Forum Discussion
asottile
Jun 02, 2021Copper Contributor
please do not ever show sensitive information as part of logins
I frequently use azure pipelines while streaming to hundreds of viewers on twitch and now they have my phone number because you showed it in plain text without warning I am very unhappy about thi...
asottile
Jun 03, 2021Copper Contributor
no the fact that I stream content is unrelated -- it's just more unfortunate because I was streaming
it is a security issue to show sensitive information on screen unprompted -- most services obfuscate this information such as ***-***-**00 or such. imagine a scenario where a creepy dude is looking over ones shoulder at the library or something
it is a security issue to show sensitive information on screen unprompted -- most services obfuscate this information such as ***-***-**00 or such. imagine a scenario where a creepy dude is looking over ones shoulder at the library or something
Deleted
Jun 03, 2021Hello
I understand your concerns!
There are 121 Community Groups in the MTC and if you use Azur there should be an inquiry!
perhaps even in one More Group Security Compliance and Identity!
Start a discussion there because in this Group we are talking about the principles of MTC space!
I'll add links:
- asottileJun 03, 2021Copper ContributorI've been told repeatedly this has nothing to do with azure and that this is specifically a microsoft login issue
I've been bounced around three times now this is absurd- DeletedJun 03, 2021If your computer is managed by an organization, it is also a matter of Group Policy and logon methods chosen by the organization!
To maintain any security policy I suggest deleting a screenshot that contains a lot of private data you can do while editing.- asottileJun 03, 2021Copper Contributorit is a personal account, this has nothing to do with windows nor organization group policies -- this is a browser login for azure devops.
- DeletedJun 03, 2021
Well you explained a lot - I'm thinking about the idea for you!- DeletedJun 03, 2021Have you set up a windows hello sign-in method?
Are you using a local account, or do you have a synced Microsoft account with Windows? do you have Edge as your default browser?
Of course, please do not answer these questions publicly - I want this to be a clue.