Total Downloads

2,583,687

Total Files

9,206

Latest Update

10

Study: Teams and Slack are Platforms, Need App Store-Like Controls

Posted September 26, 2022 | Microsoft 365 | Microsoft Teams | Privacy | Security | Slack | Windows


A new study claims that Microsoft Teams and Slack are basically operating systems, and yet they’re each missing a core piece of functionality: the privacy and security controls provided by mobile app stores.

The study, conducted by researchers at the University of Wisconsin-Madison, describes Teams and Slack as Business Collaboration Platforms (BCPs) that exceed the capabilities of typical apps and services by offering extensibility models by which developers can write apps that run within these BCPs and greatly expand their functionality.

“It is vital to understand the security and privacy properties of this emerging class of distributed multi-user collaboration platforms,” the study explains. “Although there is work on understanding the operational security issues of BCPs, to our knowledge, no work has examined the third-party app model.”

The study focuses on Slack and Microsoft Teams because they are the two most widely-used BCPs and have mature app ecosystems, but it notes that any security findings might apply to other BCPs as well. And the findings are not confidence-inspiring.

“Some of the design choices exacerbate the security and privacy concerns: all-or-nothing permissions that disallow selective toggling of permissions; [an] imperceptible installation that reduces the chances for users to notice what kinds of apps are installed and also prevents any workspace-wide consent mechanisms; and pure server-side implementation that prevents BCPs or other entities from inspecting the app’s behavior through traditional tools like static or dynamic analysis,” the study explains.

In a conversation with Wired—which is how I discovered this study—one of the researchers noted that malicious Teams and Slack apps could post messages as a user, hijack the functionality of other apps, or even bypass permissions to access private content. “Compared to [the app stores on] iOS or Android, I would say their security model is at least five to six years behind,” one researcher said.

The researchers have contacted Microsoft and Slack with their findings and while both confirmed that the attack techniques they describe are possible, both companies told them that they didn’t “meet their definitions of a security vulnerability,” because they require deceiving users into installing a malicious app. But that’s sort of the problem: it’s the job of the platform to protect users from malicious apps. Microsoft and Slack seem to be putting this responsibility on IT administrators here.

Tagged with , , ,



Source link

  • vans shoes
  • kyrie 4
  • lebron james shoes
  • kyrie irving shoes
  • puma fenty
  • lebron soldier 11
  • asics shoes
  • stephen curry shoes
  • pg shoes
  • puma fenty slides
  • lebron 14
  • kyrie 4
  • puma rihanna creepers
  • nmd human race
  • curry shoes
  • yeezy shoes
  • adidas nmd
  • lebron soldier 10
  • puma fenty
  • lebron soldier
  • lebron 15
  • kyrie 4
  • kd shoes
  • nike vapormax
  • stephen curry shoes
  • kyrie 4
  • kyrie 1
  • curry shoes
  • kyrie 2
  • adidas nmd shoes
  • stephen curry shoes
  • john wall shoes
  • http://www.kyrie4.us.com
  • adidas yeezy boost
  • yeezy boost
  • nike pg 2
  • kyrie irving shoes
  • adidas john wall
  • yeezy boost
  • j wall shoes
  • http://www.asicsshoes.us.com
  • curry 3 shoes
  • kyrie irving jersey
  • curry 3
  • kd 9
  • kd shoes
  • Kevin Durant shoes
  • http://www.kd-9.org
  • yeezy boost 350 v2
  • kd shoes
  • Curry 3
  • Curry 1
  • kevin durant shoes
  • yeezy boost
  • adidas nmd Runner
  • adidas nmd r1
  • kobe 10
  • adidas crazy explosive
  • air max 90
  • kobe 10 shoes
  • adidas nmd xr1
  • kobe shoes
  • curry one
  • kyrie irving shoes
  • adidas nmd
  • vans outlet
  • vans for sale
  • Curry 3
  • yeezy 350 boost
  • kobe bryant shoes
  • lebron soldier
  • under armour shoes
  • http://www.kyrie4.com
  • nike lebron soldier
  • adidas tubular instinct
  • vibram
  • vibram fivefingers
  • adidas tubular instinct boost
  • adidas ultra boost
  • adidas tubular
  • lebron soldier shoes
  • kids shoes
  • air jordan shoes
  • air max shoes
  • air force 1
  • nike air max
  • air max nike
  • lebron soldier shoes
  • soldier shoes
  • air max 90
  • air max 95
  • adidas nmd human race
  • nmd human race
  • kyrie 4
  • kobe 11
  • Curry One
  • Kobe Shoes
  • harden shoes
  • kobe 11 shoes
  • Curry 2
  • Harden 1
  • Curry 2
  • James Harden Shoes
  • lebron soldier
  • nike epic react
  • nike kyrie flytrap
  • nike epic react flyknit
  • lebron 10 soldier
  • nike lebron soldier
  • Curry Shoes 2015
  • Harden 1 Shoes
  • James Harden Shoes
  • Harden Shoes
  • James Harden 1
  • Under Armour Curry Shoes
  • kobe x
  • Kobe 10
  • Cheap Harden 1
  • kobe bryant shoes
  • kobe shoes
  • Lebron James Shoes
  • Cheap Curry Shoes
  • yeezy 950
  • Curry One Mvp
  • Nike Harden Shoes
  • Nike Kobe Shoes
  • Harden Shoes
  • Under Armour Store
  • Curry 2 Shoes
  • Curry Shoes
  • curry 1
  • curry 5
  • http://www.curry-5.us
  • Stephen Curry Shoes
  • Under Armour curry one
  • James Harden Shoes
  • stephen curry shoes
  • Steph Curry 1
  • Stephen Curry Shoes
  • kobe basketball Shoes
  • Nike Harden Shoes
  • fila shoes
  • fila
  • Nike James Harden Shoes
  • Harden Shoes For sale
  • Harden Shoes Sale
  • yeezy boost
  • new balance shoes
  • kanye west shoes
  • http://www.yeezyshoes.us.com
  • kobe x shoes
  • kd 8
  • adidas nmd xr1
  • balenciaga triple s
  • adidas yeezy boost
  • balenciaga triple s Shoes
  • adidas nmd r1
  • adidas yeezy outlet
  • adidas nmd
  • adidas nmd runner
  • adidas nmd pk
  • adidas nmd footlocker
  • adidas nmd r1 primeknit
  • new era caps
  • kobe bryant shoes
  • lebron soldier 11
  • kobe shoes
  • kyrie 3
  • nike kyrie 3
  • kyrie 3 shoes
  • air max shoes
  • yeezy boost
  • nike air max shoes
  • nike air max
  • kevin durant shoes
  • kd vii
  • kd 7
  • curry 3
  • curry 3 shoes
  • ua curry 3
  • curry 3 low
  • kyrie 3
  • adidas porsche shoes
  • adidas porsche design shoes
  • lebron james shoes
  • kobe shoes 2015
  • nike air shoes
  • nike air max shoes
  • kyrie 3
  • kyrie 3 shoes
  • nike kyire 3
  • cheap air max shoes
  • air max shoes
  • kd vii shoes
  • kd shoes
  • kevin durant shoes
  • adidas zx flux
  • adidas zx
  • jordan retro
  • nike soccer cleats
  • adidas tubular
  • adidas flux
  • cheap kd shoes
  • adidas ultra boost
  • kobe shoes nba
  • palladium boots
  • lebron soldier 10
  • air jordan 32
  • lebron soldier
  • lebron soldier shoes
  • kd 11
  • nike lebron soldier
  • air jordan retro/a>
  • cheap kobe shoes
  • soldier 10
  • adidas ultra boost shoes
  • adidas ultra boost
  • kevin durant shoes
  • kobe bryant shoes
  • jordan retro shoes
  • hyperdunk 2017
  • kd 7 shoes
  • porsche design shoes
  • curry 5
  • adidas porsche design
  • adidas shoes
  • kevin bryant shoes
  • kd shoes store
  • kd 7
  • Cristiano Ronaldo CR7
  • herve leger dresses
  • kobe shoes
  • curry 5 shoes
  • anello backpack
  • kobe bryant shoes
  • kd shoes
  • lebron shoes
  • kd sneaker
  • http://www.curry-5.com
  • adidas alphabounce
  • adidas boost
  • adidas d rose 7
  • jeremy scott adidas
  • nike sb dunk
  • jeremy scott wings
  • Nike CR7
  • jeremy scott shoes
  • js wings
  • lebron shoes
  • kobe shoes
  • balenciaga shoes
  • kobe bryant shoes
  • kyrie irving shoes
  • nike epic react flyknit
  • nike epic react
  • asics gel kayano 23
  • http://www.kyrie3.com
  • canada goose
  • lebron james shoes
  • asics gel kayano 22
  • Nike Lebron James Shoes
  • lebron soldier 12
  • Lebron James Shoes
  • asics gel lyte iii
  • adidas eqt
  • kd 10
  • nike kd 10
  • kyrie 3
  • adidas nmd womens
  • keen uneek sandals
  • prada shoes
  • air jordan 31
  • nike air poresto
  • nike air vapormax
  • nike huarache
  • nike vapormax shoes
  • nike mercurial
  • stephen curry shoes
  • kyrie irving shoes
  • kyrie irving basketball shoes
  • reebok pump fury
  • reebok pump superme
  • air max 270
  • kevin durant jersey
  • adidas iniki
  • adidas porsche design
  • lebron shoes
  • http://www.lebron-shoes.us
  • adidas porsche
  • wholesale hats
  • nike air more uptempo
  • kobe bryant jersey
  • wholesale caps
  • curry 5
  • http://www.curry-5.us
  • adidas superstar
  • curry 4
  • curry 4
  • kd 10
  • air max 270
  • Nike Pegasus 35
  • nike air max 270
  • adidas deerupt
  • supreme yeezys
  • nike kd 10
  • kevin durant 10
  • nike epic react
  • birkenstock sandals
  • nike epic react flyknit
  • nike kids shoes
  • adidas pure boost
  • lebron james shoes
  • calvin klein underwear
  • curry 4
  • birkenstock sandals
  • http://www.kyrie-4.com
  • curry 4 footlocker
  • http://www.birkenstocksandals.us.com
  • nmd r1
  • harden vol 2
  • stephen curry jersey
  • kobe shoes
  • nike roshe run
  • curry 4 shoes
  • new balance running shoes
  • ecco
  • childrens shoes
  • boys shoes
  • girls shoes
  • ecco Shoes
  • asics gel kayano 24
  • puma suede
  • kyrie 4 confetti
  • nike zoom vaporfly
  • birkenstock
  • mizuno shoes
  • ultra boost shoes
  • adidas clothing