News for hackers. Stuff that matters.

A comment on Google Chrome Keystone is modifying /var symlink on non SIP Macs causing k-panic. Parent comment

Re:Google Chrome Keystone is modifying /var symlink on non S... by whatusername on Tuesday September 24, 2019 @11:22PM (#21067302)
Was that this one? https://www.theverge.com/2019/7/8/20687014/zoom-security-fla...

https://www.macworld.com/article/3407764/zoom-mac-app-flaw-c...

[ Parent | on HN ]
Re:Google Chrome Keystone is modifying /var symlink on non S... by ratww on Tuesday September 24, 2019 @11:36PM (#21067365)
That was discovered a short time after I noticed the rogue daemon myself!

Let me try to explain better: There was a thread here in HN about a Google Cloud outage and someone posted a link to a Zoom conference. I noticed that their app was still installed after clicking the given link. This happened to other people too:

https://news.ycombinator.com/item?id=20077805

I wonder if it's a coincidence!

[ Parent | on HN ]