News for hackers. Stuff that matters.

A comment on How the Zoom macOS installer does its job without you clicking ‘install’. Parent comment

Re:How the Zoom macOS installer does its job without you cli... by pehtis on Tuesday March 31, 2020 @10:50AM (#22738040)
I would highly recommend checking all installers on macOS through Suspicious Package. It will give you a complete picture of all the installer scripts that will be run and all the files that will be written. I did just that for zoom and decided against installing it.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by twodayslate on Tuesday March 31, 2020 @01:08PM (#22739721)
https://mothersruin.com/software/SuspiciousPackage/ for those curious
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by 0xff00ffee on Tuesday March 31, 2020 @02:37PM (#22740875)
Oooh this is good. A few years ago I came home drunk and wanted to watch this old film that wasn't on any channels. I found it on some dubious website, which required me to install a player .dmg. I drunkenly typed in my password, and then an hour later was like: dafuq did I just do?!? Next day I re-imaged my mac because I'm both paranoid and don't know enough about secops.

SuspiciousPackage wouldn't have helped combat Drunk Install Syndrome, but it might have been a helpful tool before I nuked my OS.

Or maybe this is just good marketing for SuspiciousPackage, which is really malware. Well played.

[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by mulmen on Tuesday March 31, 2020 @09:52PM (#22744841)
If you don’t trust SuspiciousPackage just run it through SuspiciousPackage.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by JadeNB on Tuesday March 31, 2020 @03:44PM (#22741650)
Similar functionality: unpkg (https://www.timdoug.com/unpkg/). See also https://stackoverflow.com/questions/11298855/how-to-unpack-a... . I think unpkg handles mpkg files, which I haven't encountered in the wild for quite a while now; I don't know about the others.
[ Parent | on HN ]
Re:How the Zoom macOS installer does its job without you cli... by paulschreiber on Tuesday March 31, 2020 @09:11PM (#22744660)
Pacifist is also handy https://www.charlessoft.com/
[ Parent | on HN ]