Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zoom zero-day discovery

blog.malwarebytes.com

Post reply on HN
Print view View original

201–210 of 246 posts

Re: Zoom zero-day discovery

#201

Post by HaggardFinical »

DangerousPie wrote: post #78
_nickwhite wrote: post #50

Earlier quoted context omitted.

My biggest gripe about Teams is what a memory hog it is. Mine is currently sitting idle (been on vacation all week) at nearly 1GB. Compare this to Zoom, which is idling at just over 100MB. Teams is literally taking up 10 times more RAM than Zoom just running in the background.

I have never used Teams but is 1GB of memory usage really an issue in 2021, when most laptops have at least 16-32 gigs of memory? It's been years since the last time I actually worried about how much memory some software on my laptop was using.

"2021, when most laptops have at least 16-32 gigs of memory"

Oh man, I'd love to live in the wonderland where you posted this comment from.

Re: Zoom zero-day discovery

#202

Post by [deleted] »

AlexCoventry wrote: post #186

I use the zoom web client, when I have to use zoom. It has fewer features, but I'm more comfortable running badly written software in an environment designed for hostile code. Just change the /j/ in the url to /wc/, and insert /join after the meeting id. https://devforum.zoom.us/t/launch-zoom-client-from-browser-w...

[deleted]

Re: Zoom zero-day discovery

#203

Post by linuxftw »

jacobolus wrote: post #196
AlexCoventry wrote: post #186

I use the zoom web client, when I have to use zoom. It has fewer features, but I'm more comfortable running badly written software in an environment designed for hostile code. Just change the /j/ in the url to /wc/, and insert /join after the meeting id. https://devforum.zoom.us/t/launch-zoom-client-from-browser-w...

The zoom web client has extremely buggy audio support. It regularly breaks in all of the browsers on my computer, and I end up listening to meetings only able to contribute via the text chat.

I've had this as well. I just refresh as soon as the audio and video comes up, and this seems to keep it stable for the remainder of the session. Otherwise, there's like a 60% I lose the ability to do anything.

Re: Zoom zero-day discovery

#204

Post by vulcan01 »

gowld wrote: post #86
rijoja wrote: post #77

Earlier quoted context omitted.

I don't really think a communication from Malwarebytes is the place for sarcastic comments. Lets say if you are working with a US government this could have enormous implications. I've talked to a lot of clients who ditched Zoom for Microsoft Teams due to their earlier mistakes. Also I find it funny that the heading "Not patched yet" is solved by the headline "Security done right". Lets say if you are working with a…

Teams is exploitable too.

No one ever got fired for choosing Microsoft.

Re: Zoom zero-day discovery

#205

Post by tptacek »

JaggedJax wrote: post #127
vthallam wrote: post #57

Can we please edit the headline. This sounds disingenuous, a more appropriate headline would be something like "critical vulnerability in Zoom Video Calls that would have put millions of users at risk has been found". This feels like a straight up PR piece.

Right, isn't this not a Zero Day specifically because it's not known to be exploited out in the wild. How can it be, no one else knows what the vuln is. It is being reported as part of a bug bounty with 90 day disclosure just like anything else would be.

The term "zero day" has nothing to do with in-the-wild exploit observation.

Re: Zoom zero-day discovery

#206

Post by mssundaram »

interestica wrote: post #175
vthallam wrote: post #57

Can we please edit the headline. This sounds disingenuous, a more appropriate headline would be something like "critical vulnerability in Zoom Video Calls that would have put millions of users at risk has been found". This feels like a straight up PR piece.

I really wish there was a changelog for headlines. Too often I see a critique like this and I have to figure out if the comment is referring to the current headline or a previous version. And, if the headline has already unknowingly been 'corrected', it leaves me wasting time trying to figure it out within that framing. And it shouldn't be the responsibility of the poster necessarily to quote it -- because there's no…

HackerNews is pretty opaque with its moderation

Re: Zoom zero-day discovery

#207

Post by PurpleFoxy »

DangerousPie wrote: post #78
_nickwhite wrote: post #50

Earlier quoted context omitted.

My biggest gripe about Teams is what a memory hog it is. Mine is currently sitting idle (been on vacation all week) at nearly 1GB. Compare this to Zoom, which is idling at just over 100MB. Teams is literally taking up 10 times more RAM than Zoom just running in the background.

I have never used Teams but is 1GB of memory usage really an issue in 2021, when most laptops have at least 16-32 gigs of memory? It's been years since the last time I actually worried about how much memory some software on my laptop was using.

16gb is the standard high end spec, 32gb is the extreme edition which usually costs a fortune and is impossible to convince your company to buy, especially if multiple people need them.

On 16GB I was constantly running out of memory at work. It’s not just 1GB it’s 1GB times all the other crap you need running.

Re: Zoom zero-day discovery

#209

Post by dylan604 »

agloeregrets wrote: post #168
dheera wrote: post #133

Earlier quoted context omitted.

Also the UI sucks. It doesn't blend nicely with my system. It looks like a sore thumb Windows 3.0 app or quack-age MacOS app in the midst of a futuristic OS.

Yes! Like there's a required two clicks to leave a call, you can't trust if it will start video on or off, the menu bar hides by default! The UX is horrible.

The 2-click to leave is aweful. Sure, accidental leaving can be annoying. How about don't put the button near anything else that might need clicking so that it's much less likely to be accidentally clicked.

Re: Zoom zero-day discovery

#210

Post by vxNsr »

Throwaway234285 wrote: post #112
dylan604 wrote: post #93

Earlier quoted context omitted.

That doesn't make them wrong though

It doesn't, but it's worth noting that the general populace doesn't feel that way.

I work for a large MSP, one of our partners announced recently that effective basically immediately they are no longer supporting any zoom integrations due to the China connection.
Post reply on HN