ms-teams-rce VS webapp-manager

Just adding this here for people who think Teams is secure: https://github.com/oskarsve/ms-teams-rce

So als Beispiel https://github.com/oskarsve/ms-teams-rce

> They tend to react with "either you can show us that this is a real danger or we'll ignore it".

This is a bit of a Catch-22 situation, as I get the feeling that proving the danger would often involve doing things that bounty programs specifically forbid, such as "Moving beyond “proof of concept” repro steps"[0]. That may be part of the reason why Microsoft got away with such a stingy response to the RCE vulnerability found in Teams by Oskars Vegeris.[1]

[0] https://www.microsoft.com/en-us/msrc/bounty-online-services?...

[1] https://github.com/oskarsve/ms-teams-rce/blob/main/README.md

There's another angle to this that was discussed on the Risky Business[0] podcast a while back, namely the security angle. As the recent Microsoft Team's vulnerability[1] illustrated, with many Electron apps any XSS vulnerability turns into RCE. Personally I am moving away from Slack, Discord, and other electron apps like them. The browser sandbox ensures that XSS is "only" XSS and doesn't turn into RCE as well.

0: https://www.risky.biz/

1: https://github.com/oskarsve/ms-teams-rce

I've noticed this too. 100% CPU usage, laptop temperature skyrockets and fans kick on whenever I'm on the ChatGPT website.

I believe I've found a solution. I'm on Linux Mint, I'm using Firefox. If I export chatGPT to a web app using Linux Mint's webapp-manager, the problem goes away. What's strange here is that this should be using same profile and version of Firefox as my actual browser. Maybe it's an extension causing an issue, but I only have ublock origin, tampermonkey, firefox translation which is an official addon, and multi-account container which is also an official addon.

https://github.com/linuxmint/webapp-manager

Surprised no one mentioned Linux Mint's Webapp Manager:

https://github.com/linuxmint/webapp-manager

Should be in more distros. Allows some basic tweaking of profiles and supports more than just Firefox (unfortunately not qutebrowser, though).

I can recommend webapp manager: https://github.com/linuxmint/webapp-manager

This program, as it runs in a browser tab, doesn't run exclusively on linux. Linux users, however, can play the game using Web App

You can see the implementation at: https://github.com/linuxmint/webapp-manager/blob/master/usr/lib/webapp-manager/common.py

This is something that I really struggled with some time ago, but I finally managed to solve. Try out WebApp Manager, it's a fork of ICE, a previous version which also worked. It takes care of everything, even the WM_CLASS attribute needed to associate different windows of each PWA together but separated from the browser window. This completely changed the way I use my PC, nowadays I have more PWAs opened that desktop programs.

Webapps are basically just shortcuts that launch the browser with no navigation bar - so it's possible to create them with something like https://github.com/linuxmint/webapp-manager