Security Issue: Teams allows to bypass familiy web access restrictions

C

Carsten BjørnKeil

I set up a restricted Windows 10 familiy member account. With this account it is impossible to access youtube.com (and other webites). This works if you try to access the site directly with egde: any attempt is blocked by the Windows family feature and reported with a corresponding sdx.microsoft.com/family/restricted-web entry.


BUT if you press on a youtube link posted in a teams chat, it branches off in a new Edge tab and opens youtube within it: This tab is now alleviated, it is NOT blocked by the Windows familiy feature, NOT even reported in the family log files. It seems that this open-youtube-via-link-in-teams tunnels the Windows family firewall.


This sounds like a serious security breach to me and exposes a supposedly protected kid behind the windows family firewall to any undesired exposure out there.


How do i prevent that a user can tunnel the windows familiy firewall with this teams-link-hack? any help appreciated.


NB1: i am not the teams administrator, so can not block posting / accessing youtube links (from) within teams.

NB2: Brutal blocking of accessing youtube via the hosts file or norton familiy works but i really would prefer to work using only the windows family safeguard.

Continue reading...
 

Similar threads

Y
Replies
0
Views
154
Yusuf Mehdi
Y
P
Replies
0
Views
193
Panos Panay, Chief Product Officer
P
Y
Replies
0
Views
150
Yusuf Mehdi, Corporate Vice President &#38
Y
S
Replies
0
Views
100
shdelair
S
Back
Top Bottom