48 Pixels

From TechCrunch:

Apple has released a silent update for Mac users removing a vulnerable component in Zoom, the popular video conferencing app, which allowed websites to automatically add a user to a video call without their permission.

The Cupertino, Calif.-based tech giant told TechCrunch that the update — now released — removes the hidden web server, which Zoom quietly installed on users’ Macs when they installed the app.

Good, I was waiting for this to happen 👍

From BuzzFeed News:

“We consciously enabled the ability to have meeting joins initiated from within an iframe on a webpage,” said Farley, who also noted that the company is not disabling the capability after the security researcher’s findings. Asked whether it was a concern that such iframes require no click from the user to join a meeting, he replied, “No, that’s not a security concern.”

The above is a quote from Zoom’s Chief Security Officer Richard Farley.

In a nutshell, Zoom is purposely bypassing security steps put in place by browser manufacturers and don’t care about the security implications because they think there aren’t any 🤦‍♂️

I already removed the app and the locally running web server from my Mac, but I’m still stuck using the iPad app because we use Zoom at work (for now) otherwise I’d completely ditch it in a heartbeat.

From CNN:

An appeals court said Tuesday that President Donald Trump violated the First Amendment by blocking users on Twitter.

The 2nd US Circuit Court of Appeals upheld a New York judge’s ruling and found that Trump “engaged in unconstitutional viewpoint discrimination by utilizing Twitter’s ‘blocking’ function to limit certain users’ access to his social media account, which is otherwise open to the public at large, because he disagrees with their speech.”

Good. This should apply to anyone in public office. Public/elected officials should be required to hear public opinion, even if (or especially when) it differs from their own.

From Jonathan Leitschuh:

A vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission. The flaw potentially exposes up to 750,000 companies around the world that use Zoom to conduct day-to-day business.

Hoooooo boy 🤦‍♂️

From Motherboard (emphasis mine):

Several departments inside social media giant Snap have dedicated tools for accessing user data, and multiple employees have abused their privileged access to spy on Snapchat users, Motherboard has learned.

I am SHOCKED 🙄

Oh wait, no, I’m not. Can we just burn the entire tech industry to the ground now?

From CNET:

Instagram’s website leaked user contact information, including phone numbers and email addresses, over a period of at least four months, a researcher says.

🤦‍♂️

It seems like there’s a similar article every week and every time I consider going back, I’m reminded of why I left.