Microsoft Teams bug allows malware delivery from external accounts
Microsoft Teams bug allows malware delivery from external accounts
Security researchers have found a simple way to deliver malware to an organization with Microsoft Teams, despite restrictions in the application for files from external sources.
I absolutely to the fucking core of my soul despise Teams. But not just Teams, Windows, too. And Word. Especially on iPad, Word is a heaping pile of shit. I’m astonished at how garbage Word for iPad is, as well as Teams. And that anyone can possibly accept advertisements in their operating system is just absolutely wild to me.
From a corporate standpoint, fine, a lot of places need Windows. Hard to get around that. But for home users? Especially with translation layers really starting to take off for gaming, if I were Microsoft, I’d stop fucking around with nonsense like ads, shady telemetry, and Internet connectivity just for a damn OS.
I really hope matrix/element takes more space in enterprise space. Sure Teams has some more features, but they suck tbh, so even i wanted to use their white board or "wiki" features, I don't because I don't want to wait a few minutes for a "wiki" to load, and no else does either!
Teams actively makes my job harder. The one thing it’s supposed to do for me is help me communicate with my team.
the whole “conversations” instead of threads sucks. The fact that it brings a convo to the bottom if someone reply’s to it causes people to constantly miss messages in other convos.
I have to actively wiggle my mouse and click on stuff to get it to update and show me new messages. And even that doesn’t always do it. So I can’t just leave my laptop open and monitor it, I have to actively go click around every 10 mins to see if there’s a message.
it fails to send me notifications for meetings, and sometimes sends them to me like a hr after the meeting happened.
sometimes I’ll see a message on my phone (I have teams there only because the notifications are more reliable) and then I’ll go to the computer to respond and it’s just gone. Never showed up. I KNOW THE MESSAGE IS THERE TEAMS YOU SENT IT TO MY PHONE WHY ISNT IT ON THE FUCKING PC
The list goes on.
I despise MS Teams...
However, the two Jumpsec Red Team members found that they could go around the restriction by changing the internal and external recipient ID in the POST request of a message, thus fooling the system into treating an external user as an internal one.
so they only do the check on client side. classic.