9/17/2023 0 Comments Skype online web browser![]() One particularly problematic issue allowed every website to trivially learn your identity if you were logged into your Microsoft account, affecting not merely Skype users but also users of Office 365 for example. Yet despite being essentially useless, the Skype extension remained a security and privacy risk. All of its functionality was broken, it being reduced to a bookmark for Skype for Web. What these users apparently didn’t realize the extension was unmaintained, with the latest release being more than four years old. At the time of writing more than nine million users still remain. The researcher provided further details in a technical blog post today (March 1):īack when I reported the issues, was listed in Chrome Web Store with more than 10 million users. So the website can read it out trivially”. However, he noted that “in a content script context, sessionStorage is no longer extension’s storage, it’s the website’s. Palant discovered that the user identifier was executed in the extension’s content script. RECOMMENDED Data study reveals predictors of supply chain attacks in NPM repositoriesĪccording to the researcher, the flaw resided in the extension’s identity-tracking functionality, which could determine if a user was logged into a Microsoft account. Usernames and profile images can be freely retrieved by Skype name.” “The extension leaks your Skype name to any website interested. “The privacy flaw is simple,” Palant told The Daily Swig. Microsoft has fixed a privacy bug in its Skype extension for Chrome that left millions of users at risk of having their account information leaked.Īfter turning his attention to the Skype-for-Chrome extension, which has nine million installs, security researcher Wladimir Palant discovered a “trivial” bug that allowed websites to ascertain information about user accounts that should typically be off-limits. While the above features were the key announcements Microsoft unveiled today regarding its Office suite, it also noted a few other, more minor tidbits in a blog post about the changes, including the release of a 40 percent smaller version of the Office for Android app with Android M support for Enterprise and compliance with Android for Work, alongside other tweaks as well as improvements to Visual Basic Editor for Office 2016 on Mac.Microsoft addresses issue at eleventh hour, as researcher publicly discloses ‘trivial’ privacy bug in browser plugin “Use Word, Excel, PowerPoint, OneNote, and Sway Online without needing Office installed,” the description on the Chrome Web Store reads. This is an interesting shot against Google and its rival Google Apps suite of productivity tools, as Microsoft is actually taking advantage of Google’s popular web browser and its extensibility as a way to connect users to its competing Office suite. The extension is able to access and launch files saved on OneDrive and OneDrive for Business, as well as documents stored on your computer. In addition, the company has introduced a web browser extension for Google Chrome users that lets you create or open files by clicking on a small Office icon placed in Chrome’s toolbar. That’s days away, however, so the wait should not be long now. Today, Microsoft is announcing Skype for Office Online, but notes that it will be available worldwide to anyone with a Microsoft account starting in November. ![]() The company last month introduced Skype for Business (previously Lync) into Office 2016 on the Windows desktop, at the time promising that a similar Office Online integration was planned for later this fall. The Skype integration is part of a continued rollout that sees Microsoft bundling its flagship communications app into its Office suite. Microsoft also rolled out a new Chrome browser extension, which makes it easier to quickly access or create new Office documents with a click on Chrome’s toolbar. In addition, Skype’s chat history will remain connected to the document, so you’ll be able to see where you left off after closing a file and later returning. ![]() With the integration, users will be able to see and chat with Skype contacts right from within their file, which Microsoft says will help teams better collaborate. Microsoft today announced its plans to extend the social features of Office by integrating Skype into Office Online, allowing users to communicate by voice and video chat within Word, Excel, PowerPoint and OneNote Online documents, as well as in.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |