Pwn2Own is an annual competition organized in Vancouver (Canada) where the objective is to hack consumer software. In 2021, the winners took on Zoom. They managed to execute arbitrary code, i.e. actions without the consent of the owner of the machine where the program was installed. They then discovered afaille zero-daysince shared with the publisher… who sponsored the event.
Paid to the tune of $200,000, the feat is explained in detail in the video below. All it takes is a simple computer running Windows 10 and a few sleight of hand, which does not restore the image of a company already the victim of numerous criticisms. Indeed, everyone now knows that conversing with Zoom is particularly risky for one's health.confidentialitysince collusion with the Chinese government was confirmed by backdoors. But not only that.
We're still confirming the details of the#Zoomexploit with Daan and Thijs, but here's a better gif of the bug in action.#Pwn2Own #PopCalc pic.twitter.com/nIdTwik9aW
— Zero Day Initiative (@thezdi)April 7, 2021
A security nightmare
In fact, betweenhundreds of thousands of stolen over-the-counter accounts on the dark netor even theresale of personal datato Facebook, it is now of public interest to know that the platform is not the most attentive to privacy. So much so that the majority of professionals have simply banned it from their computers, in order to avoid leaking secret information essential to their activity.
Even educational establishments like some universities have chosen to ban Zoom on their campuses, for similar reasons. As a result, its stock price on the NASDAQ has been in free fall since the scandals continue to emerge.
Still no change to the interface
Furthermore, theuser experienceof the software itself is particularly unintuitive. The application is in fact not responsive and it often takes many minutes before being able to connect all the participants. Most of the time, they simply cannot be found there because of overly complex settings and a 2000s color design which has still not been revisited despite the complaints of Internet users.
The competition is therefore having a field day:Google Meetand Whereby have since become essential alternatives,whose list is long.
i-nfo.fr - Official iPhon.fr app
By : Keleops AG
