News for hackers. Stuff that matters.

A comment on Apple has pushed a silent Mac update to remove hidden Zoom web server. Parent comment

Re:Apple has pushed a silent Mac update to remove hidden Zoo... by greenshackle2 on Thursday July 11, 2019 @04:34PM (#20415541)
It's not spyware but it's user-hostile, insecure, undocumented, uninstallable-by-the-usual-process software.

Most of the insecure software that I run has enough grace to not silently leave behind a web server to automatically re-install itself after I dumped it in the trash can.

[ Parent | on HN ]
Re:Apple has pushed a silent Mac update to remove hidden Zoo... by root_axis on Thursday July 11, 2019 @05:34PM (#20416083)
You have no idea what "most insecure" software does, if you did you wouldn't be running it. Lots of insecure software fails in spectacularly unexpected ways.

https://www.macworld.co.uk/news/iphone/facetime-bug-hack-369...

This is a horrifying bug. Is Facetime malware? Or do developers with earnest intentions sometimes write buggy code?

[ Parent | on HN ]
Re:Apple has pushed a silent Mac update to remove hidden Zoo... by greenshackle2 on Thursday July 11, 2019 @06:08PM (#20416353)
Buggy code is common, silently installing and running a web server is not.
[ Parent | on HN ]
Re:Apple has pushed a silent Mac update to remove hidden Zoo... by root_axis on Thursday July 11, 2019 @07:47PM (#20416937)
The webserver is an implementation detail. It's not uncommon for desktop application software to use native code to provide UX enhancements that are not possible within the browser alone. If the server had been designed securely it would not be an issue, it would just be left-over cruft, which is also pretty common.
[ Parent | on HN ]