News for hackers. Stuff that matters.

A comment on How the Zoom macOS installer does its job without you clicking ‘install’.

Re:How the Zoom macOS installer does its job without you cli... by pottertheotter on Tuesday March 31, 2020 @08:47AM (#22736966)
I installed Zoom on macOS yesterday and I thought that the install was crashing because this is not the expected behavior. I would double click the download, try to install, and then the installation program would "crash", so I'd try it again. Did that a few times before I realized it was installed. Until now I thought it had somehow gotten far enough in the installation process before crashing that I could at least use the application. I'd been hearing everyone raving about how Zoom was such better software than anything else, and my first experience was their installer doesn't even work.

This was a horrible user experience for me, and I wasn't thinking about security implications at all.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by afandian on Tuesday March 31, 2020 @03:25PM (#22741429)
I did this too and didn't put two and two together til now. I just assumed it was a buggy installer that broke with that version of MacOS and tried a different machine

I've defended Zoom in the past for ethical 'slips', but weidly this has tipped me into hating it.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by enricotal on Tuesday March 31, 2020 @03:37PM (#22741581)
Ok this is it... I was able to disinstall it with

$ brew cask install zoomus $ brew cask uninstall zoomus

so long and thank you for all the fish... Zoom

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by angott on Tuesday March 31, 2020 @05:29PM (#22742826)
You can also use “brew cask zap zoomus” to remove preference files, browser plugins, logs.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by a-wu on Tuesday March 31, 2020 @05:30PM (#22742836)
Does this also work for non-brew installs?
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by szhu on Tuesday March 31, 2020 @06:23PM (#22743367)
Homebrew Cask's uninstall scripts are basically a community-maintained "best guess" at to how to full uninstall each piece of software. It's generally pretty reliable, and I do use it to remove non-brew installs sometimes.

Note: I have contributed casks to Homebrew Cask before.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by angott on Wednesday April 01, 2020 @12:02AM (#22745526)
You can add `--force` and zap will also work on non-brew installs. The paths are community-contributed, so watch out (you can print the paths with `brew cask cat <name>`).
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by sneak on Tuesday March 31, 2020 @10:36PM (#22745056)
Presumably if you don't like Zoom's shadiness, you may not like Homebrew's bundled spyware either. Disable it with

    brew analytics off
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by webmobdev on Tuesday March 31, 2020 @10:56PM (#22745156)
Or better yet, switch to MacPorts - https://www.macports.org/
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by 8fingerlouie on Wednesday April 01, 2020 @04:34AM (#22746804)
Isn't that more like Debian popularity contest ?

https://popcon.debian.org/

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by sneak on Wednesday April 01, 2020 @12:12PM (#22750263)
No. Homebrew sends a per-installation unique identifier to a third party (Google), tracking your location across different IPs, whether you want it to or not.

Popcon is first-party, and is entirely opt-in. It doesn’t send anything unless you want it to.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by icebraining on Wednesday April 01, 2020 @04:57AM (#22746900)
popcon is opt-in.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by pehtis on Tuesday March 31, 2020 @10:50AM (#22738040)
I would highly recommend checking all installers on macOS through Suspicious Package. It will give you a complete picture of all the installer scripts that will be run and all the files that will be written. I did just that for zoom and decided against installing it.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by twodayslate on Tuesday March 31, 2020 @01:08PM (#22739721)
https://mothersruin.com/software/SuspiciousPackage/ for those curious
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by 0xff00ffee on Tuesday March 31, 2020 @02:37PM (#22740875)
Oooh this is good. A few years ago I came home drunk and wanted to watch this old film that wasn't on any channels. I found it on some dubious website, which required me to install a player .dmg. I drunkenly typed in my password, and then an hour later was like: dafuq did I just do?!? Next day I re-imaged my mac because I'm both paranoid and don't know enough about secops.

SuspiciousPackage wouldn't have helped combat Drunk Install Syndrome, but it might have been a helpful tool before I nuked my OS.

Or maybe this is just good marketing for SuspiciousPackage, which is really malware. Well played.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by mulmen on Tuesday March 31, 2020 @09:52PM (#22744841)
If you don’t trust SuspiciousPackage just run it through SuspiciousPackage.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by JadeNB on Tuesday March 31, 2020 @03:44PM (#22741650)
Similar functionality: unpkg (https://www.timdoug.com/unpkg/). See also https://stackoverflow.com/questions/11298855/how-to-unpack-a... . I think unpkg handles mpkg files, which I haven't encountered in the wild for quite a while now; I don't know about the others.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by paulschreiber on Tuesday March 31, 2020 @09:11PM (#22744660)
Pacifist is also handy https://www.charlessoft.com/
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by yreg on Tuesday March 31, 2020 @06:29PM (#22743433)
I too don't get how Zoom is considered "the superior software". Maybe the calls don't drop, but the experience is bad (at least on macOS).
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by 7ewis on Tuesday March 31, 2020 @06:41PM (#22743535)
Said this on Reddit the other day and got downvoted.

It _is_ bad on macOS. It used to be one of the better platforms to stream video content to others, but now it just lacks in many areas compared to most of its competitors.

The worst bug I had was it essentially started muting random people on a call, but only for me. I could see their mouth moving, and thought it was a problem their side but turns out everyone else could hear them apart from me. I could hear everyone else too apart from them.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by shreyshrey on Tuesday March 31, 2020 @09:10PM (#22744654)
Yes. My experience is really bad too in mac OS. I thought may be something wrong with my setup.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by macleginn on Tuesday March 31, 2020 @09:00AM (#22737035)
Same here. I thought the process didn't finish until I tried launching the app (which I was supposed to do by clicking a link in the browser, which is also rather unintuitive).
[ Parent | on HN ]