Spoofing messages in Teams via a browser

[Ex-MGSTech]

Anyone want to confirm this please (Works for me)

 

Open Teams in a browser

 

Find a previous chat session with anyone

 

Press F12

 

Search for one of their previous messages (Ctrl+F) (MAY BE MORE THAN ONE OCCURANCE)

 

double click to replace the text in the search window with ANYTHING you like

 

Press F12 to close the window

 

Screenshot the page

 

Submit as evidence of inappropriate comments from a member of staff to a pupil?

 

This only changes at your end not the text in the server copy as if your refresh it returns to normal....

 

Anyone know if F12 can be denied to students in all browsers? (this was in Chrome)

Edited July 1, 2021 by Ex-MGSTech

[TechMonkey]

Google Chrome GPO has "Disable Developer Tools". But it would be very easy to prove incorrect as the audit will show what was actually shown. Effectively this is the same as taking a screen shot, editing new text in and claiming whatever.

 

EDIT: Similar in the Edge GPO but it is called "Control where developer tools can be used"

Edited July 1, 2021 by TechMonkey
Added Edge option

[SteveM555]

Editing the HTML of the page you can insert anything, link to video, text, images.. But all of this would be verifiable and logged in the Office 365 Admin center when you run a 'Content Search' from the compliance section.

 

https://docs.microsoft.com/en-us/microsoftteams/content-search

[mavhc]

Or just edit the screenshot in a bitmap editor

[Ex-MGSTech]

All true and of course pretty much anything cab be photoshopped!

[ITGURU]

Our students used to 'edit' the Argos site products and find it funny!