Vulnerability in the Mac Zoom client allows malicious websites to enable camera

Re:Vulnerability in the Mac Zoom client allows malicious web... by olliej on Monday July 08, 2019 @09:37PM (#20388304)

Note that the server persists after the app is removed, so there’s that as well.

Follow on: What are they talking about regarding custom url handlers? That’s a standard OS X feature...

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by olliej on Monday July 08, 2019 @10:18PM (#20388485)

Ok, so the article says

"According to the Zoom team, the only reason this localhost server continues to exist is that Apple’s Safari doesn’t support URI handlers."

Which is simply wrong. macOS (and i*OS) have supported custom URIs forever. What feature are they wanting? Do they want random websites to be able to install URI handlers?

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by bmon on Monday July 08, 2019 @10:31PM (#20388541)

They want to be able to re-install zoom for the user even if they have deleted it from /Applications.

[ Parent | on HN ]