News for hackers. Stuff that matters.

A comment on Abusing Teams client protocol to bypass Teams security policies. Parent comment

Re:Abusing Teams client protocol to bypass Teams security po... by 6chars on Tuesday October 27, 2020 @12:58PM (#24909337)
It would have been a courtesy to Teams users too, not just MS. I don't see the downside of going through the proper channels before disclosing this publicly unless the goal is some kind of "revenge" for the bug.
[ Parent | on HN ]
Re:Abusing Teams client protocol to bypass Teams security po... by tuco86 on Tuesday October 27, 2020 @01:25PM (#24909629)
There is a difference between unintended yet inevitable bugs and negligence.

Deliberately cheapening out on security because security researchers generally hold to a responsible disclosure procedure is not in the users interest.

This is not one of those inevitable bugs. This is an indicator that there maybe security issues littered throughout the system because no one cares.

[ Parent | on HN ]