News for hackers. Stuff that matters.
Re:Zoom has a signed binary that runs any unsigned script by CJefferson on Wednesday April 01, 2020 @05:51AM (#22747131)
Did you look at the tweet? The installer lets anyone run any script as root. That seems fairly bad.
Re:Zoom has a signed binary that runs any unsigned script by opencl on Wednesday April 01, 2020 @06:01AM (#22747177)
It lets anyone with an admin account run any scripts as root. No privilege escalation here, it's basically a gatekeeper bypass.