Microsoft’s OneDrive Overreach: Is Your Data at Risk?
Microsoft OneDrive’s File Picker is giving apps like ChatGPT and Slack a bit too much love by granting them access to everything instead of just the files you choose. It’s like inviting someone for tea and finding them rummaging through your closet! Check which third-party apps are snooping around your Microsoft account.
Hot Take:
Microsoft’s OneDrive is like that one friend who borrows a single book but reads your entire library. And just like that friend, it needs a lesson in boundaries!
Key Points:
- OneDrive File Picker grants overly broad permissions when connecting with web applications.
- OAuth scopes in OneDrive are not as fine-tuned as those in Google Drive or Dropbox.
- Older versions of OneDrive File Picker had insecure token storage issues.
- Millions of users potentially affected by over-permissioning risks.
- Users and companies encouraged to monitor app permissions and secure tokens.
Already a member? Log in here