Vulnerability in the Mac Zoom client allows malicious websites to enable camera

Re:Vulnerability in the Mac Zoom client allows malicious web... by luckman212 on Tuesday July 09, 2019 @09:29AM (#20391470)

Doing it that way results in a nuisance prompt from Zoom every time you launch it complaining that it can't launch the opener.

Here's a modified version that deletes the app, removes the LoginItem if it exists, and makes the ~/.zoomus directory unwritable, which achieves the same thing but avoids the nag:

    killall ZoomOpener
    osascript -e 'tell application "System Events" to delete login item "ZoomOpener"'
    rm -rf ~/.zoomus/ZoomOpener.app
    sudo chown -R nobody:nobody .zoomus

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by yellowbkpk on Tuesday July 09, 2019 @11:41AM (#20392869)

Thank you for sharing this. One small typo or formatting error: The last line is missing a ~/ and should be: `sudo chown -R nobody:nobody ~/.zoomus`

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by luckman212 on Tuesday July 09, 2019 @05:25PM (#20396782)

Ah, yes - thank you for that.

[ Parent | on HN ]

Re:Vulnerability in the Mac Zoom client allows malicious web... by lloeki on Wednesday July 10, 2019 @04:17AM (#20400103)

Interesting, I don't get this nuisance, even after their update.

[ Parent | on HN ]