Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is why I only run Zoom in Firejail.


I just decline Zoom meetings while politely saying “our cyber security division does not allow us to use Zoom.” Then send an alternative invitation. So far it seems to work just fine.


Doesn't work so well when your security team are the ones mandating you use zoom.


What do you recommend to use instead?


Jitsi Meet.


FWIW it's possible to run Zoom in a web browser, but they make it annoying. https://techcrunch.com/2020/03/20/psa-yes-you-can-join-a-zoo...


Yep. I run it in web browser in separate user account made for that purpose.


i run the snap Zoom on Ubuntu


Is that more secure? Snaps seem to be shit for performance, so I avoid them by default, but maybe I should be favouring them when I have security concerns.


Not really.

https://github.com/ogra1/zoom-snap/blob/065831f1e83c1230810a...

It has the "home" permissions which means it can write "sudo pwn" into your ~/.bashrc, which will of course pwn you.


By default (without -—classic) on install) they run in a chroot. Makes saving files sent to you a hassle as it can’t write to your downloads directory.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: