This could be related to a new user setting which was delivered recently in Chrome and Edge updates where the default is to allow websites to access your local filesystem.
Has this already been the unseen default up until recently? That would seem like quite an anti-privacy default and I could imagine that security people would not all have been in favor of it happening without any notification at least. But maybe could have been going on for a while anyway?
Seems like the article is complaining if the default in his setup tools no longer allowed local access by default (without permission) any more, and the collateral damage from that reduced attack surface caught him by surprise. With this in mind maybe notification alone may turn out to be the only resultant hardening of the system but for me things like OneNote are just plain not worth it.
fuzzfactor•1h ago
Has this already been the unseen default up until recently? That would seem like quite an anti-privacy default and I could imagine that security people would not all have been in favor of it happening without any notification at least. But maybe could have been going on for a while anyway?
Seems like the article is complaining if the default in his setup tools no longer allowed local access by default (without permission) any more, and the collateral damage from that reduced attack surface caught him by surprise. With this in mind maybe notification alone may turn out to be the only resultant hardening of the system but for me things like OneNote are just plain not worth it.