191–200 of 473 posts
https://apple.stackexchange.com/questions/358651/unable-to-c...
I could not get rid of the client in my process list for weeks and regretted installing it.
I will try the fix mentioned at the end of the article now (first killing the webserver).
They will have a hard time regaining users trust.
Most of the affected users won’t be able to uninstall the Zoom client in a clean way: https://apple.stackexchange.com/questions/358651/unable-to-c... I could not get rid of the client in my process list for weeks and regretted installing it. I will try the fix mentioned at the end of the article now (first killing the webserver). They will have a hard time regaining users trust.
Now? I hope you're reading, Zoom. No chance now.
If you look on Twitter, anyone that has complained about this (huge) vulnerability is being redirected back to their blog post.
To make things worse, most non-technical users that have caught onto these posts are replying to say "thanks for sorting it out!"
This wouldn't be the first time a company sweeps a data leak or vulnerability under the rug. I remember when the Panera Bread stuff kicked off, and all they had to do was bury their head in the sand and wait for the storm to pass. There's currently a lawsuit in progress, but will that happen for a vulnerability like this?
No amount of security features can rival a small piece of black tape over the camera. It also makes crypto-phishing (you've been recorded doing X, pay Y BTC) much harder to fall for. Where software could (and eventually will) be compromised, the attacker would have to physically access the machine to remove that tape.
Not that it helps if you're, ahem, in the middle of something when the nefarious 3rd party opens the line.
Why isn't the Windows client vulnerable? What have they/Microsoft done differently?
Safari asks you if you want to open an app that owns a URL scheme to prevent webpages from automatically triggering behavior you might not want. Zoom decided they know better than the Safari team and decided to install this local webserver specifically to bypass the operating system's security policies, supposedly because "it is their key differentiator" or whatever. Basically their product managers decided they want…
Does anyone know of any working alternatives? We use Zoom a lot, it has the most hideous UI and the worst UX but so far it's been the only video platform that reliably works with tens and hundreds of attendees.
Earlier quoted context omitted.
Am I the only one seeing the pattern here. Most security loop holes I have witness have existed at the cost of providing a better user experience.
This is the security - usability tradeoff and is as old as the hills.
Earlier quoted context omitted.
Stock markets very rarely care about security, unless it's somehow front page news.
Investors would care if they thought Zoom’s customers cared enough to switch. I personally think this is terrible, but investors don’t seem to think Zoom’s customers care enough to change to a competitor, which makes me second guess whether or not this is actually a big deal to large customers.
almost all video communications software works similarly to zoom, so that's that.
How do you recommend uninstalling this?
From the article: > To shut down the web server, run lsof -i :19421 to get the PID of the process, then do kill -9 [process number]. Then you can delete the ~/.zoomus directory to remove the web server application files. > To prevent this server from being restored after updates you can execute the following in your terminal: rm -rf ~/.zoomus touch ~/.zoomus
killall ZoomOpener
chmod -x .zoomus/ZoomOpener.app/Contents/MacOS/ZoomOpener
sudo chown -R nobody:nobody .zoomus/ZoomOpener.app