News for hackers. Stuff that matters.

A comment on Vulnerability in the Mac Zoom client allows malicious websites to enable camera. Parent comment

Re:Vulnerability in the Mac Zoom client allows malicious web... by closeparen on Monday July 08, 2019 @09:47PM (#20388343)
The basic problem is that you enter a meeting by loading a URL, and loading URLs is something any website can do. There probably needs to be a confirmation step before joining a meeting.
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by seandougall on Monday July 08, 2019 @11:27PM (#20388775)
A custom URL scheme would at least provide an opportunity to confirm launching Zoom, even if Zoom itself didn’t confirm joining s particular meeting (which I agree it should).
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by rahoulb on Tuesday July 09, 2019 @03:35AM (#20389686)
They put this in place precisely to avoid Safari's "Do you want to open this in Zoom" confirmation prompt
[ Parent | on HN ]