Vulnerability in the Mac Zoom client allows malicious websites to enable camera

Re:Vulnerability in the Mac Zoom client allows malicious web... by mkl on Tuesday July 09, 2019 @08:02AM (#20390923)

There's nothing specifically bash about it, but here's what the components mean:

"kill" = kill running process

"-9" = kill as forcefully as possible

"$(...)" = command substitution: run the stuff inside the brackets and replace this term with the results (it will be the processes to kill in this case).

"lsof" = list open files (other things like ports and devices count as files on Unix systems)

"-i" = search for internet address

":19421" = local machine, port 19421

I think they're missing a "-t" on lsof, to make it output process IDs only ("terse mode") instead of a human-readable table:

  kill -9 $(lsof -t -i :19421)

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by bzbarsky on Tuesday July 09, 2019 @10:29AM (#20392076)

That "command substitution" bit will fail on tcsh, say, last I checked.

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by laumars on Tuesday July 09, 2019 @11:52AM (#20393024)

Is lsof part of the default install of OSX? It isn't usually part of the base install on Linux (though obviously very easy to install)

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by guitarbill on Tuesday July 09, 2019 @10:52AM (#20392337)

although command substitution is in the POSIX sh spec and so not a bashism, $(...) doesn't work in e.g. fish

[ Parent | on HN ]