Wednesday, 23 October, 2019

Apple quietly updates Macs to remove Zoom’s risky web server

Security Vulnerability in Video Conferencing App Zoom Allows Websites to Hack Into your Mac’s Camera Apple quietly updates Macs to remove Zoom webcam exploit
Sandy Mccarthy | 11 July, 2019, 10:55

"The little adhesive camera covers available by the dozens at every computer conference or for a couple dollars on Amazon are a much better solution that relying on software to do the right thing", said Bailey. The TechCrunch report says Zoom was notified of the Mac update.

As first spotted by TechCrunch, Apple has quietly released a Mac update that removes this hidden web server, preventing it from re-installing the client after the user has uninstalled it. MacOS users aren't required to take any action in relation to this update - everything is automatic.

Of particular issue, Leitschuh found that even if a Mac user had uninstalled the Zoom client, a localhost web server would remain on the user's machine that re-installed the client without any interaction from the user beyond visiting a Web page.

Calling the flaw "bananas", MetaFilter founder Matt Haughey wrote on Twitter that he clicked on one of the proof-of-concept links shared by Mr. Leitschuh and he managed to get connected to three other users.

Zoom said that it had "no indication" that any of the millions of people who use its software had ever fallen victim to the software flaw, and said that it would be "readily apparent" if anyone had access to the camera because the video application is created to be the top window on a user's computer screen.

Turkey's 2nd ship to drill off eastern Cyprus despite European Union warnings
A foreign ministry statement "stressed the importance of non-escalation and commitment to respecting and implementing global law". It also issued arrest warrants for Fatih's crew, accusing the ship of breaching the republic's sovereign territory.

Zoom also told BuzzFeed News that it doesn't even plan to add a dialog window to simply ask users if they would like to join a meeting after clicking an invite link. Although Zoom had released an emergency patch to remove the Web server, it seems Apple did not want to wait for the users to install the patch.

The researcher says he contacted Zoom on March 26, giving the company a public disclosure deadline of 90 days. We expect the web server issue to be resolved today.

He demonstrated that any website can open up a video-enabled call on a Mac with the Zoom app installed.

By Wednesday, that differentiator was reduced, as the company announced in a highly-updated blog post that it would walk back back its local web server support in a patch prepared for Tuesday night.

Recommended

  • Usman Khawaja ruled out of WC with hamstring injury

    Usman Khawaja ruled out of WC with hamstring injury

    It is worth mentioning that even Wade has performed incredibly well in the ongoing Australia A tour of England . Khawaja helped get the target down to 25 off 12 balls before he was bowled for 18 by Kagiso Rabada .
    Djokovic into ninth Wimbledon semi-final

    Djokovic into ninth Wimbledon semi-final

    Roberto Bautista has reached his first Wimbledon semi-final, having gone on a run that has even surprised the player. Rafa and Federer share one of the greatest rivalries in tennis meaning that this should be an outstanding match.
    AFCON 2019 - Nigeria 1-1 South Africa

    AFCON 2019 - Nigeria 1-1 South Africa

    The Super Eagles showed terrific determination to hit back from 2-1 down and beat favorites Cameroon , 3-2, in the round of 16. We recommend interesting sports viewing and streaming opportunities.
  • Kane Williamson gets revenge on Virat Kohli for 2008 semi loss

    Kane Williamson gets revenge on Virat Kohli for 2008 semi loss

    The ball rolled across to square leg, Martin Guptill was swift to the ball, a one-handed pickup and he threw the stumps down. I think it's the skill level that was on display for everyone and it made life very hard for the batsmen".
    Warriors To Waive Veteran Guard Shaun Livingston

    Warriors To Waive Veteran Guard Shaun Livingston

    Livingston was set to make $7.7 million in 2019-20 but only $2 million of that is guaranteed. Golden State is hard capped due to the D'Angelo Russell sign-and-trade deal with the Nets.
    Qualcomm 215 mobile platform announced: Key features

    Qualcomm 215 mobile platform announced: Key features

    Similarly, the Snapdragon 215 is the first in the Snapdragon 200-series to support 64-bit Android platform as well as 64-bit apps. The DSP doesn't just stretch audio play time, it also works for sensor processing for things like the Global Positioning System .
  • Georgia baker mistakes 'Moana' birthday cake request for 'marijuana'

    Georgia baker mistakes 'Moana' birthday cake request for 'marijuana'

    A woman who ordered a Disney-themed cake for her daughter's birthday received a confection that was far less kid-friendly. A Georgia mom says her thick accent may be to blame for a birthday cake mix-up at a local Milledgeville Dairy Queen.
    Violent Family Brawl Breaks in Disneyland

    Violent Family Brawl Breaks in Disneyland

    The police department has stated that an investigation is underway to determine if charges should be filed in the incident. But alas, multiple men and women started fighting outside of Goofy's Playhouse , all of which was captured on camera.
    Flash flooding in DC turns roads into rivers

    Flash flooding in DC turns roads into rivers

    Flooding led to electrical outages that closed the National Archives Museum, according to a statement from the museum. Emergency management said by 8:50 a.m., numerous water rescues and road closures occurred in Montgomery County.
  • Federal Reserve chairman signals cut in USA  interest rates

    Federal Reserve chairman signals cut in USA interest rates

    But he warned of economic weakness in other major economies, and a downturn in business investment driven by trade war worries. Several of the central bank's policymakers said interest rates should come down to soften the blow of a U.S.
    Iran urges United Kingdom  to free captured oil tanker, calling it 'maritime piracy'

    Iran urges United Kingdom to free captured oil tanker, calling it 'maritime piracy'

    AbbasAraqchi said Iran was continuously in touch with the British government and is now pursuing legal channels on the seizure. Emmanuel Bonne, a French presidential envoy, is in Iran this week for talks aimed at resolving the crisis.
    Hurricane Hunters to investigate Gulf Coast tropical system on Wednesday

    Hurricane Hunters to investigate Gulf Coast tropical system on Wednesday

    Southeastern Texas may also receive similar rainfall, but only if the storm were to move ashore along the western Gulf coast. A tropical storm watch means that tropical storm conditions are possible within the watch area, generally within 48 hours.

More than 20 killed in Papua New Guinea More than 20 killed in Papua New Guinea William Bando acknowledged he had now called for on the least 100 extra police to pork up the prevailing 40 local officers. Tribal violence has killed 23 people, including pregnant women and children, in Papua New Guinea's highlands region .

US Billionaire, ex-Presidential Candidate Ross Perot Dies at 89 US Billionaire, ex-Presidential Candidate Ross Perot Dies at 89 Henry Ross Perot , the American billionaire , politician and twice an ingenious Presidential contender in the 90s, dies at 89. Perot had firsthand knowledge of how inefficiently IBM's customers were using their system, so he set out to change that.

United Kingdom ambassador to USA quits days after leaked cables United Kingdom  ambassador to USA  quits days after leaked cables As the current Foreign Office minister Alan Duncan put it, by six times refusing to back the ambassador , Johnson had thrown him under a bus.

Teen is fatally stabbed at convenience store, allegedly for playing rap music Teen is fatally stabbed at convenience store, allegedly for playing rap music The killing has sparked outrage nationwide, with people taking to Twitter with the hashtag: #JusticeForElijah . Adams is being held on a $1 million bond and is scheduled to have a preliminary hearing in court July 15.

Meghan Markle steps out and stuns with baby Archie Meghan Markle steps out and stuns with baby Archie The new parents chose to withhold the names of the godparents of the seventh in line to the throne and only release pictures to the media afterwards.

Floyd Mayweather Got Absolutely Embarrassed During Charity Basketball Game Floyd Mayweather Got Absolutely Embarrassed During Charity Basketball Game Floyd was playing defense against famous street hooper Larry " Bone Collector " Williams and he decide to go one on one with him. Mayweather is arguably the most confident athlete in the world, so it's not surprising that he wanted to guard Williams.

Google Stadia explained in more detail Google Stadia explained in more detail Will this work with your phone? According to Google , "You can use any personal Google Account when you sign up for Stadia ". What happens is the Stadia Controller connects via BLE for setup and connects via WiFi for actual gameplay.

Plane passenger films viral video showing dramatic engine fault in mid-air Plane passenger films viral video showing dramatic engine fault in mid-air Almost 150 passengers on Delta Flight 1425 had taken off from Atlanta when one of the aircraft's engines had a problem. A passenger-recorded video of the left engine shows a partially detached spinner bouncing around the inlet.

Bank of Canada bumps up 2019 growth forecast, keeps rates steady Bank of Canada bumps up 2019 growth forecast, keeps rates steady The bank raised Canada's domestic growth target for 2019 to 1.3% from 1.2% but cut its 2020 growth forecast to 1.9% from 2.1%. As a result, Canada may end up with the highest policy rate among advanced economies within the next 12 months.

Judge Blocks DOJ Request To Switch Lawyers In Census Citizenship Case Judge Blocks DOJ Request To Switch Lawyers In Census Citizenship Case Furman did allow two attorneys who had previously left the Justice Department or its Civil Division to be pulled from the case. The Hill reports that Barr has not provided specific details on how the citizenship question will be added to the census.

Supplemental Draft: How high of a pick will Jalen Thompson cost? Supplemental Draft: How high of a pick will Jalen Thompson cost? Sometimes that quality works against him, as Thompson can be seen whiffing on some tackles while trying to deliver big blows. Thompson held a workout in Los Angeles on Monday that was reportedly attended by representatives of 26 teams.

Stolen Pomeranian returned to professional soccer player Stolen Pomeranian returned to professional soccer player Tuesday, according to the post. " Listen, whoever knows who broke into my crib, I'll pay you anything, I'm dead serious ". Yo, somebody please find my dog. "I know there's a lot of dog lovers out there. dogs are considered family members".

Forbes Highest Paid Celebrities: Kylie Jenner Beaten By Taylor Swift Forbes Highest Paid Celebrities: Kylie Jenner Beaten By Taylor Swift This is a major increase for Swift in the past year, over $100 million more than the $80 million she made in the previous year. The "Keeping Up With The Kardashians" star and beauty business owner isn't too far with a reported $170 million in earnings.

USA president lauds his administration's environmental record USA  president lauds his administration's environmental record Deere had added yesterday (July 8th) that the US President Donald Trump would speak in the event. "Environmental improvement and economic growth has gone hand in hand for decades".

Iran: U.S. made huge mistake by exiting nuclear deal Iran: U.S. made huge mistake by exiting nuclear deal Wolcott reiterated that Washington believes the deal was ineffective, but remains "open to negotiation without preconditions". Emmanuel Bonne arrived in the Iranian capital on Tuesday afternoon, French Foreign Minister Jean-Yves Le Drian said.