Oddbean new post about | logout
▲ ▼
6a8985be | 1 years ago (raw) | root | parent | reply | flag 
 @b902f84f @481e848e @663e5b60 This feels like the lead story - Teams is a pretty exposed application and it seems … risky … not to be able to patch it within a couple of weeks.
▲ ▼
Taggart :donor: | 1 years ago (raw) | root | parent | reply | flag 
 @eb1cf42f @b902f84f @76645f86 The version of Electron it's using is craaaazy old.
▲ ▼
6a8985be | 1 years ago (raw) | root | parent | reply | flag 
 @663e5b60 @b902f84f @481e848e yeah, if I was on the other side it’d be a top place to start looking.
▲ ▼
41c7b836 | 1 years ago (raw) | root | parent | reply | flag 
 @eb1cf42f @f7c84b7b @b902f84f 

Ya definitely needs to be updated, have a feeling that Microsoft is focusing the Teams 2.0 launch so they haven't updated the Electron version underneath... though still not sure why they're using an Electron version that's a year old by now...

Hopefully they'll update it soon due to this vulnerability.

https://media.infosec.town/media/72cd92dc-4991-463c-ae69-8590e220677f.png