News for hackers. Stuff that matters.

A comment on Vulnerability in the Mac Zoom client allows malicious websites to enable camera. Parent comment

Re:Vulnerability in the Mac Zoom client allows malicious web... by robenkleene on Tuesday July 09, 2019 @06:15AM (#20390349)
Does anyone know how this web server starts itself after restarting your machine? As far as I know, a `~/.zoomus` directory can't restart a web server after your machine restarts.
[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by ilikepi on Tuesday July 09, 2019 @08:09AM (#20390957)
It doesn't start on boot, it starts on login. It appears as a Login Item named ZoomOpener in your local user account in the System Preferences -> Users & Groups.

Additionally, when you launch the main application, it will check to see whether ZoomOpener is running. If not it will boot it up. The main app will install and register ZoomOpener as a Login Item if necessary.

[ Parent | on HN ]
Re:Vulnerability in the Mac Zoom client allows malicious web... by M4v3R on Tuesday July 09, 2019 @07:10AM (#20390633)
I think it's because it runs on a port higher than 1024, so it doesn't need root privileges to start a web server on that port.
[ Parent | on HN ]