Conversation

Notices

1. Embed this notice
   mhoye (mhoye@mastodon.social)'s status on Friday, 09-May-2025 01:13:46 JST mhoye

   https://www.pentestpartners.com/security-blog/exploiting-copilot-ai-for-sharepoint/

   Something to be aware of if you work in a Microsoft shop with security requirements: Copilot on Sharepoint will apparently allow ACL bypass without logging or alerting.

   You can just ask it for things.

   It looks like what's going on under the hood here is that Copilot introduces a new category of user account for their agents, who have expansive read permissions by default and Copilot doesn't know how to map what the agent _can_ read against user permissions.

   • Embed this notice
     Matthew Lyon (mattly@hachyderm.io)'s status on Friday, 09-May-2025 01:13:45 JST Matthew Lyon

     in reply to

     @mhoye permissions, schmerissions; the point of copilot is to be able to replace all your employees with a monthly subscription to copilot, and if you break a few eggs along the way, well

   • Embed this notice
     mhoye (mhoye@mastodon.social)'s status on Friday, 09-May-2025 01:13:46 JST mhoye

     in reply to

     Do we have subtractive models yet? This seems like a very difficult problem to solve unless you go straight to one-agent-model-per-employee with basically constant rebuilding.