

When explained in detail you can add ToDo’s to people accounts and it could be used to spam customers, or worse – assist exploiting them! they stood firm in their judgement. The issue was passed to the MSRC with a hapless reply of:
#Wunderlist ifttt full
Wunderlist received full disclosure of this issue and deny this is a problem. The ‘MaliciousFile’ was added to a Wunderlist users account whilst unauthenticated So now the victim’s malware can be selected * Important and flagged accordingly. You can also expand on the features by adding items to the subject line of the email. How about uploading some malicious PDFs to the victim’s to-do list? Off course you can, just attach to the email. You can send an email to ‘ ’ from and it will forward a to-do to the account that uses If you want to interact with this account you could just spoof the email address ‘ ’ and send your emails to Let’s take a look at a few examples, Wunderlist. Many online services have a feature whereby you can email the service and it will perform an action. Don’t click on the link, check the sender, check for legitimacy etc but we recently discovered these phishing basics can also have quite a bit of damage when it comes to online accounts. In testing and teaching phishing to organisations, the same things get repeated. Otherwise, the haters will have a reason to hate.So it turns out us humans aren’t the only ones with a few flaws when it comes to an inbound phishing email! Often uttered from the crowds at every infosec event is the dreaded cliché statement, “Well, humans are the weakest links in security” but not today, stand proud as we take the time to shame our binary companions. My only hope is that they realize how this looks and make a concerted effort to add back the great features that made Wunderlist a wonder before that app’s end of life. That have some outstanding product offerings (Office 365 and Azure being two of them) and have shown they can be as innovative as any SoMa startup. Over the past few years, Microsoft has regained the confidence of the market, both consumers and professionals. Why not just rebrand the great product that Microsoft spent good money on and keep adding features, especially features attractive to small businesses? Why indeed… To-Do looks enough like Wunderlist that it’s safe to assume there some Wunderlist DNA in there. They take a perfectly wonderful product, lobotomize it, and make that the standard product. And this is why people sometimes hate Microsoft. The great but similar product will go away in favor of the native Microsoft product with fewer features and more limited ecosystem. So why bother with To-Do at all? Because Microsoft just announced they will demise Wunderlist that’s why. While Todoist is a perfectly serviceable task list program, there are many others out their that work as well and have more market share. Wunderlist makes sense – it’s a Microsoft product after all – but why Todoist and only Todoist. The app also has a convenient import tool that will bring Wunderlist and Todoist tasks into To-Do. Unlike Wunderlist, it doesn’t place tasks on your Outlook calendar so you can see them on the Outlook mobile app. To-Do does support integration with the Outlook task manager because… it really should. At present there is no OneDrive or Flow or similar connections to other Microsoft products. It is not, however, too much to expect at least integration with Microsoft’s own Office 365 ecosystem. One wouldn’t expect there to be Dropbox, IFTTT, or Zapier integration just yet – though Wunderlist has these. Instead, you have to manually add tasks to the My Day list.ĭespite being a native Microsoft product, the ecosystem is still a bit thin. Besides the unimaginative name, To-Do also doesn’t (yet?) support subtasks or smart lists even though Wunderlist already does. With a few small exceptions that aren’t really all that small. It is in many ways just like Microsoft’s other talk manager, Wunderlist. Microsoft has announced that it has a new task management app called To-Do.
