Zoom,morgue sex video the videoconferencing software that's skyrocketed in popularity as much of the globe sits at home due to the coronavirus outbreak, is quickly turning into a privacy and security nightmare.
BleepingComputer reports about a newly found vulnerability in Zoom that allows an attacker to steal Windows login credentials from other users. The problem lies with the way Zoom's chat handles links, as it converts Windows networking UNC (Universal Naming Convention) paths into clickable links. If a user clicks on such a link, Windows will leak the user's Windows login name and password.
The good thing is that the password is hashed; but the bad thing is that it is in many cases simple to reveal it using password recovery tools such as Hashcat.
The vulnerability was first found by security researcher @_g0dmode and verified by security researcher Matthew Hickey. Additionally, Hickey told the news outlet that this vulnerability can be used to launch programs on a victim's computer when they click on a link, though Windows will (by default) at least give a security warning before launching the program.
As far as security vulnerabilities go, this one is pretty bad, as it doesn't require a lot of knowledge to exploit. It does require the victim to actually click on a link, and it can be mitigated by tinkering with Windows' security settings, but it's definitely something Zoom should fix by changing the way the platform's chat handles UNC links.
In the meantime, for a quick fix, go to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers and set to "Deny all".
Mashable has contacted Zoom for comment on this story, and we'll update it when we hear back.
SEE ALSO: Zoom's iOS app no longer sends data to FacebookThis is not the only privacy/security-related issue that has been unearthed at Zoom in the past couple of weeks. Just yesterday, The Intercept reported that Zoom doesn't actually use an end-to-end encrypted connection for its calls, despite claiming to do so. There's also the issue of leaking users' emails and photos to unrelated parties, and the fact that the company's iOS app, until recently, sent data to Facebook for no good reason.
Zoom software also has a couple of worrying privacy features, and although this isn't Zoom's fault, it's worth noting that hackers are using the app's newfound popularity to trick users into downloading malware.
Topics Cybersecurity
The unusual lawsuit involving Miss Cleo and 'GTA': A lawyer's viewThe unusual lawsuit involving Miss Cleo and 'GTA': A lawyer's view'Game of Thrones': Arya is back and your favorite character again'Hellblade' punishes you for dying a lotThe world is once again safe for podcasting after patent trolls lose in court'Game of Thrones': Should Jon and Dany hook up?This old 'Game of Thrones' book quote could be huge for DaenerysExcellent 'Metal Gear Solid' shirt commemorates the series' undeniable homoeroticismiPhone 8's facial sensor might work even if it's sitting on a tableNew manicure color trend gives people an unusual way to show off their nails'Game of Thrones': Ser Davos remembers Stannis Baratheon with 1 lineThis 'vegan meal' would disappoint anyone who enjoys eating foodIrish vet fails computerised English oral test, despite being fluentDisney to pull all its movies off NetflixYour next phone's probably gonna have an ugly cutout right its screen'Game of Thrones' review roundWe will never not have new Drake music because apparently, he's already working on new albumESPN finally blessed us with 'The Ocho,' if only for a dayFoursquare is throwing in the towel on being a social app, but has another trick up its sleeveYes, that controversial Google diversity rant matters. Like, really matters. Amazon's Black Friday laptop deals are shockingly great Staff Picks: Interwar, War, and Postwar In the age of TikTok, the female gaze has lost all meaning Sour Starbursts and French Pokémon: The 8 best tweets of the week Reading Between the Lines: “Gilded Age Drawings at the Met” How Original Are You? by Robert Shore Tinder adds new features like prompts and dark mode Mark Twain’s Disturbing Passion for Collecting Young Girls The Sentence That Is a Story by Jeff Dolven Tuli Kupferberg’s Yeah!: The Tiny Magazine That Captured the 1960s by Alex Zafiris All the best mattress deals for Black Friday 2023 The Dignified Bot States of Desire: An Interview with Anne Garréta Black Friday 2023: Best sex toy sales and deals What is Invisible String Theory? A look at the TikTok dating trend. Epik High's Tablo talks NewJeans, BTS, and the promise of AI Cooking with Sybille Bedford by Valerie Stivers The Sentence That Folds Neatly in Half How a potential recession will uniquely affect the creator economy From Eternity to Here: Remembering Pearl Harbor by Alexander Nemerov
1.1335s , 8590.6171875 kb
Copyright © 2025 Powered by 【morgue sex video】,Prosperous Times Information Network