News for hackers. Stuff that matters.
Re:U.S. sues Apple, accusing it of maintaining an iPhone mon... by scarface_74 on Thursday March 21, 2024 @03:35PM (#39783350)
It’s reasonably secure because no one has bothered to write malware for it.

But there was nothing on the Mac stopping Zoom from putting a backdoor web server on Macs.

Re:U.S. sues Apple, accusing it of maintaining an iPhone mon... by AprilArcus on Thursday March 21, 2024 @03:58PM (#39783632)
Apple could revoke Zoom's signing certificate, if they were discovered to be doing this.
Re:U.S. sues Apple, accusing it of maintaining an iPhone mon... by andrewaylett on Thursday March 21, 2024 @04:18PM (#39783851)
That's the thing: they were. Apple did act, but not by revoking the certificate.

https://www.theverge.com/2019/7/10/20689644/apple-zoom-web-s...

Re:U.S. sues Apple, accusing it of maintaining an iPhone mon... by xp84 on Friday March 22, 2024 @09:53AM (#39790781)
The thing is, Zoom was not being malicious, and weren’t any exploits hypothetical? That server was a good idea, because it allowed launching Zoom calls without the constant warning popups that Apple injected into the process of launching of a custom URI scheme, which was what it used before and after that era. With the local server it was one click to join. Calling it “a web server” was a scare tactic to get people to think Zoom was serving a site to the public, or hosting your public files.

No, I don’t want Apple to set the precedent that they will delete your whole business if you make an architecture choice they feel is not perfect.