Here's the first setting you should change in Zoom.įor those of you who have the Zoom app installed on your Mac, Leitschuh, in his Medium post, lists directions to neutralize the local server in his Medium post. This re-install 'feature' continues to work to this day." "If you've ever installed the Zoom client and then uninstalled it, you still have a localhost web server on your machine that will happily re-install the Zoom client for you," Leitschuh writes, "without requiring any user interaction on your behalf besides visiting a webpage. Zoom achieves its click-to-join function by installing a web server on your computer - which can reinstall Zoom without your permission. Uninstalling the Zoom app from your Mac isn't enough to fix the problem, either. He added that this would allow any webpage to denial-of-service a Mac by repeatedly joining you to an invalid call. But Leitschuh in a Medium post explained that he months ago discovered Zoom achieves this in insecure ways, allowing websites to join you to a call as well as activating your webcam without your permission.
Zoom is most notable for its click-to-join feature, through which clicking on a browser link takes you directly to a video meeting in Zoom's app. On Monday, security researcher Jonathan Leitschuh gave Mac users another reason to fret over their webcams - there's a security flaw in the Zoom video-conferencing app. Your computer's webcam has always been a gateway for potential security intrusion, which is why people like Mark Zuckerberg and ex-FBI head James Comey put tape over theirs.
0 kommentar(er)
