MP Hangout and Zoom vulnerability

[Ken Finnigan]

Given the announcement today that there's a vulnerability with Zoom for Mac users [1], I'm not comfortable continuing to use it for the MP Hangouts.

What do others think?

Can we use an alternative?

Ken

[1] - https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5

[Marcia Peterson]

I agree, prefer Blue Jeans.

--
You received this message because you are subscribed to the Google Groups "Eclipse MicroProfile" group.
To unsubscribe from this group and stop receiving emails from it, send an email to microprofile...@googlegroups.com.
To post to this group, send email to microp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/microprofile/CAKeeVe7%3DbmwwO8mS7rsMsKbM80DhJ%2Baptbh62PE-syK3rAL2xQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Markus Eisele]

https://twitter.com/jdpearce/status/1148507087862947840?s=21

$> lsof -i :19421

$> kill -9 <pid>

$> rm -rf ~/.zoomus

$> touch ~/.zoomus

If you want to patch this vulnerability for yourself you can do the following.
Disable the ability for Zoom to turn on your webcam when joining a meeting.

M

To view this discussion on the web visit https://groups.google.com/d/msgid/microprofile/CAEx7UejRfc0EfbW5PpoF7x1f1FfCRW8%3DB92cogFngUpCNq8RwA%40mail.gmail.com.

[Ken Finnigan]

Does that fix the vulnerabilities around the local web server?

To view this discussion on the web visit https://groups.google.com/d/msgid/microprofile/CAKYV%3D%2B8r9sLLa39NCJiMM-Xc8cL-dOs6JWbhVtmd2Nar9bU0Hw%40mail.gmail.com.

[Markus Eisele]

Yep.

To view this discussion on the web visit https://groups.google.com/d/msgid/microprofile/CAKeeVe7VqyxedGP7uO_tpRxML0FROufh-pD5XMeJuZRCt2RVTg%40mail.gmail.com.

[Edwin Derks]

So Zoom it stays for the hangout today?

To view this discussion on the web visit https://groups.google.com/d/msgid/microprofile/CAKYV%3D%2B_X%2BOa-srHMz4oiGVLKzL301m%2B3PbSZuO4vB5_q%2BeK92g%40mail.gmail.com.