141–150 of 277 posts
You can probably prevent it with capabilities, or selinux, or with a container. Unless you just enjoy the fashion statement of tinfoil hats, it's not worth it.
You'd have to be crazy to install Zoom given their history.
> Is there any way to prevent it? Do what I do: Run it on a burner computer connected to your guest network.
Zoom is pursuing surveillance profits. Shoshanna Zuboff has an excellent book on "surveillance capitalism", if you want to read more on the trend.
> Is there any way to prevent it? Do what I do: Run it on a burner computer connected to your guest network.
Hah! Only a fool would run it outside of a completely sound-isolated windowless underground faraday cage. Otherwise The Men In Black will find out about your blockers in your stand-up meeting!
Earlier quoted context omitted.
Nah, the readlink on exe looks like it's simply to query the real name of the executable, so that's pretty benign.
I believe they mean grab the absolute path to the real executable, run ldd against it, and parse that output to see if it links against libX11. That doesn't tell you a program is really using X11, though, as plenty have some sort of no-gui option to launch without a window. You can always cat /proc/{PID}/maps to see if libx11 is actually loaded into the process' address space, and just use readlink on exe to figure o…
Perhaps a better question to ask would be "why is any process allowed to do this by default in 2021?"
You can use hidepid=2 to prevent users from seeing other user's processes list.[1]
But I don't want my OS to ask me "do you want to allow htop to access the list of your processes" — à la Windows Vista — every time I want to run htop to see my user processes.
The issue here is closed source software with no way to inspect what they do.
If one really want to run closed source programs which were not vetted by their distro's maintainers, they should use firejail.[2]
[1] https://www.cyberciti.biz/faq/linux-hide-processes-from-othe...
Earlier quoted context omitted.
whoever does the analysis may also become a whistleblower.
Does "whistleblower" apply to people not working directly for the company being reported? I've always understood it to be employee reporting against the employer. I could totally be limiting it from what other people use it though.
It not only examines all processes and arguments - it leverages the microphone to act on ultrasonic cues for "integrations". Zoom is a privacy dumpster fire. https://devforum.zoom.us/t/ultrasonic-connection/3318