3 ms·

Why is it malware?

• Nullabillity 7y ago
  RCE vulnerabilities, joins rooms without consent, tries very hard to persist beyond uninstalls. And their security attitude mirrors SCdF's: Your company forces you to use us, fuck you.
  • DyslexicAtheist 7y ago
    let me expand (copy pasta from my comment on sibling post[0]): this isn't the first time zoom got caught red-handed[1]. Last year they were called out for installing a local web server in order to disable security controls to get around the deprecated NPAPI[2] ... this is _literally_ what malware does. Seriously fuck zoom! [0] https://news.ycombinator.com/item?id=22658173 https://news.ycombinator.com/item?id=22658173 [1] https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://medium.com/bugbountywriteup/zoom-zero-day-4-million-... [2] https://en.wikipedia.org/wiki/NPAPI https://en.wikipedia.org/wiki/NPAPI