Zoom has a signed binary that runs any unsigned script

Re:Zoom has a signed binary that runs any unsigned script by galad87 on Wednesday April 01, 2020 @07:29AM (#22747611)

Apple didn't review or accept Zoom. It's not on the App Store.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by diggan on Wednesday April 01, 2020 @07:41AM (#22747680)

Yeah, as much as I don't like the locked down nature of Apple devices/OS/software, this case with Zoom being able to do this stuff, is an argument for the locked down garden.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by api on Wednesday April 01, 2020 @09:01AM (#22748089)

Locking stuff down is the best thing we can do to protect non-technical users barring a complete re-design of operating systems from scratch with a renewed focus on security.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by NullPrefix on Wednesday April 01, 2020 @07:48AM (#22747715)

Isn't this the exact opposite? Zoom didn't bother to go get accepted into high requirement locked down garden, instead they choose to distribute the binaries on their own without having to deal with pesky rules about unsigned scripts.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by diggan on Wednesday April 01, 2020 @07:56AM (#22747767)

Well, if it was only possible to install apps via the App Store (Apples wet dream, but they'll lose a ton of users), then Zoom wouldn't be able to distribute their app any other way and forced to follow the guidelines.

Again, I'm playing devils advocate for a pro-walled-garden opinion me myself don't believe in, so don't take my opinion too seriously.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by lloeki on Wednesday April 01, 2020 @09:14AM (#22748174)

It's not an either/or. You can simultaneously have more trust in apps coming from the walled garden and cherry-pick with greater care the select number of potent applications that come from outside of it and are therefore harder to trust, precisely because they may be able to do more than what's allowed within the walled garden.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by NullPrefix on Wednesday April 01, 2020 @11:18AM (#22749541)

>Again, I'm playing devils advocate for a pro-walled-garden opinion me myself don't believe in, so don't take my opinion too seriously.

Pure cynicism on my part by default, so it's all good, mate.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by whywhywhywhy on Wednesday April 01, 2020 @08:28AM (#22747909)

But they only do this stuff to make their software seem fast and easy to install for the non-technical users because of the lock down restrictions...

App Store, Gatekeeper, etc are now working against what they were supposed to solve and encouraging worse developer behavior.

Really the best solution would be tackling the reasons why Zoom are doing this in the first place. Like how they provided a gentler version of Sandboxing to work around pro creative apps being basically unusable in the first versions.

The more you lock it down the more bad behavior you'll encourage from less ethical developers.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by ericmay on Wednesday April 01, 2020 @08:58AM (#22748074)

Not sure I buy this reasoning. It's like having rules that you can't kill people at your house, so people go outside and do it. Ok if you let people kill inside your house they'll just kill there too AND outside.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by sidkshatriya on Wednesday April 01, 2020 @10:38AM (#22749015)

Zoom cloud meetings does seem to be on the App Store: https://apps.apple.com/us/app/zoom-cloud-meetings/id54650530...

Are you talking about something else or am I misunderstanding here?

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by galad87 on Wednesday April 01, 2020 @10:48AM (#22749137)

That's the iOS version. All the security issues are on the macOS version (that's not on the Mac App Store and it's not sandboxed)

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by blhack on Wednesday April 01, 2020 @08:42AM (#22747975)

https://apps.apple.com/us/app/zoom-cloud-meetings/id54650530...

Yes it is.

[ Parent | on HN ]

Re:Zoom has a signed binary that runs any unsigned script by jammmety on Wednesday April 01, 2020 @08:54AM (#22748045)

Not on the Mac App Store

[ Parent | on HN ]