A paid Zoom One subscription or add-on license is required to use certain product features. Any free or paid license can be used with the mobile app Multi-task on your iPhone with Picture and Picture or iPad with Split View Use the mobile app to start a Zoom Rooms meeting and share content Move a call or meeting between devices with a single click without interruption Stay focused on the road with Apple CarPlay supportĬustomize Siri Shortcuts for hands-free voice commands Share and annotate content during meetingsīrainstorm on virtual whiteboards, share them in chat, and access them later
Schedule a video meeting and join with a single clickĬhats and channels for messaging, file sharing, and more Place and accept calls or send SMS text messages Zoom also claimed that it used end-to-end encryption to protect calls, before admitting that it did no such thing.Work from anywhere with a single app that combines team chat, phone, whiteboard, meetings, and more. Notoriously, in 2019 Zoom installed a hidden web server on user devices, to try to enable single-click joining of calls, while in 2020 a bug was discovered that let attackers turn a Mac into a remote spying device. The company’s desire to be the easiest way of joining video calls has led it to seek to bypass security measures that protect a user’s computer. In April 2020, when pandemic remote working led to a 500% increase in daily traffic to the Zoom download page, some critics said the company’s software was “a privacy disaster” and even malware.
It is not the first time Zoom’s focus on frictionless use has led to a security hole. Normally, the company tries to ensure that is safe by limiting the installer to only operate on code that has been cryptographically signed by Zoom, but the bug discovered by Wardle means that an attacker could trivially bypass that protection and convince the installer to load and run any malware they want.
In order to make the user journey simpler, the installer continues to run in the background from the moment a user first installs zoom, and does so with “superuser” privileges, allowing it to change anything about the computer. It targets the Zoom installer, which the company uses to enable frictionless automatic updates.
The fix will eventually roll out automatically, but users can and should install it immediately upon opening the application by clicking on in the menu bar at the top left of the screen and then selecting “check for updates”.ĭiscovered by an independent security researcher, Patrick Wardle – whose brother Jeremy invented the popular game Wordle – the vulnerability was first presented at the Def Con hacking conference in Las Vegas last week. Users of Zoom on Macs should update the app, after the company issued a patch to fix a security flaw that could allow an attacker to take over their computers.
0 kommentar(er)
