![]() ![]() Output from codesign -d -entitlements :- /Applications/. Sealed Resources version=2 rules=13 files=88 (BJ4HAAB9B3)Īuthority=Developer ID Certification Authority ![]() I'll dig through the logs and see if there is any more information on the deltas it sends through and where they come from. codesign -d -entitlements :- /Applications/.app/Īlso, it might be worth running open ~/Library/Logs/zoominstall.log to check out the install log and see if anything fishy is going on there.mdls -name kMDItemVersion /Applications/.app/.When you run the following commands, what it the output? My logs seem to indicate that while the latest delta was install on April 4th, the code signing certificate has a timestamp of "at 4:06:02 AM" which would correspond with the release of 4.6.9, so either they lied, or they going out of their way to release separate new certificates where one is intentionally gimped. So this would lead me to think that, in typical Zoom style, that while fresh installs might allow HR & SIP to their jobs, upgrades only upgrade features and not security? I'm not too sure. It still has both .disable-library-validation and .disable-executable-page-protection set to true. I had upgraded from 4.6.8 to 4.6.9, and Zoom's entitlements are the same. Now in relation to the reported issues, here are a few thing's I've observed: I knew Zoom was doing pretty stupid stuff (like using AES ECB for audio and video □♂️), but that privilege escalation stuff (and for a user-space shell script at that!) is crazy, especially in a notarized production app! ![]() To support development, please consider donating.Hey so a couple of things: First, that was very interesting article. The software is free but it is donationware. You can also select it in the Adobe Flash Player. CamTwist is an integrated webcam that can be viewed by most modern browsers. You don't need to download and install any software. Do you want higher quality? CamTwist fully supports Flash Media Live Encoder and Telestream's Wirecast, allowing you live streaming HD quality content online.
0 Comments
Leave a Reply. |