zoom security vulnerability - 2019-07-08

zoom_fix.sh

# notes taken from this article:
#   https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
# saved as a gist so I don't lose the info

# disable video on join
# For just your local account
defaults write ~/Library/Preferences/us.zoom.config.plist ZDisableVideo 1
# For all users on the machine
sudo defaults write /Library/Preferences/us.zoom.config.plist ZDisableVideo 1


# shutdown webserver
lsof -i :19421
# get PID from above command
kill -9 [process_number]
# this would probably work -> kill -9 $(lsof -i :19421)

# remove webserver
rm -rf ~/.zoomus

# prevent server from being restored after updates
rm -rf ~/.zoomus
touch ~/.zoomus