Yeah this is why Zoom is constantly pushing you to download their fucking app, and exactly why I don’t fucking do it.
Same with discord… it lives inside a browser tab only
Affected users who are running X11 should audit their Zoom version, isolate conferencing workloads onto dedicated hardware or virtual machines, or move to a browser-based version of Zoom where sandboxing prevents unprompted clipboard access.
Anyone running a Linux system with Wayland should be OK.
Anyone running a Linux system with Wayland should be OK.
And this is exactly why I put up with the functionality regressions of Wayland over X11 for the first few years.
It’s been quite a while since I’ve had issues with Wayland, but for a while there I was convinced that the only testing done on it was on a single screen laptop, because as soon as you attached a second standalone monitor (or third or fourth) all hell broke loose.
I understood that all X11 apps running under Wayland are running inside the same environment, or is that wrong?
In other words, all X11 clipboards are shared.
I’m also not sure about clipboard isolation, since I’d have thought that copy/paste between Wayland and X11 would be expected.
The Wayland spec doesn’t allow for clients to arbitrarily get clipboard data under typical conditions. Since most applications these days are running under Wayland, it should be that copying to the clipboard isn’t exposed to X11 clients most of the time (only when copying from or pasting into XWayland).
Also Flatpak would be helpful in this case too, if there was a package for.
Thank you. This is the summary I needed.
Stallman was right.
On some things.
On others he couldn’t be more wrong.
I mean yes, but why this time?
Would the sandbox permissions in Flatpak be able to block this?
I think so, but the sandbox can easily be broken in theory from what I heard. It’ll probably be fine as long as Zoom doesn’t add malicious code that does such a thing.
Why is Zoom even still popular? Remember when Apple had to push a security update to undo its insane HTTP daemon? I guess we’re all just okay trusting their janky-ass Windows adjacent UI and security model.
Why is Zoom even still popular?
I guess because that’s a standard tool everyone in business has. Also the Microsoft alternatives (including Skype after buyout) sucks. I don’t use these tools (used Skype before Microsoft purchased it), so this is not my personal opinion.
jitsi is good feature wise, but it’s not widely advertised…
deleted by creator
this. my last companies security team was crazy aggressive but would allow zoom meetings right after the big security incident.
I don’t even understand how it goes popular in the first place when Skype and Google Meet already existed before the Pandemic. It even had a whole “Chinese company/servers” scare too but it still held on.
