Live data from Hacker News

Microsoft Teams: 1 feature, 4 vulnerabilities

positive.security

141–150 of 264 posts

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#141
Wait until you have apply a security update for teams in environments where users aren't local admins and get a desktop-wide install.

Microsoft wrote a not officially supported Powershell script to hack this in, noting this might be needed "perhaps for a critical security release".

https://github.com/microsoft/TeamsMsiOverride

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#142
post #17

In 2020 a rash of anti-zoom propaganda that I'm almost certain was driven by Microsoft led to a company-wide prohibition on using anything other than Teams "for security reasons" where i worked. This was, I am almost certain, inspired by Microsoft corporate sales getting their hooks into management. This was largely because of news stories like "end to end encryption doesnt really work as advertised" and "if you leav…

> In 2020 a rash of anti-zoom propaganda that I'm almost certain was driven by Microsoft...

Perhaps it was driven by Zoom's poor security and privacy record?

Zoom banned from New York City schools due to privacy and security flaws https://www.fastcompany.com/90486586/zoom-banned-from-new-yo...

Google Told Its Workers That They Can’t Use Zoom On Their Laptops Anymore https://www.buzzfeednews.com/article/pranavdixit/google-bans...

Elon Musk's SpaceX bans Zoom over privacy concerns https://www.reuters.com/article/us-spacex-zoom-video-commn/e...

Apple pushes silent macOS update to remove web server secretly installed by Zoom https://9to5mac.com/2019/07/10/zoom-apple-macos-update/

Taiwan joins Canada in banning Zoom for government video conferencing https://www.cbc.ca/news/science/taiwan-zoom-video-conference...

Is Zoom the Next Huawei? ‘Puppet of Chinese,’ Say Critics https://securityboulevard.com/2020/06/is-zoom-the-next-huawe...

Zoom lied to users about end-to-end encryption for years, FTC says https://arstechnica.com/tech-policy/2020/11/zoom-lied-to-use...

DOJ charges highlight Zoom's China problem https://www.axios.com/china-zoom-charges-influence-1906e8e5-...

Zoom needs to clean up its privacy act https://blogs.harvard.edu/doc/2020/03/27/zoom/

Zoom security issues: Here's everything that's gone wrong (so far) https://www.tomsguide.com/news/zoom-security-privacy-woes

Mass move to work from home in coronavirus crisis creates opening for hackers: cyber experts https://www.reuters.com/article/us-health-coronavirus-cyber/...

Security and Privacy Implications of Zoom https://www.schneier.com/blog/archives/2020/04/security_and_...

‘Zoom is malware’: why experts worry about the video conferencing platform https://www.theguardian.com/technology/2020/apr/02/zoom-tech...

Ex-NSA hacker drops new zero-day doom for Zoom https://finance.yahoo.com/news/ex-nsa-hacker-drops-zero-1400...

Maybe we shouldn’t use Zoom after all https://techcrunch.com/2020/03/31/zoom-at-your-own-risk/

Attackers can use Zoom to steal users’ Windows credentials with no warning https://arstechnica.com/information-technology/2020/04/unpat...

The Zoom Privacy Backlash Is Only Getting Started https://www.wired.com/story/zoom-backlash-zero-days/

Hackers Are Selling a Critical Zoom Zero-Day Exploit for $500,000 https://www.vice.com/en_us/article/qjdqgv/hackers-selling-cr...

Researchers found and bought more than 500,000 Zoom passwords on the dark web for less than a cent each https://www.businessinsider.com/500000-zoom-accounts-sale-da...

Beware of ‘ZoomBombing:’ screensharing filth to video calls https://techcrunch.com/2020/03/17/zoombombing/

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#143

MS Teams is the worst software I've ever used. This is not hyperbole. A room full of monkeys on a typewriter would never create something as bad as teams.

I definitely agree with this sentiment in terms of general UX and performance. I can't find a lot of messages and files that I'm looking for because it's so badly structured. And it has a very noticeable lag whenever I perform any function (clicking on "Activity" out of "Chat" for example).

The only good thing about it is video calling. Without testing this, I always feel it's much faster/smoother and has better screen sharing quality. Also the launch screen does a great job (in comparison to Zoom for example)

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#144
post #116

I work with several large organisations, all using Teams. In every instance, the previous solution (Slack/Zoom/Discord) was replaced by Teams following higher management making the switch for reasons like "it's included in Office 365" or a new hire influencing the migration to Microsoft solutions. In every instance, the application was/is not well received by the employees - it's slow, buggy, crazy complicated and ge…

That is exactly how it went where I work. Higher management decided for teams and office and it is just bad solution.

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#145
post #61
post #36

Earlier quoted context omitted.

I remember when they stories came out they were released in a suspiciously coordinated way. Once one died off another was released to build up momentum again and keep the idea humming in the public consciousness. I figured that it was done by a big party that had a trusted relationship with tech journalists because they bigged up vulnerabilities that were relatively minor to journalists who didnt seem to be aware of…

The pattern of stories indicated that it was a thing that got attention, so people went digging for whatever they could find and push. You don't need a conspiracy for something to get way more attention than others.

Would they drip-feed what they found though? Sounds like you need some form of coordination for that at least.

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#146

MS Teams is the worst software I've ever used. This is not hyperbole. A room full of monkeys on a typewriter would never create something as bad as teams.

Lync was worse.

Oh, I remember how Lync had different maximum message lengths for the first message in a conversation vs subsequent ones. I believe it was using SIP internally and sending your first chat message in a "begin call" workflow, but it was always unpredictable when a new "call" would start or not. Horrible kludgey solutions...

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#147
post #113

MS Teams is the worst software I've ever used. This is not hyperbole. A room full of monkeys on a typewriter would never create something as bad as teams.

I fully agree. I literally never felt this much hate and contempt for software as I do when I'm forced to use Teams every day. It's an absolute shitshow of a chat. And when I thought it couldn't get worse, they f*ked up ctrl+a selecting all text on Windows... I work in MS ecosystem, some MS products are great, some are really bad, most are ok-ish, but Teams is on a whole another level of bad.

Then I presume you never had the misfortune of using Skype for Business?

We used this prior to Teams, and in comparison, Teams is great. I'm guessing a lot of Teams users come from Skype for Business, so they are really happy with the improvements.

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#148
post #132

Earlier quoted context omitted.

Linux version: - some times the left arrow to move the cursor doesn't work - some times images are displayed and others not - can't have more than 4 people on screen in a video call - the scroll is completely broken - can't get out of the immersive mode without closing the process (the back arrow doesn't work) And the list goes on and on...

My biggest issues are that a) it starts up in the foreground (none of my other autostart apps do this) so it can happily intercept keypresses you're doing in other apps -- and b) it does not respect standard system titlebar / borders, which puts it as the only app in my KDE environment that works in a non-standard manner. A/V issues, navigation, inability to find an existing conversation / conference (happening now o…

> it does not respect standard system titlebar / borders, which puts it as the only app in my KDE environment that works in a non-standard manner.

This also makes it impossible to resize the window. Well, sometimes. There are times when it works, and I have no idea what makes it work.

Thankfully, I usually use Qubes OS which doesn't let programs do these user-hostile things.

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#149

Earlier quoted context omitted.

The latest Teams bug I've encountered is an inability to write a bulleted list with more than one bullet. Each newline splits the list into a new message. No combination of Shift/Ctrl/Alt + Enter worked. This changed, as in broke, around a week ago. At least for me, on Win 11. Edit: Just remembered another Teams bug from a few days ago: cut text from the middle of paragraph, paste it back in earlier in the same parag…

For me and my team CTRL+A randomly stops working for an hour. It happens every single day randomly for different members. Just mind-boggling BS every day with Teams. My Android client randomly signs me out, sometimes multiple times per day.

Here's my "it's not stupid if it works" fix (that doesn't involve restarting Teams). Click on any message in a chat, click CTRL- (or CMD-) A, and congrats, select all works again. Please don't read this as a defense of Teams -- I'm just another frustrated user.

Re: Microsoft Teams: 1 feature, 4 vulnerabilities

#150
post #58

Earlier quoted context omitted.

Exactly. For all my harsh criticism of both Microsoft and Google I wish them well: I want them to tidy up and become trustworthy. Because the alternative where China becomes world leading is actually worse. For all their warts Americans and American companies have done much good and gotten way more criticism for their faults compared to others. That doesn't however mean that they should get off the hook easily, only…

Quoted post unavailable.

I don't see how you got from my post to that conclusion. Did I forget a word or write something extremely unclear?
Post reply on HN