Earlier quoted context omitted.
I thought this thread was full of sarcasm and then I see the links. I should have known better. I am glad this is getting posted because we need reminders of the reality we live in
Yes there are reasons besides conflicts with US law and they not having German Servers which makes it completely GDPR in-compliant and de-facto legal unusable in the EU. (Not that anyone seem to care.)
Ask HN: Why does Zoom Desktop examine all processes and arguments?
221–230 of 277 posts
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#222Earlier quoted context omitted.
I don't understand why anyone who is forced to use it doesn't use it in a browser (I have a separate Firefox container for that, same for Teams).
The people here who are saying "Teams and Meet are just as good" are the people who use Zoom in a browser. The audio and video quality, and resilience to poor connections, is much better in the desktop app.
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#223Earlier quoted context omitted.
Because it's a legitimate behaviour. htop needs to do this, it's literally its main feature. You can use hidepid=2 to prevent users from seeing other user's processes list.[1] But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes. The issue here is closed source software with no way to inspect wha…
> But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes. Why would it be every time? Say yes once to htop, no to Zoom. Sort of like Android/iOS permissions. Or just require root. No way I'd give it to Zoom, htop maybe.
The security model on Linux is based on blacklist, with solutions like firejail.
Also, what's the points of these nags? Most people will just say "OK" anyway because they want to access the features they were promised.
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#224Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#225Earlier quoted context omitted.
> But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes. Why would it be every time? Say yes once to htop, no to Zoom. Sort of like Android/iOS permissions. Or just require root. No way I'd give it to Zoom, htop maybe.
The issue is that the model on Linux is different. As opposed to walled gardens, the assumption is that applications are cooperative, therefore there is no need for such "authorization systems". The security model on Linux is based on blacklist, with solutions like firejail. Also, what's the points of these nags? Most people will just say "OK" anyway because they want to access the features they were promised.
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#226Earlier quoted context omitted.
Hmmm... maybe Zoom devs too use Stack Overflow? https://stackoverflow.com/questions/3376679/qt-how-to-detect...
God damn it, why do terrible SO suggestions find themselves in every application?
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#227Stop using non-free software if you're doing anything important on that machine.
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#228Perhaps a better question to ask would be "why is any process allowed to do this by default in 2021?"
STOP DOING THAT.
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#229Earlier quoted context omitted.
The issue is that the model on Linux is different. As opposed to walled gardens, the assumption is that applications are cooperative, therefore there is no need for such "authorization systems". The security model on Linux is based on blacklist, with solutions like firejail. Also, what's the points of these nags? Most people will just say "OK" anyway because they want to access the features they were promised.
The issue is that this model heralds from the 60s when such problems weren't even considered.
I see it differently, for me the main issue is the fact that people run random software that were not even vetted.
If you dnf/apt install everything from the official repos of your distro, you wont have any misbehaving apps. And that model still holds.
And as I explained, other security models don't work either. People will just whitelist the app, or click "Accept" anyway, because they want the feature now! What's the point of nagging with a modal window "your random app, that you installed from a random website on the internet, which means you really want to use this specific app, is behaving in a shady manner, are you okay with this?"
Re: Ask HN: Why does Zoom Desktop examine all processes and arguments?
#230It not only examines all processes and arguments - it leverages the microphone to act on ultrasonic cues for "integrations". Zoom is a privacy dumpster fire. https://devforum.zoom.us/t/ultrasonic-connection/3318
Calm your tinfoil hat, this is a common feature in meeting software, has been around forever in Webex https://help.webex.com/en-us/WBX000028256/Troubleshooting-We...