News for hackers. Stuff that matters.

A comment on Zoom has a signed binary that runs any unsigned script. Parent comment

Re:Zoom has a signed binary that runs any unsigned script by HumblyTossed on Wednesday April 01, 2020 @08:01AM (#22747789)
They can't. Not now at least. For better or worse, people all over are using Zoom to stay in contact. If Apple banned it, it would be extremely difficult for them to not take a PR hit right now.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by ratww on Wednesday April 01, 2020 @08:17AM (#22747868)
Instead of banning, Apple should be working together with them to understand why they're resorting to such ugly hacks just to improve the installation UX, and use that feedback to improve macOS instead.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by Longhanks on Wednesday April 01, 2020 @11:09AM (#22749424)
The installation UX needs not be improved. It needs the holes Zoom abused fixed, so that it can no longer circumvent asking for the user's final consent. There is absolutely no reason Zoom should get away with intentionally abusing the platform they're given.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by jcelerier on Wednesday April 01, 2020 @01:03PM (#22750943)
> It needs the holes Zoom abused fixed, so that it can no longer circumvent asking for the user's final consent.

but... installing zoom is already asking for my consent, through an OS prompt. Do you want to have to type your user password two times for every app you install or what ?

[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by randoglando on Thursday April 02, 2020 @01:14AM (#22756407)
It could prevent an app from posing as "System" in the prompt for starters.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by ratww on Saturday April 04, 2020 @09:53PM (#22783105)
It needs both.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by aledthemathguy on Wednesday April 01, 2020 @08:18AM (#22747871)
1. Built an app that violates every security concern. 2. Gain massive traction because of its easy-of-use ("it just works"). 3. Become ubiquitous. 4. Fix the security bugs. 5. You won.
[ Parent | on HN ]
Re:Zoom has a signed binary that runs any unsigned script by e12e on Wednesday April 01, 2020 @10:06AM (#22748567)
I'm afraid step 4 is optional.
[ Parent | on HN ]