![]() While this practice is nice from Zoom’s perspective and for usability, it violates Mac user expectations. The user does not need to click through the installer, it just happens instantly. However, this is done by abusing the pre-requirements scripts. The stated reasoning behind this practice according to the Zoom CEO is that they want to reduce the number of clicks from download to getting the client running. This leaves the impression that the OS is requesting the user’s password while it is actually the Zoom installer. Instead of displaying a message along the lines of “Zoom needs your password to update the existing Application”, they use the string “System need your privilege to change”(sic). However, in this case, the Zoom installer actively overrides the message that is shown in the password prompt. It is not uncommon for macOS applications to temporarily request root privileges, for example, to install a persistent service or start a privileged helper-tool. The AuthorizationExecuteWithPrivileges API Call shown in the VMRay Function Log.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |