Apple has pushed a silent Mac update to remove hidden Zoom web server (techcrunch.com)

Article summary

Apple has released a silent update for Mac users to remove a vulnerable component in Zoom, a popular video conferencing app, which allowed websites to automatically add a user to a video call without their permission. The update removes a hidden web server that Zoom installed on users' Macs when they installed the app. This server remained installed even if a user uninstalled Zoom and could reinstall the app without user interaction. The update will now prompt users if they want to open the app, whereas before it would open automatically.

Main themes

• Zoom vulnerability
• Apple silent update
• Mac security
• Malware definition
• Software uninstallation

What commenters say

• The Zoom server's behavior constitutes malware due to its ability to reinstall itself without user consent.
• The server's purpose was to make the service more convenient for users, but it was implemented in a way that disregarded security concerns.
• Intent does not matter, only the results, and the Zoom server's behavior harmed users by allowing unauthorized access to their cameras.
• The term 'malware' is being used unfairly, as it implies intent to harm, whereas the Zoom server was a misguided attempt to improve user experience.
• The update is a necessary measure to protect users from the vulnerable server, and Apple's actions are justified.
• The definition of malware should be based on the software's behavior, not the developer's intent, and the Zoom server's behavior is malicious.
• Other software, such as Chrome, has had vulnerabilities that could be exploited, but that does not make them malware.
• The Zoom server's ability to work around a Safari security feature is a key factor in considering it malware.