12/19/2023 0 Comments Camtwist saved filesOutput from codesign -d -entitlements :- /Applications/. Sealed Resources version=2 rules=13 files=88 (BJ4HAAB9B3)Īuthority=Developer ID Certification Authority I'll dig through the logs and see if there is any more information on the deltas it sends through and where they come from. codesign -d -entitlements :- /Applications/.app/Īlso, it might be worth running open ~/Library/Logs/zoominstall.log to check out the install log and see if anything fishy is going on there.mdls -name kMDItemVersion /Applications/.app/.When you run the following commands, what it the output? My logs seem to indicate that while the latest delta was install on April 4th, the code signing certificate has a timestamp of "at 4:06:02 AM" which would correspond with the release of 4.6.9, so either they lied, or they going out of their way to release separate new certificates where one is intentionally gimped. So this would lead me to think that, in typical Zoom style, that while fresh installs might allow HR & SIP to their jobs, upgrades only upgrade features and not security? I'm not too sure. It still has both .disable-library-validation and .disable-executable-page-protection set to true. I had upgraded from 4.6.8 to 4.6.9, and Zoom's entitlements are the same. Now in relation to the reported issues, here are a few thing's I've observed: Always Searching, Where to Find and Download Your favorite Software for Windows, then - is Your Choice. CamTwist is a software package that lets you add special effects to your video chats as well as being a simple video switcher. I knew Zoom was doing pretty stupid stuff (like using AES ECB for audio and video □♂️), but that privilege escalation stuff (and for a user-space shell script at that!) is crazy, especially in a notarized production app! Camtwist is an excellent tool if you are a Mac user and is completely free. Hey so a couple of things: First, that was very interesting article.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |