Technology
Apple took action to fix Zoom flaw, which proves how serious it was
Yesterday, video conferencing service Zoom released an update for its Mac client, removing the controversial web server functionality that opened up the possibility of someone launching a video call on user’s computer without permission.
But now, TechCrunch reports that Apple decided to step in regardless, launching a silent update for Macs that removes Zoom’s web server functionality altogether.
The local web server, which Zoom used to quietly install on user computers, improved some usability aspects of Zoom, but opened up massive potential for misuse, as first documented by security researcher Jonathan Leitschuh.
Apple said the update protects past and present Zoom users from the vulnerabilities found by Leitschuh, and Zoom told TechCrunch that the company is “happy to have worked with Apple” on the update.
The fact that Apple moved in with a patch that fixes a third party app — something the company very rarely does — speaks volumes. A third party app that installs a local web server on your computer without telling you, allowing such “features” as automatically reinstalling the Zoom app even after you’ve uninstalled it, is horrible for your system’s security.
And the fact that Zoom initially downplayed the vulnerabilities, calling them “low risk,” and defended its use of the hidden web server, shows the importance of the work of independent security researchers, which are often the first to disprove such claims.
In a blog post Wednesday, Zoom CEO Eric S. Yuan wrote that the company would launch a public vulnerability disclosure program in the “next few weeks.” He also wrote that the company has “taken steps to improve our process for receiving, escalating, and closing the loop on all future security-related concerns.”
-
Entertainment7 days ago
What Robert Durst did: Everything to know ahead of ‘The Jinx: Part 2’
-
Entertainment6 days ago
This nova is on the verge of exploding. You could see it any day now.
-
Business6 days ago
India’s election overshadowed by the rise of online misinformation
-
Business6 days ago
This camera trades pictures for AI poetry
-
Business7 days ago
CesiumAstro claims former exec spilled trade secrets to upstart competitor AnySignal
-
Business5 days ago
TikTok Shop expands its secondhand luxury fashion offering to the UK
-
Business6 days ago
Boston Dynamics unveils a new robot, controversy over MKBHD, and layoffs at Tesla
-
Entertainment6 days ago
Earth will look wildly different in millions of years. Take a look.