Educause Security Discussion mailing list archives

OneDrive for Business "feature"


From: "Menne, Michael S" <michael.menne () MNSU EDU>
Date: Mon, 27 Aug 2018 16:53:15 +0000

FYI ... I just stumbled across a wonderful "helpful feature" in Office 365 OneDrive for Business.

Right click on a file in the web interface and select "Copy Link." Voila, that file has now been shared with anyone 
that can discover the link.  Unless you explicitly remove the link or change the sharing properties of the link, it has 
now been shared with the world.  I submitted a Service Request to Microsoft on this as a bug report.

Michael Menne, CISSP
Chief Information Security Officer
IT Solutions Information Security
Minnesota State University, Mankato
Phone:  (507) 389-5705
www.mnsu.edu/its/security<applewebdata://E5E98DA9-AEBC-4104-AA47-742D8C5F4644/www.mnsu.edu/its/security>

[cid:image001.png@01D341A0.236300E0]

Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.




Current thread: