<story><title>The Zoom installer let a researcher hack his way to root access on macOS</title><url>https://www.theverge.com/2022/8/12/23303411/zoom-defcon-root-access-privilege-escalation-hack-patrick-wardle</url></story><parent_chain><item><author>anyfoo</author><text>Note that if SIP is enabled (the default), &amp;quot;root access&amp;quot; does not mean full compromise. On macOS, root is far from being as privileged as it was in the old days of UNIX yore. (Even on Linux it does not have to be, but my impression is that on most distributions it probably still is.)&lt;p&gt;Just because you&amp;#x27;re root does not mean you get any entitlement you want, or arbitrary access to the whole filesystem, arbitrary memory access (a la &amp;#x2F;dev&amp;#x2F;(k)mem), or can replace the kernel just like that.&lt;p&gt;(That&amp;#x27;s also probably why you don&amp;#x27;t hear of iPhones being &amp;quot;rooted&amp;quot;, but rather &amp;quot;jailbroken&amp;quot;. Just being root on an iPhone wouldn&amp;#x27;t do that much.)&lt;p&gt;Make no mistake, this is still a privilege escalation attack and needs to be fixed.</text></item></parent_chain><comment><author>userbinator</author><text>I read your first 8 words and was momentarily confused because I thought you were referring to &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Session_Initiation_Protocol&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Session_Initiation_Protocol&lt;/a&gt; , and can indeed join Zoom meetings with a standard SIP client, but it&amp;#x27;s an optional paid feature --- nonetheless likely to be available in a corporate environment. Look for the IP address to dial in meeting invites to see if you have that option.</text></comment>
<story><title>The Zoom installer let a researcher hack his way to root access on macOS</title><url>https://www.theverge.com/2022/8/12/23303411/zoom-defcon-root-access-privilege-escalation-hack-patrick-wardle</url></story><parent_chain><item><author>anyfoo</author><text>Note that if SIP is enabled (the default), &amp;quot;root access&amp;quot; does not mean full compromise. On macOS, root is far from being as privileged as it was in the old days of UNIX yore. (Even on Linux it does not have to be, but my impression is that on most distributions it probably still is.)&lt;p&gt;Just because you&amp;#x27;re root does not mean you get any entitlement you want, or arbitrary access to the whole filesystem, arbitrary memory access (a la &amp;#x2F;dev&amp;#x2F;(k)mem), or can replace the kernel just like that.&lt;p&gt;(That&amp;#x27;s also probably why you don&amp;#x27;t hear of iPhones being &amp;quot;rooted&amp;quot;, but rather &amp;quot;jailbroken&amp;quot;. Just being root on an iPhone wouldn&amp;#x27;t do that much.)&lt;p&gt;Make no mistake, this is still a privilege escalation attack and needs to be fixed.</text></item></parent_chain><comment><author>jbverschoor</author><text>I don’t need root access.. just your .ssh dir</text></comment>