Mac sandbox escape

Re:Mac sandbox escape by diebeforei485 on Wednesday April 29, 2020 @05:36PM (#23024671)

The latest version of Zoom (released yesterday) also has the entitlement to send Events to other applications. It's unclear why it requires this entitlement. Anyone know?

  [>] codesign -d --entitlements :- /Applications/zoom.us.app
  
  ...
  <key>com.apple.security.automation.apple-events</key>
  <true/>

[ Parent | on HN ]

Re:Mac sandbox escape by samuelg123 on Wednesday April 29, 2020 @06:38PM (#23025387)

I believe there’s a feature that allows others to take control of the screen. It could be related to this

[ Parent | on HN ]

Re:Mac sandbox escape by btilly on Wednesday April 29, 2020 @06:54PM (#23025526)

I had the same thought, but that feature is https://support.zoom.us/hc/en-us/articles/201362673-Request-... and needs permissions under Accessibility.

[ Parent | on HN ]

Re:Mac sandbox escape by judge2020 on Wednesday April 29, 2020 @08:49PM (#23026339)

Maybe they also intend to allow controlling single applications at some point.

[ Parent | on HN ]

Re:Mac sandbox escape by givinguflac on Wednesday April 29, 2020 @07:05PM (#23025626)

I would imagine it’s used for scheduling meetings in other apps.

[ Parent | on HN ]

Re:Mac sandbox escape by lonelappde on Wednesday April 29, 2020 @07:45PM (#23025940)

Which is horrific. It should export an event/intent for the user to to route.

[ Parent | on HN ]

Re:Mac sandbox escape by bkdbkd on Wednesday April 29, 2020 @09:17PM (#23026497)

iirc remote mouse & keyboard control was added recently.

[ Parent | on HN ]