all 19 comments

sorted by: hot top controversial new old
[–] 9 points 1 day ago (3 children)

Why is Zoom even still popular? Remember when Apple had to push a security update to undo its insane HTTP daemon? I guess we’re all just okay trusting their janky-ass Windows adjacent UI and security model.

  • source
  • hideshow 3 child comments
  • [–] 5 points 14 hours ago

    Why is Zoom even still popular?

    I guess because that's a standard tool everyone in business has. Also the Microsoft alternatives (including Skype after buyout) sucks. I don't use these tools (used Skype before Microsoft purchased it), so this is not my personal opinion.

  • source
  • parent
  • [–] 43 points 1 day ago (6 children)

    Affected users who are running X11 should audit their Zoom version, isolate conferencing workloads onto dedicated hardware or virtual machines, or move to a browser-based version of Zoom where sandboxing prevents unprompted clipboard access.

    Anyone running a Linux system with Wayland should be OK.

  • source
  • hideshow 6 child comments
  • [–] 8 points 1 day ago (1 child)

    I understood that all X11 apps running under Wayland are running inside the same environment, or is that wrong?

    In other words, all X11 clipboards are shared.

    I'm also not sure about clipboard isolation, since I'd have thought that copy/paste between Wayland and X11 would be expected.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 1 day ago

    The Wayland spec doesn't allow for clients to arbitrarily get clipboard data under typical conditions. Since most applications these days are running under Wayland, it should be that copying to the clipboard isn't exposed to X11 clients most of the time (only when copying from or pasting into XWayland).

  • source
  • parent
  • [–] 44 points 1 day ago

    Yeah this is why Zoom is constantly pushing you to download their fucking app, and exactly why I don't fucking do it.

  • source
  • [–] 10 points 1 day ago (1 child)

    Would the sandbox permissions in Flatpak be able to block this?

  • source
  • hideshow 1 child comment
  • [–] 10 points 1 day ago (2 children)
  • [–] 4 points 1 day ago (1 child)

    I'm going to have to go on some remote interviews sometime soon. I don't know if Zoom is the way those are usually done or if they use some other software that's more purpose-built for that. But whatever the case, I'll definitely have to figure out how to run whatever it is "in jail" somehow.

  • source
  • hideshow 1 child comment
  • [–] 1 point 2 minutes ago

    I would recommend running untrusted proprietary software as a webapp if possible, it will not be able to be as intrusive in that case compared to native app even with all the sandboxing (flatpak, snap, etc...). Or Virtual machine as the most secure option, but it may be overkill.

  • source
  • parent