Live data from Hacker News

Apple has pushed a silent Mac update to remove hidden Zoom web server

techcrunch.com

51–60 of 552 posts

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#51

That's pretty epic. Apple continues to make big, brave moral gestures (like when they yanked Facebook and Google's enterprise certs earlier this year, or killed long-term tracking cookies in Safari overnight). Makes me happy to be a customer. Hope they keep enforcing their own rules and protecting their users' privacy and security in this fearless manner.

I don't think killing those enterprise cert was a moral gesture. They were just enforcing their walled garden.

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#54
post #14

So they installed without further confirmation a silent update that removes a silent installer? No irony?

Not really, no. Apple's update is just a configuration change to XProtect, which is the anti-malware system. It's not an OS patch, it's just like any third-party malware system auto-updating signatures.

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#55

My Macbook pro froze this morning...the mouse moved, but I couldn't interact with anything. After a few mins, I hard rebooted it, and it worked fine after that. I'm not sure if it was related to this update, but it's the first time that this has ever happened, so it's a little bit of a coincidence.

It's a coincidence.

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#57
post #18

Disturbs me somewhat that Apple has a way to silently push changes to laptops without user interaction.

Windows update does the same, no?

Windows Update leaves behind a lot of logs with KB entries, so I don't think they're trying to do anything secretly. If Microsoft changes your software, you know about it.

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#58
post #53

And why did Apple shut down the app regardless? Was it not properly patched? Did Apple not care?

Because zoom’s patch will only help users still using and updating zoom while those who have uninstalled zoom are still vulnerable (because the uninstalled leaves the web server behind)

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#59

My Macbook pro froze this morning...the mouse moved, but I couldn't interact with anything. After a few mins, I hard rebooted it, and it worked fine after that. I'm not sure if it was related to this update, but it's the first time that this has ever happened, so it's a little bit of a coincidence.

This has been widespread for the last week and a half, but nobody knows why. Unrelated to zoom.

Re: Apple has pushed a silent Mac update to remove hidden Zoom web server

#60
post #12

Earlier quoted context omitted.

Doesn't appear so, current XProtect version remains at 2103 which was released a couple months ago now.

I haven’t checked, but are you looking at the version of the binary itself, or the MRT signature files it uses

Checked XProtect.meta.plist inside the app bundle, forcing an update check with softwareupdate has no impact either.

Perhaps it’s a staged rollout, but at least on my iMac there’s no sign of updated signatures.

Post reply on HN