Apple updates Mac to fix faulty video conferencing app

Pedestrians use crosswalk in large metropolis

Jonathan Leitschuh, the tech veteran who first spotted the problem late this March said that the problem is caused by the way Zoom is programmed to set up meetings and video conferences. Now, according to a report by TechCrunch, Apple has pushed out an update silently to the macOS which removes the Zoom web server. When users visited these websites again, an attacker could have easily accessed the victim's webcam at any time via the web server; and being a standalone software, the web server remains in the Macs that had Zoom installed, and stays there even when the app is removed completely by the user.

If a user has ever installed the Zoom client and then uninstalled it, the Mac still has a localhost web server that will re-install the Zoom client, without requiring any user interaction besides visiting a webpage. The update will now prompt Mac users to voluntarily open the app, instead of opening it automatically as it did previously. It's used by 750,000 companies around the world to conduct their business, including such big names as Nasdaq, the U.S. Centers for Disease Control and Prevention, the U.S. Department of Homeland Security, and the U.S. Department of Energy.

The update is not that indispensable since the app has already issued its patch, but this ensures that people running older Zoom releases won't be vulnerable as before.

Research: 'Stranger Things' Driving New And Return Subscribers For Netflix 07/11/2019
The third season of ST was viewed by 40.7 million in the first four days of its release, marking a record for Netflix. Among those millions of viewers who happily tore through the new season was the CEO of a Netflix competitor.

A zero-day Zoom vulnerability could allow third parties to snoop on videoconferencing calls, reactivate uninstalled apps and conduct other malicious activities. Since Mac computers have different architecture compared to Windows-based ones, Zoom for Mac installs a standalone web server on every computer to make connectivity easier.

If you uninstall Zoom, that web server persists and can reinstall Zoom without your guidance.

"We appreciate the hard work of the security researcher in identifying security concerns on our platform", wrote the company. The tech giant noted it took this step "to protect users from the risks posed by the exposed web server". "A very poor decision by the folks at Zoom". This is the process ID number of Zoom's phantom web server.

Related News:



Most liked

Ravindra Jadeja ripped me apart on all fronts: Sanjay Manjrekar
Jadeja displayed an all-round performance against the Kiwi side as he played a knock of 77 runs and went on to take one wicket. New Zealand survived Jadeja's late onslaught to stun India by 18 runs in a low-scoring thriller on Wednesday.

Meghan Markle Called "Nightmare" By Wimbledon Official For Wearing Jeans
Interestingly, and without explanation, Wendy said that Markle didn't get the job, even though she was qualified to get it. Some netizens, however, pointed the finger at Morgan for allegedly targeting Meghan because of her race.

Federer relishing long-awaited Nadal Wimbledon showdown
Federer is the first player to win 100 matches at one Grand Slam tournament. Other than that, I've won in straight sets and played really well.

Brexit Party backing Wetherspoon boss says Boris Johnson will be 'useful' PM
Stepping behind the bar, Mr Johnson pulled a pint of Knight Of The Garter from the Windsor and Eton Brewery. Johnson was forced to walk on, muttering "we've already had one".

New Zealand stun India by 18 runs to reach World Cup final
Kohli lauded India's show overall in the World Cup, only pointing to stray instances of poor shot selection as areas for improvement.

Asian markets cautious as everything rides on dovish Powell
The S&P 500 index and the Dow Jones Industrial Average each rose about 0.6% in the first half-hour of trading Wednesday. The Fed chair went on to reiterate that the central bank would "act as appropriate" to sustain economic expansion.

Oops! MLB All-Star scoreboard has rough night in Cleveland
McNeil, who saw his headshot swapped out for Jacob deGrom's when he came up to bat, was particularly unhappy with the situation. He began his career in Cleveland , and it was only fitting the big left-hander got to say goodbye in his final season.

Shaun Livingston not planning to retire after being waived by Warriors
ESPN's Adrian Wojnarowski reported Tuesday that Livingston was being waived. The 33-year-old, however, does not intend to retire.

Trump's effort to put drug prices in ads now in limbo
The companies also contended the rule was "compelled speech" that would have violated their First Amendment rights. The statement added the ruling sides with big pharma and the leaves "patients and families as the real victims".

Bank of Canada makes its latest interest rate announcement
Macdonald said she doesn't think the anticipated US slowdown later this year will be enough to warrant a rate cut by the Fed. Odds of a rate cut also ticked up higher, though investors are still not fully pricing in move over the next 12 months.

Biden, Harris join Warren to promise teacher as ed secretary
Schools were segregated when she was a kid and she recalled not meeting a black girl her age until leaving for college. According to a recent CNN poll, the California senator's support jumped to 17%, putting her second behind Biden's 22%.

Manhattan judge denies DOJ's bid to swap census case lawyers
Trump's administration has faced numerous roadblocks to adding the question , including the Supreme Court's ruling that blocked its inclusion, at least temporarily.

Pixel Launcher in Android Q Gets Swipe Down to See Notifications Gesture
That last point seems awfully optimistic considering Samsung hasn't even managed to release its folding phone yet. In Beta 5, you can swipe in diagonally from the lower left or right corner to access Assistant.

Solskjaer optimistic De Gea won't run contract down
You have to have the right players at the right price and if you look at the squad we've got now there are so many good players". They're fantastic players, there's loads of players here that I know are going to be successful at this club.

How to watch NYC's ticker tape parade for the U.S
The so-called ticker tape parade is named for the long strands of ticker tape that used to be showered down from office buildings. Fans who attended the World Cup finals in Lyon, France started chanting "Equal pay!" after Team USA won the championship game.