Vulnerability in the Mac Zoom client allows malicious websites to enable camera

Re:Vulnerability in the Mac Zoom client allows malicious web... by liveoneggs on Monday July 08, 2019 @10:36PM (#20388568)

bluejeans video installs a nasty daemon that runs at boot too. I'll never attend a bluejeans meeting again

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by megablast on Monday July 08, 2019 @11:48PM (#20388875)

Not if you just use it through the browser, which is more stable than their app.

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by Randgalt on Monday July 08, 2019 @11:48PM (#20388872)

Anyone know what port the Bluejeans server is running on and/or how to kill it in a manner similar to the Zoom workaround?

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by packetslave on Tuesday July 09, 2019 @12:13AM (#20388969)

    BlueJeans 423 [...] TCP localhost:18171 (LISTEN)

    $ nc 127.0.0.1 18171
    GET / HTTP/1.0

    HTTP/1.1 200 OK
    Content-Length: 23
    Server: Swifter 1.3.3

    BlueJeansHelper Service

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by redbeard0x0a on Tuesday July 09, 2019 @07:38PM (#20397881)

Removing the BlueJeans from your machine is a little more involved because they actually used launchd.

launchctl list

Then you need to find where the plist files are (i.e. com.bluejeans.app.detector.plist).

You can disable an entry from launchctl list:

launchctl disable uid/<your user uid>/com.bluejeans.app.detector

You can also unload if you find the actual file

launchctl unload ~/Library/LaunchAgents/com.bluejeans.app.detector.plist

There were a couple differently named bluejeans agents.

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by longnguyen on Monday July 08, 2019 @11:18PM (#20388736)

Wow didn't know that. I rarely use bluejeans but I guess i will uninstall it anyway.

[ Parent | on HN ]