6 ms·

This means there might have been another side to this story: Zoom's change of heart might have been forced by Apple, not the public backlash. Apple: Hey, your

by m0dest 7y ago

This means there might have been another side to this story: Zoom's change of heart might have been forced by Apple, not the public backlash. Apple: Hey, your app poses a threat to macOS security. We're going to remove your server app with the built-in macOS anti-virus. Zoom: Oh crap. Okay, give us 2 sprints to release a new version that removes it. Apple: We're killing it in 48 hours. ... Zoom, after an all-nighter: HEyyy users, we have a patch for youu

deleted 7y ago
[deleted]
devin 7y ago
Wild speculation.
- dboreham 7y ago
  But highly plausible.
- vojta_letal 7y ago
  More like a good joke
- lhoff 7y ago
  Wouldn't say so. The who found the Vulnerability where at least talking to the people at chrome and firefox: Quote from there Blogpost (https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://medium.com/bugbountywriteup/zoom-zero-day-4-million-...) "Apr 10, 2019 — Vulnerability disclosed to Chromium security team. Apr 19, 2019 — Vulnerability disclosed to Mozilla FireFox security team." So, not entirely unrealistic that the other Browser manufacturer also got a notice.
deleted 7y ago
[deleted]
DickSmith 7y ago
I've been on the Catalina Beta since the week of WWDC, and Zoom hasnt worked for me until the update today. The loading modal would come up, but the app window would never open and I would have to force kill the app entirely, since I couldn't close the modal. I suspect that Apple had already closed the possibility of the loophole on Catalina, which is why it wasn't working. So I suspect they had probably noticed it weeks ago.
- futhey 7y ago
  I had the same experience on Catalina, couldn't launch. Explains why I couldn't reproduce the bug from the Medium article too. Uninstalled it before the update.
- dwaite 7y ago
  I believe the issues running Zoom were due to tightening of security in Catalina for screen capture.
dzhiurgis 7y ago
HN 2 hours since story broke: rm -rf ~/.zoomus
- PerryCox 7y ago
  That doesn't solve the problem because the webserver continues to run even if you have uninstalled Zoom. Source: https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://medium.com/bugbountywriteup/zoom-zero-day-4-million-...
  - mackey 7y ago
    Quote: "Then you can delete the ~/.zoomus directory to remove the web server application files."
    - snug 7y ago
      You'd still have to kill the pid

by m0dest 7y ago

deleted 7y ago

[deleted]

devin 7y ago

Wild speculation.

dboreham 7y ago
But highly plausible.
vojta_letal 7y ago
More like a good joke
lhoff 7y ago
Wouldn't say so. The who found the Vulnerability where at least talking to the people at chrome and firefox: Quote from there Blogpost (https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://medium.com/bugbountywriteup/zoom-zero-day-4-million-...) "Apr 10, 2019 — Vulnerability disclosed to Chromium security team. Apr 19, 2019 — Vulnerability disclosed to Mozilla FireFox security team." So, not entirely unrealistic that the other Browser manufacturer also got a notice.

deleted 7y ago

[deleted]

DickSmith 7y ago

I've been on the Catalina Beta since the week of WWDC, and Zoom hasnt worked for me until the update today. The loading modal would come up, but the app window would never open and I would have to force kill the app entirely, since I couldn't close the modal. I suspect that Apple had already closed the possibility of the loophole on Catalina, which is why it wasn't working. So I suspect they had probably noticed it weeks ago.

futhey 7y ago
I had the same experience on Catalina, couldn't launch. Explains why I couldn't reproduce the bug from the Medium article too. Uninstalled it before the update.
dwaite 7y ago
I believe the issues running Zoom were due to tightening of security in Catalina for screen capture.

dzhiurgis 7y ago

HN 2 hours since story broke: rm -rf ~/.zoomus

PerryCox 7y ago
That doesn't solve the problem because the webserver continues to run even if you have uninstalled Zoom. Source: https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://medium.com/bugbountywriteup/zoom-zero-day-4-million-...
- mackey 7y ago
  Quote: "Then you can delete the ~/.zoomus directory to remove the web server application files."
  - snug 7y ago
    You'd still have to kill the pid