Apple quietly updates Macs to remove Zoom's risky web server

Apple quietly updates Macs to remove Zoom webcam exploit

Jonathan Leitschuh, a Boston-based software engineer, discovered that Zoom's conferencing software could be involuntarily activated on someone else's computer if someone visited a rigged web page or clicked a deceptive link.

The worrying security flaw was not stopped by uninstalling the app either as the web server, where the vulnerability was found, was not removed during this process.

The same problem isn't apparent on Windows computers, because they handle Zoom meetings differently - without the server installation.

Zoom, feeling the pressure from heavy media coverage of the security flaw in their Mac client that allows access to a user's webcam, released a fix for the issue Tuesday afternoon.

On Tuesday afternoon, company CEO Eric Yuan told Leitschuh and other researchers that Zoom would remove the local web server functionality it was using to bypass protections in Safari and facilitate instant meeting joins.

"This does not appear to be the case, as the first meeting with the researcher about how the vulnerability would be patched occurred only 18 days before the end of the 90-day public disclosure deadline", said Keary. Additionally, you can also disable the option to automatically turn on your camera when you join a Zoom video call. Older versions of its software installed an undocumented local web server on Macs.

Heads Up, Meghan And Hazza Shared Baby Archie's Adorable Christening Pics
She couldn't go due to other prior engagements, however, she was at Princess Charlotte and Prince George's christenings . Today The Duke and Duchess of Sussex's son Archie was Christened at the Private Chapel at Windsor Castle .

The communications provider also plans to introduce a new Uninstaller App for Mac to help the user easily delete both apps by this weekend.

The vulnerability impacts the Mac Zoom Client, according to Leitschuh, who explained on Medium that "any malicious website" could access a Mac's webcam without permission. "This re-install "feature" continues to work to this day". The company said that it wanted to ensure that users were protected from the risks the web server presented.

The challenge with something like this Zoom vulnerability is that users might simply be unaware of any danger.

Zoom initially defended its decision to keep the local web server as part of its application, saying other software vendors use the same approach.

Zoom says in a statement on Wednesday that it worked with Apple to get rid of the web server from Macs. It makes ideal sense not only because many users may not open Zoom for some time, but also because many of them had uninstalled the app.

The patch will also add a button that allows users to manually uninstall Zoom.

Related News:



Most liked

Inside the world premiere of The Lion King
Beyoncé pulled out all the stops when she attended the Lion King premiere at the Dolby Theatre in Hollywood on Tuesday night. One day I'm there Jon asked me to do some singing stuff, another day he asks me to do some lines.

Google Translate's camera translation feature now supports 60 new languages
And most of the languages can be downloaded onto your device, so that you can use the feature without an internet connection. This produces more accurate and natural translations, reducing errors by 55-85 percent in certain language pairs.

Galaxy Note 10 and Note 10
With the feature, you'll be able to use the Galaxy Note 10 as its own computer and wirelessly connect to keyboards and a mouse. Last year, the hero colour for the Galaxy Note9 is Ocean Blue and it comes with a contrasting yellow S Pen stylus.

Gatwick flights resumed after 'air traffic control issue'
According to Gatwick Airport's website, flights have resumed from 7.20pm United Kingdom time after almost two hours of chaos. Following an earlier air traffic control systems issue, flights to and from Gatwick have now resumed.

Operation Apocalypse Z Hits Call Of Duty Black Ops 4
You'll also be able to play as characters from both Primis and Ultimis storylines together for the first time. Additionally, the Alcatraz map debuts a nighttime atmospheric change complete with new Zombie enemies.

Android Q nerfs gesture navigation if you use a third-party launcher
In case the dark mode is not enabled, the regular bright white boot animation will be shown when you reboot your Pixel phone . That is to say; when Android Q rolls out, third party launcher users will see Androids former 3-button layout.

Man Utd boss Solskjaer upbeat over Alexis fitness
Solskjaer's squad is now lacking in midfield, though the Norwegian should consider the sale of Pogba should the right bid come in. Ole Gunnar Solskjaer's first preseason as Man United boss kicks off on Saturday the 13 of July against Perth Glory .

China To Launch its Own Cryptocurrency To Counter Facebook’s Libra
Among the hardest hit were cryptocurrency exchanges which have since the RBI ban either shut down or moved operations overseas . In other words, they are not comfortable with private tokens including Bitcoin , GlobalCoin, Ether, Ripple, etc.

Government clashes with its own business advisers over no-deal Brexit
The Tánaiste says there's no evil plan hiding on a shelf that would solve the issue of the border with Northern Ireland . For people living in border counties and in Northern Ireland, this will be really hard .

How to watch NYC's ticker tape parade for the U.S
However, that would still be far less than the $440 million allotted for male players in the 2022 World Cup. As she later said on ABC's " Good Morning America ", it's time to take action.

Taylor Swift is the world's highest-paid celebrities
Ed Sheeran , who is placed fifth in the list , is the highest-ranking Briton with estimated pre-tax earnings of $110m (£88m). The top highest-paid male celebrity on the list is rapper Kanye West with $150m (£120m) in earnings in third spot overall.

Powell Signals That Rate Cut Could Be Coming Soon
After the meeting, China and the United States agreed to resume trade talks and Washington promised no new tariffs. The Fed chair went on to reiterate that the central bank would "act as appropriate" to sustain economic expansion.

Nintendo Announces the Switch Lite, Coming This Fall
As far as game compatibility, Nintendo revealed that the Switch Lite will be able to play games that support handheld mode. Nintendo notes that there will be support for all existing Switch titles, although some games will have restrictions.

Appeals Court To Hear Obamacare Arguments
The Trump administration is trying to chip away at it, especially for those recipients who have so-called pre-existing conditions. Judge Jennifer Elrod, who was appointed to the 5th Circuit Court of Appeals by Republican President George W.

Joe Taslim joins James Wan's Mortal Kombat reboot
The web-short from screenwriter Oren Uziel gained enough popularity to spawn the web series Mortal Kombat: Legacy . The Mortal Kombat video game is basically fighters from different realms who are locked in battle.