4 ms·

I don't see anything wrongs here, you investigate the script and it just an installer. Did you even look at nvidia-installer? Why no one talks on that crap? So

I don't see anything wrongs here, you investigate the script and it just an installer. Did you even look at nvidia-installer? Why no one talks on that crap? So much hate on Zoom... I hate that too, I was at meeting yesterday and my interentet got disconnected and couldn't get back but even after reconnecting there was an audio issue.

t0mas88 7y ago
What's wrong here is that Zoom hacked together an installer against all normal structure that Apple recommends. And that installed includes a very stupidly designed component that will try to run whatever you ask it with admin privileges. This is yet another indication that nobody at Zoom has a single clue on how to build a secure and stable application. Another example of that mindset released today: https://www.theverge.com/2020/3/31/21201956/zoom-leak-user-information-email-addresses-photos-contacts-directory https://www.theverge.com/2020/3/31/21201956/zoom-leak-user-i... They are proving to completely not understand how to design security/privacy features. Frankly, their technology team sounds like total amateurs that hack things together.
- oefrha 7y ago
  “Total amateurs hacking things together” somehow managed to ship something functionally better than products from mature shops like MSFT that mean serious business. The irony there.
  - dsr_ 7y ago
    It has long been the legendary case that Microsoft takes three major versions to get a usable product, then encrusts it with ornamental features until it has trouble breathing around version 7 or 8.
  - valuearb 7y ago
    It's more like they gained better ease of use by bending platform rules, to the detriment of security.
    - oefrha 7y ago
      I highly doubt Zoom’s video conferencing solution was solidly working while MS Teams crumbled under load two weeks ago is due to magic in Zoom’s macOS installer.
      - valuearb 7y ago
        Wasn't talking about infrastructure, was talking about the ease of use that led to large market share. Zoom broke lots of platform rules to perform that trick.
- shadowtree 7y ago
  Market Cap of 38bn USD, based on a single product that entered a settled and crowded market. Public, profitable, founder was Head Engineer for Cisco WebEx. Runs global videoconferencing under massive new load during Covid-19, on their own servers. HN comment: "total amateurs". Love this place.
  - oefrha 7y ago
    Better start getting used to it if you haven’t already.
CJefferson 7y ago
Did you look at the tweet? The installer lets anyone run any script as root. That seems fairly bad.
- opencl 7y ago
  It lets anyone with an admin account run any scripts as root. No privilege escalation here, it's basically a gatekeeper bypass.
viraptor 7y ago
> Did you even look at nvidia-installer? You're free to analyse it and publish your findings. That's not making zoom any better.

t0mas88 7y ago

What's wrong here is that Zoom hacked together an installer against all normal structure that Apple recommends. And that installed includes a very stupidly designed component that will try to run whatever you ask it with admin privileges. This is yet another indication that nobody at Zoom has a single clue on how to build a secure and stable application. Another example of that mindset released today: https://www.theverge.com/2020/3/31/21201956/zoom-leak-user-information-email-addresses-photos-contacts-directory https://www.theverge.com/2020/3/31/21201956/zoom-leak-user-i... They are proving to completely not understand how to design security/privacy features. Frankly, their technology team sounds like total amateurs that hack things together.

oefrha 7y ago
“Total amateurs hacking things together” somehow managed to ship something functionally better than products from mature shops like MSFT that mean serious business. The irony there.
- dsr_ 7y ago
  It has long been the legendary case that Microsoft takes three major versions to get a usable product, then encrusts it with ornamental features until it has trouble breathing around version 7 or 8.
- valuearb 7y ago
  It's more like they gained better ease of use by bending platform rules, to the detriment of security.
  - oefrha 7y ago
    I highly doubt Zoom’s video conferencing solution was solidly working while MS Teams crumbled under load two weeks ago is due to magic in Zoom’s macOS installer.
    - valuearb 7y ago
      Wasn't talking about infrastructure, was talking about the ease of use that led to large market share. Zoom broke lots of platform rules to perform that trick.
shadowtree 7y ago
Market Cap of 38bn USD, based on a single product that entered a settled and crowded market. Public, profitable, founder was Head Engineer for Cisco WebEx. Runs global videoconferencing under massive new load during Covid-19, on their own servers. HN comment: "total amateurs". Love this place.
- oefrha 7y ago
  Better start getting used to it if you haven’t already.

CJefferson 7y ago

Did you look at the tweet? The installer lets anyone run any script as root. That seems fairly bad.

opencl 7y ago
It lets anyone with an admin account run any scripts as root. No privilege escalation here, it's basically a gatekeeper bypass.

viraptor 7y ago

> Did you even look at nvidia-installer? You're free to analyse it and publish your findings. That's not making zoom any better.