News for hackers. Stuff that matters.
Re:Zoom has a signed binary that runs any unsigned script by sebazzz on Wednesday April 01, 2020 @01:10PM (#22751024)
Ah, the classic "fix it just to shut the error up" without actually looking at the cause. Lowest bidder contractor probably.
Re:Zoom has a signed binary that runs any unsigned script by philsnow on Wednesday April 01, 2020 @01:17PM (#22751118)
I had some audio issues today on a zoom and they helpfully asked for me to sudo to fix the problem

https://i.imgur.com/oCqmZZ3.png

"just to shut the error up" is about right.

Re:Zoom has a signed binary that runs any unsigned script by ac29 on Wednesday April 01, 2020 @02:17PM (#22751842)
Its amazing how many Zoom screenshots have spelling or grammar errors, like this one. For a supposedly US based company, its pretty clear a lot of the UI text isn't written by a native English speaker.

I'm not intedning to demean non-native English speakers or their ability to write code - but this looks pretty bad from a QA standpoint.

edit: elsewhere in the thread its shown most of the software engineering team is in China, which explains this.

Re:Zoom has a signed binary that runs any unsigned script by drwl on Wednesday April 01, 2020 @01:47PM (#22751465)
what version of macos are you using?
Re:Zoom has a signed binary that runs any unsigned script by youareostriches on Wednesday April 01, 2020 @01:28PM (#22751267)
Actually, killing coreaudiod can be necessary every once in a while.
Re:Zoom has a signed binary that runs any unsigned script by bink on Wednesday April 01, 2020 @05:04PM (#22753492)
Having worked with CSP this isn't really something that can be fixed. If you disable scripts from all but approved sources your reporting URI will be flooded with reports from browser extensions and malware trying to inject code. The best you can do is silence the reports after they arrive (or in this case just allow them, yuck).
Re:Zoom has a signed binary that runs any unsigned script by amenghra on Thursday April 02, 2020 @03:27PM (#22762695)
You are supposed to set a strict policy and disable the reporting. Reporting is for dev/debugging purpose, it’s not meant to be the end state.