The Zoom installer let a researcher hack his way to root access on macOS

Re:The Zoom installer let a researcher hack his way to root ... by ardel95 on Saturday August 13, 2022 @04:57AM (#32448078)

It's way past time we accepted that all current operating systems are single user environments. Any access to the system means full access to the system.

[ Parent | on HN ]

Re:The Zoom installer let a researcher hack his way to root ... by lokedhs on Saturday August 13, 2022 @05:21AM (#32448185)

This is precisely the realisation that is the basis of Qubes OS. The entire system is basically an admission that you cannot hope to preserve security on a system where you have users running stuff.

Just allow them to do anything, but isolate the environments such that it doesn't matter if one is compromised, because there is nothing to compromise other than the application itself.

Strongly recommended if you're willing to live without GPU support.

[ Parent | on HN ]

Re:The Zoom installer let a researcher hack his way to root ... by thehappypm on Saturday August 13, 2022 @08:27AM (#32449247)

Yeah. The browser is the only safe haven. And even the browser has its issues..

[ Parent | on HN ]

Re:The Zoom installer let a researcher hack his way to root ... by throwawaypcking on Saturday August 13, 2022 @10:42AM (#32450361)

Linux isn't this way. I can understand Windows and perhaps Mac users have this predicament.

[ Parent | on HN ]

Re:The Zoom installer let a researcher hack his way to root ... by ardel95 on Saturday August 13, 2022 @01:40PM (#32452042)

May I introduce you to a long list of Linux breakout and privilege escalation CVEs.

[ Parent | on HN ]