Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the Zoom macOS installer does its job without you clicking ‘install’

twitter.com

Post reply on HN
Print view View original

281–290 of 334 posts

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#281

Post by Craighead »

thaumasiotes wrote: post #211
manigandham wrote: post #85

1) If Zoom can do this then it's a MacOS security bug. 2) UX matters. Users don't care about the technical details, they want a smooth experience and that can be the difference between a billion-dollar business or a failed startup. And yes the desktop version is more stable than the web-based UI. 3) Malware is defined by what it does, not how it's installed.

> 3) Malware is defined by what it does, not how it's installed. Well, from the tweet thread: > If the App is already installed but the current user is not admin, they use a helper tool called "zoomAutenticationTool" [sic] and the AuthorizationExecuteWithPrivileges API to spawn a password prompt identifying as "System" (!!) to gain root (including a typo).

Why are you doing damage control?

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#282

Post by sneak »

enricotal wrote: post #220
afandian wrote: post #216

Earlier quoted context omitted.

I did this too and didn't put two and two together til now. I just assumed it was a buggy installer that broke with that version of MacOS and tried a different machine I've defended Zoom in the past for ethical 'slips', but weidly this has tipped me into hating it.

Ok this is it... I was able to disinstall it with $ brew cask install zoomus $ brew cask uninstall zoomus so long and thank you for all the fish... Zoom

Presumably if you don't like Zoom's shadiness, you may not like Homebrew's bundled spyware either. Disable it with

    brew analytics off

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#283

Post by MarkyC4 »

lloeki wrote: post #246
junky228 wrote: post #223

Earlier quoted context omitted.

sunova.... I couldn't find the web based version...That's what frustrated me about zoom compared to webex. I could use Weber in the browser and zoom had to be installed

It's gated behind a fallback after three "failed" attempts at clicking on the link to open the app after opening a meeting URL, or a meeting setting. So, not on by default, seems to be unable to join audio unless you use Chrome, and shows a single video only.

I tried using the web client in Chrome today on my Mac, and the audio was playing to me at what felt like 50% speed; everyone sounded like slow motion to me.

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#284

Post by webmobdev »

sneak wrote: post #282
enricotal wrote: post #220

Earlier quoted context omitted.

Ok this is it... I was able to disinstall it with $ brew cask install zoomus $ brew cask uninstall zoomus so long and thank you for all the fish... Zoom

Presumably if you don't like Zoom's shadiness, you may not like Homebrew's bundled spyware either. Disable it with brew analytics off

Or better yet, switch to MacPorts - https://www.macports.org/

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#285

Post by emilecantin »

I have this irrational disgust of .pkg installs, and this is is a good example why. Every time I have to install a .pkg, I wonder what crap it's spreading all around my system.

What's wrong with dragging .apps? Does your app really need to spread its tentacles beyond an app bundle and (maybe) some preference files?

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#286

Post by behnamoh »

luto wrote: post #240
elevenoh wrote: post #236

Earlier quoted context omitted.

Best zoom alternative?

Jitsi, Google Meet, bigbluebutton -- anything can runs in a browser tab and is more or less confined within it.

But how do they remain in business? I'm interested in knowing how say, Jitsi, earns money off of it.

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#287

Post by throwaway1777 »

luto wrote: post #240
elevenoh wrote: post #236

Earlier quoted context omitted.

Best zoom alternative?

Jitsi, Google Meet, bigbluebutton -- anything can runs in a browser tab and is more or less confined within it.

Zoom works in the browser

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#288

Post by angott »

a-wu wrote: post #251
angott wrote: post #249

Earlier quoted context omitted.

You can also use “brew cask zap zoomus” to remove preference files, browser plugins, logs.

Does this also work for non-brew installs?

You can add `--force` and zap will also work on non-brew installs. The paths are community-contributed, so watch out (you can print the paths with `brew cask cat `).

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#289

Post by drusepth »

elevenoh wrote: post #236
tambourine_man wrote: post #173

Zoom's got a tradition of being, let's put it like this, way too clever for everyone's own good. See previous “lets install a server on this Mac that is not removed when you uninstall the app and leaves your camera open to the entire internet” for more examples. I use it on a VM, I suggest you do it too.

Best zoom alternative?

I switched from Zoom to Google Duo almost a year ago and haven't had any issues.

Re: How the Zoom macOS installer does its job without you clicking ‘install’

#290

Post by adtac »

luto wrote: post #240
elevenoh wrote: post #236

Earlier quoted context omitted.

Best zoom alternative?

Jitsi, Google Meet, bigbluebutton -- anything can runs in a browser tab and is more or less confined within it.

I wouldn't be surprised if Zoom suddenly started exploiting browser zero days to force install things "for your own good"
Post reply on HN