is in advanced talks to acquire Vudu

WSJ: Comcast's NBCUniversal is in advanced talks to acquire Vudu

View
'Friends' cast is locked in for a reunion special to launch HBO Max

'Friends' cast is locked in for a reunion special to launch HBO Max

View
Google search is showing invitations to private WhatsApp groups

Google search is showing invitations to private WhatsApp groups

View
The Hot Wheels RC Cybertruck is a mini Tesla for $400

The Hot Wheels RC Cybertruck is a mini Tesla for $400

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr