Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linux Zoom client proactively reading everything written to X11 clipboard

hachyderm.io

Post reply on HN
Print view View original

111–120 of 175 posts

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#111

Post by hdgvhicv »

3eb7988a1663 wrote: post #64
mcintyre1994 wrote: post #18

Earlier quoted context omitted.

Out of interest why do you still use the app and not just use it in the browser? I feel much more secure having it in the browser sandbox and everything I care about works in the browser.

Not parent, but the web player used to be a down-graded experience from the native app. If you need Zoom for a professional setting, those functions could be important. Do not know if this is still true, but at one point, the web player would only let you see one speaker at a time, while the app would show multiple people at once.

I always turn off incoming video on teams. Waste of bandwidth and cpu, so I don’t see the loss there.

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#112

Post by hdgvhicv »

lxgr wrote: post #98
ocd wrote: post #8

I miss ordinary conference calling being the norm. I like having a desktop IP phone.

It’s a real shame that essentially all modern communication other than email runs over proprietary protocols.

We use a lot of sip with all manner of endpoints

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#113

Post by hdgvhicv »

abenga wrote: post #92
dosisking wrote: post #87

Earlier quoted context omitted.

> And yeah: stop. using. X11. For God's sake! Why should I stop using software that is superior to the alternatives?

It isn't though. For example, the very article we are discussing.

Last time I looked they had broken copy/paste behaviour which dates back decades

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#114

Post by hdgvhicv »

Insimwytim wrote: post #24
jonathantf2 wrote: post #10

Earlier quoted context omitted.

Great, til I have a job interview and they use Zoom

Spin up your own instance and ask them to join!

As an engineer I’d be impressed and would put you up to the top of the pile

Sadly I don’t run the company, and as a hiring manager that’s a great way to reduce my shortlist. We can’t have people like myself who ignore corporate policies.

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#115

Post by Lucasoato »

I wish most Linux distributions had something like a standardized permission manager in which you enable the single policies apps are running with, similarly to what happens in Android (that has some Linux stuff under the hood).

How hard would it be to have something like this? And I can’t even imagine the difficulty of gathering together the whole community around this standard...

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#116

Post by lxgr »

hdgvhicv wrote: post #112
lxgr wrote: post #98

Earlier quoted context omitted.

It’s a real shame that essentially all modern communication other than email runs over proprietary protocols.

We use a lot of sip with all manner of endpoints

Sure, in a way SIP is bigger than ever with NGNs, and there’s SIP use beyond that too, but actual interoperable SIP (as in, I can dial sip:name@example.com) is effectively not a thing anymore.

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#117

Post by abenga »

hdgvhicv wrote: post #113
abenga wrote: post #92

Earlier quoted context omitted.

It isn't though. For example, the very article we are discussing.

Last time I looked they had broken copy/paste behaviour which dates back decades

If said copy paste behavior allows any app to snoop on any other apps' clipboard content without control, then it's been broken for decades.

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#118

Post by gsliepen »

ryandrake wrote: post #50

The "clipboard" as it is implemented in many (most?) operating systems today, only exists because it's a legacy idea that hasn't died. If it were freshly invented today, it would never get past even the most lenient privacy review. Think about the pitch for the feature: "So, we're going to make this in the OS, where the user can highlight anything in any application, invoke a command, and then that thing (which could…

I think the solution is to really give the user control over when something is pasted and into which application. So if you press ctrl-V, it shouldn't pass that on to an application that then gets to poll the clipboard, instead the OS or window manager should send the contents of the clipboard to the application the moment ctrl-V is hit.

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#119

Post by simonra »

nullc wrote: post #40
sterlind wrote: post #17

Earlier quoted context omitted.

What's it like using Qubes? How much friction? I wish I could use some Nix-flavored variant of the sandboxing.

Depends on how you use your computer. If you're mostly a developer/analysis terminal jockey with some browsing-- Qubes is a tremendous upgrade even if you don't care at all about the security properties: The normal qube model of template OS vms + ephemeral app overlays makes it a cinch to troubleshoot complex issues because you can scribble all over the VM (e.g. go ahead, monkey patch your system LIBC if you want!) a…

> But using a multipurpose computer without qubes is unsafe at any speed, worse than driving without a seatbelt.

Could you elaborate on the odds of death and permanent disability occurring through use of unsecured general purpose computers? Because if not using qubes has the same risk profile as not wearing seatbelts I might feel like taking some measures

Re: Linux Zoom client proactively reading everything written to X11 clipboard

#120

Post by hdgvhicv »

lxgr wrote: post #116
hdgvhicv wrote: post #112

Earlier quoted context omitted.

We use a lot of sip with all manner of endpoints

Sure, in a way SIP is bigger than ever with NGNs, and there’s SIP use beyond that too, but actual interoperable SIP (as in, I can dial sip:name@example.com) is effectively not a thing anymore.

I don’t deal with corporate telephony but our sip accounts on the broadcast side have all manner of endpoints, including software and hardware from many different manufacturers. We land them on a pair of paired oracle sbcs which somehow (I’m not close to the details on this part) shares account detail and sessions between the two geographically resilient locations.

You just need the dns, account and password.

Post reply on HN