Yeah this is why Zoom is constantly pushing you to download their fucking app, and exactly why I don’t fucking do it.
Same with discord… it lives inside a browser tab only
Affected users who are running X11 should audit their Zoom version, isolate conferencing workloads onto dedicated hardware or virtual machines, or move to a browser-based version of Zoom where sandboxing prevents unprompted clipboard access.
Anyone running a Linux system with Wayland should be OK.
Also Flatpak would be helpful in this case too, if there was a package for.
Anyone running a Linux system with Wayland should be OK.
And this is exactly why I put up with the functionality regressions of Wayland over X11 for the first few years.
It’s been quite a while since I’ve had issues with Wayland, but for a while there I was convinced that the only testing done on it was on a single screen laptop, because as soon as you attached a second standalone monitor (or third or fourth) all hell broke loose.
It’s just a better compositor. X is roughly half a million bandaids in a 30 year old trench coat.
Would the sandbox permissions in Flatpak be able to block this?
I think so, but the sandbox can easily be broken in theory from what I heard. It’ll probably be fine as long as Zoom doesn’t add malicious code that does such a thing.
I wouldn’t say “easily” it’s just that LLM assisted code finding has revealed several exploits. Good news is that the flaws that have been found have been fixed.
If you use flatseal and turn off clipboard access you will be fine.
Stallman was right.
On some things.
On others he couldn’t be more wrong.
I mean yes, but why this time?
I’m going to have to go on some remote interviews sometime soon. I don’t know if Zoom is the way those are usually done or if they use some other software that’s more purpose-built for that. But whatever the case, I’ll definitely have to figure out how to run whatever it is “in jail” somehow.
I would recommend running untrusted proprietary software as a webapp if possible, it will not be able to be as intrusive in that case compared to native app even with all the sandboxing (flatpak, snap, etc…). Or Virtual machine as the most secure option, but it may be overkill.