Live data from Hacker News

Ask HN: Why does Zoom Desktop examine all processes and arguments?

news.ycombinator.com

221–230 of 277 posts

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#221

Earlier quoted context omitted.

I thought this thread was full of sarcasm and then I see the links. I should have known better. I am glad this is getting posted because we need reminders of the reality we live in

Yes there are reasons besides conflicts with US law and they not having German Servers which makes it completely GDPR in-compliant and de-facto legal unusable in the EU. (Not that anyone seem to care.)

[deleted]

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#222

Earlier quoted context omitted.

I don't understand why anyone who is forced to use it doesn't use it in a browser (I have a separate Firefox container for that, same for Teams).

The people here who are saying "Teams and Meet are just as good" are the people who use Zoom in a browser. The audio and video quality, and resilience to poor connections, is much better in the desktop app.

All the times I've used Zoom on browser the recent year didn't have any problem.

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#223
post #216

Earlier quoted context omitted.

Because it's a legitimate behaviour. htop needs to do this, it's literally its main feature. You can use hidepid=2 to prevent users from seeing other user's processes list.[1] But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes. The issue here is closed source software with no way to inspect wha…

> But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes. Why would it be every time? Say yes once to htop, no to Zoom. Sort of like Android/iOS permissions. Or just require root. No way I'd give it to Zoom, htop maybe.

The issue is that the model on Linux is different. As opposed to walled gardens, the assumption is that applications are cooperative, therefore there is no need for such "authorization systems".

The security model on Linux is based on blacklist, with solutions like firejail.

Also, what's the points of these nags? Most people will just say "OK" anyway because they want to access the features they were promised.

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#224
post #80

Earlier quoted context omitted.

Or just run it in a browser...

Can you run it in a browser without an account?

If the meeting is open (join by invite link), yes. It's basically how Zoombombing happens.

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#225
post #216

Earlier quoted context omitted.

> But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes. Why would it be every time? Say yes once to htop, no to Zoom. Sort of like Android/iOS permissions. Or just require root. No way I'd give it to Zoom, htop maybe.

The issue is that the model on Linux is different. As opposed to walled gardens, the assumption is that applications are cooperative, therefore there is no need for such "authorization systems". The security model on Linux is based on blacklist, with solutions like firejail. Also, what's the points of these nags? Most people will just say "OK" anyway because they want to access the features they were promised.

The issue is that this model heralds from the 60s when such problems weren't even considered.

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#226
post #154

Earlier quoted context omitted.

Hmmm... maybe Zoom devs too use Stack Overflow? https://stackoverflow.com/questions/3376679/qt-how-to-detect...

God damn it, why do terrible SO suggestions find themselves in every application?

Because there are no "good" suggestions? (or they are harder to find, lack documentation, etc.)

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#228
post #129

Perhaps a better question to ask would be "why is any process allowed to do this by default in 2021?"

Because you're not supposed to be downloading random binaries from the internet and running them like some toddler on Windows or OSX would.

STOP DOING THAT.

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#229

Earlier quoted context omitted.

The issue is that the model on Linux is different. As opposed to walled gardens, the assumption is that applications are cooperative, therefore there is no need for such "authorization systems". The security model on Linux is based on blacklist, with solutions like firejail. Also, what's the points of these nags? Most people will just say "OK" anyway because they want to access the features they were promised.

The issue is that this model heralds from the 60s when such problems weren't even considered.

That is a way to see it.

I see it differently, for me the main issue is the fact that people run random software that were not even vetted.

If you dnf/apt install everything from the official repos of your distro, you wont have any misbehaving apps. And that model still holds.

And as I explained, other security models don't work either. People will just whitelist the app, or click "Accept" anyway, because they want the feature now! What's the point of nagging with a modal window "your random app, that you installed from a random website on the internet, which means you really want to use this specific app, is behaving in a shady manner, are you okay with this?"

Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?

#230
post #136

It not only examines all processes and arguments - it leverages the microphone to act on ultrasonic cues for "integrations". Zoom is a privacy dumpster fire. https://devforum.zoom.us/t/ultrasonic-connection/3318

Calm your tinfoil hat, this is a common feature in meeting software, has been around forever in Webex https://help.webex.com/en-us/WBX000028256/Troubleshooting-We...

Its okay to do this as long as webex/zoom explicitly mentions it when you join a meeting.
Post reply on HN