Not the first time Zoom abuses privilege.

A few years back, there was something about gaining root on MacOS via Zoom due to shady execution on their end.

They've lost my trust since then, and I'll only run it sandboxed: https://gist.github.com/cielavenir/02f322e322a2a3555dbf2b38f...

I always ask (1) why does an app require installation and (2) why would it require root?

There are valid answers for both, but realistically, all a videoconferencing app should need (apart from audio and video and maybe screen sharing) is to store a config file.

There's no legitimate use for it accessing privileged or private paths.

▲

mcintyre1994 2 hours ago | parent | next [-]

Out of interest why do you still use the app and not just use it in the browser? I feel much more secure having it in the browser sandbox and everything I care about works in the browser.

	▲	rmellow 2 hours ago \| parent [-]
		99% of the time I use the browser. However, the video quality in the browser is worse, so depending on the use case I might have to use the app (via sandbox). It's been years since I've had to though.

▲

wolvoleo 2 hours ago | parent | prev [-]

Yes Apple even blocked their app because they refused to fix it. Eventually they did and unfortunately they were allowed again.

It wasn't really root as much as an open backdoor on a TCP port as far as I recall.