Re: OneDrive for Business "feature"

[Marden Paul <marden.paul () UTORONTO CA>]

There is also supposed to be a feature rolled out that permits the creation of a password for the ANYONE link type.

https://office-watch.com/2018/password-file-sharing-links-onedrive/

[https://office-watch.com/fredagg/uploads/password-protected-file-sharing-links-with-onedrive-microsoft-office-19037.png]<https://office-watch.com/2018/password-file-sharing-links-onedrive/>

Password Protected file sharing links with OneDrive 
...<https://office-watch.com/2018/password-file-sharing-links-onedrive/>
office-watch.com
An overdue and very welcome addition to OneDrive for Office 365 customers is password protected …

This has not rolled out the Canadian GEO yet, but may be available elsewhere.


Marden


Marden D. Paul

Director Planning Governance Assessment & Communication

Office of the CIO

27 King's College Circle

University of Toronto

P: 416.946.0440

C: 416.578.0615

T: Mardster

W: http://its.utoronto.ca


________________________________
From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Michael Schalip 
<MSchalip () SALUD UNM EDU>
Sent: 27 August 2018 13:03
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] OneDrive for Business "feature"


I’m not sure that’s going to qualify as a “bug”.  That capability has been available in O365/OneDrive for quite some 
time now.  However – I believe there are ways to control that behavior through the central console….



M



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Menne, 
Michael S
Sent: Monday, August 27, 2018 10:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] OneDrive for Business "feature"



[[-- External - This message has been sent from outside the University --]]



FYI … I just stumbled across a wonderful “helpful feature” in Office 365 OneDrive for Business.



Right click on a file in the web interface and select “Copy Link.” Voila, that file has now been shared with anyone 
that can discover the link.  Unless you explicitly remove the link or change the sharing properties of the link, it has 
now been shared with the world.  I submitted a Service Request to Microsoft on this as a bug report.



Michael Menne, CISSP

Chief Information Security Officer

IT Solutions Information Security

Minnesota State University, Mankato

Phone:  (507) 389-5705

www.mnsu.edu/its/security



[cid:image001.png@01D341A0.236300E0]



Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended 
recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and 
destroy all copies of the original message.