In a groundbreaking discovery from the acclaimed ‘I’m Not Surprised’ Institute, Microsoft OneDrive’s File Picker has been caught with its digital pants down. Who knew that trying to upload that one poorly lit selfie would turn into an all-access buffet where the website du jour can feast on your entire cloud storage?
Thanks to the marvels of overly broad OAuth scopes, it’s like Microsoft said, ‘You want to share a photo? Have my entire existential existence while you’re at it!’ As the consent screens do their best impersonation of a magician’s distracting hand wave, users are left to wonder if they’ve granted access to their files or accidentally signed up for a lifetime supply of ‘data vulnerability’.
This latest episode in the saga of ‘What Could Go Wrong?’ has many wondering if the ‘File Picker’ was actually designed by someone with an unfulfilled dream to become a burglar. But fear not, because Microsoft assures us that this was all merely a feature, not a bug. After all, who needs encryption when you have unintended liberation of your data?
Leave a Reply