31–40 of 473 posts
Sooo... this is still vulnerable?!
Yes. Try this link from the article to see it in action if you have (or had) Zoom installed: https://jlleitschuh.org/zoom_vulnerability_poc/ WARNING, this will open a video chat with random strangers, and will turn your webcam on. Consider yourself warned!
Amusingly enough, this actually exists as a product:
https://en.wikipedia.org/wiki/Omegle
(Edit: just noticed it's already been around for over 10 years. That's rather amazing.)
Note: "Zoom" is a videoconfrerencing app, not a built-in Mac OS accessibility feature for "zoom". The article does not clearly state this, ceding a plain English word to a corporation, enabling a takeover of human language. P.S.: This part > Apr 26, 2019 — Video call with Mozilla and Zoom Security Teams is funny, and would be way funnier if it was an non-consensual video call. Finally, note that Zoom effectively does…
The English language can handle it:
proper noun
- A noun belonging to the class of words used as names for unique individuals, events, or places.
- A noun denoting a particular person, place, organization, ship, animal, event, or other individual entity.
- A noun that denotes a particular thing; usually capitalized
Follow on: What are they talking about regarding custom url handlers? That’s a standard OS X feature...
Earlier quoted context omitted.
What if you have uninstalled Zoom? It seems that it leaves a web server on your machine that will re-install Zoom if it receives a request to join a meeting.
Really? That’s nuts. Makes you appreciate the iOS app model a bit more. Everything sandboxed, delete an app and all traces of it are gone.
> This vulnerability leverages the amazingly simple Zoom feature where you can just send anyone a meeting link (for example https://zoom.us/j/492468757 ) and when they open that link in their browser their Zoom client is magically opened on their local machine. I was curious about how this amazing bit of functionality was implemented and how it had been implemented securely. Come to find out, it really hadn’t been im…
Their answer was to send people to a URL they controlled and brought you through the install process as easily as possible, but the issue they needed to solve was determining if you needed to have an install or just redirect to the app.
They broke so many security rules just to shave off a few inconvenient seconds, and those seconds rose them to the top.
Note: "Zoom" is a videoconfrerencing app, not a built-in Mac OS accessibility feature for "zoom". The article does not clearly state this, ceding a plain English word to a corporation, enabling a takeover of human language. P.S.: This part > Apr 26, 2019 — Video call with Mozilla and Zoom Security Teams is funny, and would be way funnier if it was an non-consensual video call. Finally, note that Zoom effectively does…
> Offered and declined a financial bounty for the report due to policy on not being able to publicly disclose even after the vulnerability was patched. They seem to pay bug bounties if you agree to keep it down.