News for hackers. Stuff that matters.

A comment on Vulnerability in the Mac Zoom client allows malicious websites to enable camera. Parent comment

Re:Vulnerability in the Mac Zoom client allows malicious web... by tuananh on Monday July 08, 2019 @09:29PM (#20388263)
below down the post, zoom team said that this feat exists because Safari doesn’t have custom url scheme.
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by spaceribs on Monday July 08, 2019 @09:44PM (#20388332)
I've opened up Safari and it properly asks me if I want to open slack when using: slack://test
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by kevinchen on Monday July 08, 2019 @10:09PM (#20388443)
When I clicked the PoC link in Safari, it launched the Zoom app using a URL scheme. ("open in ...?" dialog put up by Safari)
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by seandougall on Monday July 08, 2019 @11:23PM (#20388758)
Oh, yeah, I missed that. That’s patently false.
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by blntechie on Wednesday July 10, 2019 @07:06PM (#20407503)
That’s just false. Safari opens custom URIs.
[ Parent | on HN ]