31–40 of 552 posts
Earlier quoted context omitted.
More likely this was done via a signature update to xprotect, which is essentially a background antivirus process in macOS.
Doesn't appear so, current XProtect version remains at 2103 which was released a couple months ago now.
Earlier quoted context omitted.
More likely this was done via a signature update to xprotect, which is essentially a background antivirus process in macOS.
Doesn't appear so, current XProtect version remains at 2103 which was released a couple months ago now.
If you would like to force this update you can do so via the terminal: softwareupdate -ia --include-config-data It will show up as MRTConfigData if you look under Apple Menu->About This Mac->System Report->Software->Installations. The latest version is 1.45 and was updated today which includes the Zoom mitigations.
It's been really interesting to see how quickly the original Zoom response of "there's nothing wrong with this, everybody does it" ended up being reversed. I wonder if there's a known exploit for the Zoom server specifically, or if Apple discovered one while looking into it. It seems strange for them to go to these lengths in this case when it sounds like other software has been using a similar technique too. Maybe i…
Zoom also didn't reverse their decision until there was a huge amount of public backlash.
Makes me happy to be a customer. Hope they keep enforcing their own rules and protecting their users' privacy and security in this fearless manner.
Disturbs me somewhat that Apple has a way to silently push changes to laptops without user interaction.
From there you can manage the updates manually from the command line with the `softwareupdate` command. e.g. `softwareupdate --list --include-config-data` will show available updates, `softwareupdate -ia --include-config-data` will install them, etc.
It's been really interesting to see how quickly the original Zoom response of "there's nothing wrong with this, everybody does it" ended up being reversed. I wonder if there's a known exploit for the Zoom server specifically, or if Apple discovered one while looking into it. It seems strange for them to go to these lengths in this case when it sounds like other software has been using a similar technique too. Maybe i…
After that PR spin in response to threat disclosure in the original article, I am very skeptical of Zoom's PR machine. > Zoom spokesperson Priscilla McCarthy told TechCrunch: “We’re happy to have worked with Apple on testing this update. We expect the web server issue to be resolved today. We appreciate our users’ patience as we continue to work through addressing their concerns.” Yeah, I bet.
It looked like they decided to remove the server themselves (or at least, as a response to pressure), but maybe they didn't actually have a choice at all.
I wonder what happens now to the Product Owner who decided it was OK to install hidden web server on user machines?
It's been really interesting to see how quickly the original Zoom response of "there's nothing wrong with this, everybody does it" ended up being reversed. I wonder if there's a known exploit for the Zoom server specifically, or if Apple discovered one while looking into it. It seems strange for them to go to these lengths in this case when it sounds like other software has been using a similar technique too. Maybe i…
Disturbs me somewhat that Apple has a way to silently push changes to laptops without user interaction.