[flagged]
Linux Zoom client proactively reading everything written to X11 clipboard
91–100 of 176 posts
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#92Earlier quoted context omitted.
Use a dedicated, otherwise empty account for job interviews. Linux is multi-process, _multi-user_ since forever. No need to leave a password manager, online banking, andwhatnot accessible in the background during an interview. And yeah: stop. using. X11. For God's sake!
> And yeah: stop. using. X11. For God's sake! Why should I stop using software that is superior to the alternatives?
It isn't though. For example, the very article we are discussing.
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#93Not the first time Zoom abuses privilege. A few years back, there was something about gaining root on MacOS via Zoom due to shady execution on their end. They've lost my trust since then, and I'll only run it sandboxed: https://gist.github.com/cielavenir/02f322e322a2a3555dbf2b38f... I always ask (1) why does an app require installation and (2) why would it require root? There are valid answers for both, but realistic…
Out of interest why do you still use the app and not just use it in the browser? I feel much more secure having it in the browser sandbox and everything I care about works in the browser.
I recently had to use the browser and was shocked to find there was no option for Gallery View. You were just stuck with one square in the middle that would bounce between different faces. I feel like they have the worst web experience out of all the meeting apps.
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#94Earlier quoted context omitted.
What's it like using Qubes? How much friction? I wish I could use some Nix-flavored variant of the sandboxing.
Depends on how you use your computer. If you're mostly a developer/analysis terminal jockey with some browsing-- Qubes is a tremendous upgrade even if you don't care at all about the security properties: The normal qube model of template OS vms + ephemeral app overlays makes it a cinch to troubleshoot complex issues because you can scribble all over the VM (e.g. go ahead, monkey patch your system LIBC if you want!) a…
You make a very compelling argument. I've been thinking of at least trying it out before, but have been leaning towards it more and more over the years. A couple of questions though, if I could bother you with them?
How is remoting performance e.g. via VNC/RDP or particularly via Moonlight+Sunshine (intended for gaming and such)?
And how programmable is the configuration of Qubes? I like the idea of NixOS for example, but given how comparatively little activity there is in the actual nix rather than the packages, and across so few developers, I worry what would happen if someone got hit by a bus or something. But I still like programmatically configuring computers over manual monkey patches, because I have the memory of a gold fish. :p
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#95Earlier quoted context omitted.
Great, til I have a job interview and they use Zoom
Srsly, all those neck beards who over simplify the problem with a flippant "don't use zoom", as if everyone has the luxury to skip every job interview and employer meeting that absolutely requires Zoom. I wish I could live in their world where every problem is solved by simply avoiding that problem.
so? avoid it where you can
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#96Not the first time Zoom abuses privilege. A few years back, there was something about gaining root on MacOS via Zoom due to shady execution on their end. They've lost my trust since then, and I'll only run it sandboxed: https://gist.github.com/cielavenir/02f322e322a2a3555dbf2b38f... I always ask (1) why does an app require installation and (2) why would it require root? There are valid answers for both, but realistic…
Out of interest why do you still use the app and not just use it in the browser? I feel much more secure having it in the browser sandbox and everything I care about works in the browser.
I always try to use browser versions of things, but zoom just hasn't worked for me in it for changes. No error messages or anything, just insistence on downloading the app. I assumed they got rid of it but I guess not.
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#97Not the first time Zoom abuses privilege. A few years back, there was something about gaining root on MacOS via Zoom due to shady execution on their end. They've lost my trust since then, and I'll only run it sandboxed: https://gist.github.com/cielavenir/02f322e322a2a3555dbf2b38f... I always ask (1) why does an app require installation and (2) why would it require root? There are valid answers for both, but realistic…
> They've lost my trust since then, and I'll only run it sandboxed: https://gist.github.com/cielavenir/02f322e322a2a3555dbf2b38f...
On Linux/X11 even when you run a program sandboxed or as a different user if you use a master Xserver the sandboxed program still can listen and modify all your input/output including keyboard/mouse events and window content of every application.
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#98I miss ordinary conference calling being the norm. I like having a desktop IP phone.
It’s a real shame that essentially all modern communication other than email runs over proprietary protocols.
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#99Earlier quoted context omitted.
Out of interest why do you still use the app and not just use it in the browser? I feel much more secure having it in the browser sandbox and everything I care about works in the browser.
I notice the browser version is a little resource intensive. I use it on freebsd and I need to renice the browser to -10 for it to be somewhat stable. (This is an improvement because I remember 6 years ago it didn't work on freebsd.) I ran it on a Mac last week and it spun the fan more than I'd expect.
Last time I looked at their web client, it was indeed doing absurd things (I think it used TCP and web sockets to carry video instead of WebRTC and shipped a WASM video codec that obviously can’t be GPU/hardware accelerated).
Not sure if that’s malice (to nudge people towards using their invasive desktop app) or incompetence.
Re: Linux Zoom client proactively reading everything written to X11 clipboard
#100Earlier quoted context omitted.
Out of interest why do you still use the app and not just use it in the browser? I feel much more secure having it in the browser sandbox and everything I care about works in the browser.
I always try to use browser versions of things, but zoom just hasn't worked for me in it for changes. No error messages or anything, just insistence on downloading the app. I assumed they got rid of it but I guess not.
The link is just smaller, and I think the text is now something to the effect of "Can't Download App" or similar.