News for hackers. Stuff that matters.

A comment on Zoom has a signed binary that runs any unsigned script. Parent comment

Re:Zoom has a signed binary that runs any unsigned script by t0mas88 on Wednesday April 01, 2020 @05:30AM (#22747024)
What's wrong here is that Zoom hacked together an installer against all normal structure that Apple recommends. And that installed includes a very stupidly designed component that will try to run whatever you ask it with admin privileges.

This is yet another indication that nobody at Zoom has a single clue on how to build a secure and stable application. Another example of that mindset released today: https://www.theverge.com/2020/3/31/21201956/zoom-leak-user-i... They are proving to completely not understand how to design security/privacy features. Frankly, their technology team sounds like total amateurs that hack things together.

[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by oefrha on Wednesday April 01, 2020 @06:37AM (#22747342)
“Total amateurs hacking things together” somehow managed to ship something functionally better than products from mature shops like MSFT that mean serious business. The irony there.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by dsr_ on Wednesday April 01, 2020 @07:21AM (#22747584)
It has long been the legendary case that Microsoft takes three major versions to get a usable product, then encrusts it with ornamental features until it has trouble breathing around version 7 or 8.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by valuearb on Wednesday April 01, 2020 @12:48PM (#22750749)
It's more like they gained better ease of use by bending platform rules, to the detriment of security.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by oefrha on Wednesday April 01, 2020 @12:54PM (#22750823)
I highly doubt Zoom’s video conferencing solution was solidly working while MS Teams crumbled under load two weeks ago is due to magic in Zoom’s macOS installer.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by valuearb on Wednesday April 01, 2020 @01:10PM (#22751026)
Wasn't talking about infrastructure, was talking about the ease of use that led to large market share. Zoom broke lots of platform rules to perform that trick.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by shadowtree on Wednesday April 01, 2020 @10:55AM (#22749232)
Market Cap of 38bn USD, based on a single product that entered a settled and crowded market.

Public, profitable, founder was Head Engineer for Cisco WebEx. Runs global videoconferencing under massive new load during Covid-19, on their own servers.

HN comment: "total amateurs".

Love this place.

[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by oefrha on Wednesday April 01, 2020 @11:09AM (#22749425)
Better start getting used to it if you haven’t already.
[ Parent | on HN ]