{
  "id": "7f093e076c4b",
  "url": "https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5",
  "title": "Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!",
  "note": "Yikes.\n\n> This vulnerability leverages the amazingly simple Zoom feature where you can just send anyone a meeting link (for example https://zoom.us/j/492468757) and when they open that link in their browser their Zoom client is magically opened on their local machine. I was curious about how this amazing bit of functionality was implemented and how it had been implemented securely. Come to find out, it really hadn’t been implemented securely. Nor can I figure out a good way to do this that doesn’t require an additional bit of user interaction to be secure.\n\n🚨\n\n[Response from Zoom](https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/).\n\nAnd a [better response from the CEO of Zoom](https://blog.zoom.us/wordpress/2019/07/10/security-update-and-our-ongoing-efforts/).",
  "voice": "mixed",
  "saved": "2019-07-09T02:17:58Z",
  "host": "medium.com",
  "kind": "page",
  "tags": [],
  "record": "https://links.thingelstad.xyz/links/7f093e076c4b/",
  "markdown": "https://links.thingelstad.xyz/links/7f093e076c4b.md",
  "issues": [],
  "connections": {
    "same_host": {
      "count": 260,
      "page": "https://links.thingelstad.xyz/hosts/medium.com/",
      "nearest": [
        {
          "id": "0354fe375437",
          "title": "One-on-ones are my most valuable meetings; here’s how I run them",
          "url": "https://medium.com/swlh/one-on-ones-are-my-most-valuable-meetings-heres-how-i-run-them-d9ae7c64dade",
          "record": "https://links.thingelstad.xyz/links/0354fe375437/"
        },
        {
          "id": "1cc6aeec0ab9",
          "title": "The Time of Day Has a Significant Effect on Your Productivity",
          "url": "https://medium.com/@alltopstartups/the-time-of-day-has-a-significant-effect-on-your-productivity-c45b199410d5",
          "record": "https://links.thingelstad.xyz/links/1cc6aeec0ab9/"
        },
        {
          "id": "28f230cef77b",
          "title": "How Dark deploys code in 50ms - Darklang - Medium",
          "url": "https://medium.com/darklang/how-dark-deploys-code-in-50ms-771c6dd60671",
          "record": "https://links.thingelstad.xyz/links/28f230cef77b/"
        },
        {
          "id": "7491fc20d922",
          "title": "How to Be a Better Writer - Better Humans - Medium",
          "url": "https://medium.com/better-humans/how-to-be-a-better-writer-a3c877f67a5c",
          "record": "https://links.thingelstad.xyz/links/7491fc20d922/"
        },
        {
          "id": "70621e613c9a",
          "title": "John Allspaw: “Getting the messy details is critical”",
          "url": "https://medium.com/code-for-america/john-allspaw-getting-the-messy-details-is-critical-59e641aa0a77",
          "record": "https://links.thingelstad.xyz/links/70621e613c9a/"
        }
      ]
    },
    "same_week": {
      "count": 13,
      "nearest": [
        {
          "id": "92b0238380a6",
          "title": "Cloudflare outage caused by bad software deploy (updated)",
          "url": "https://blog.cloudflare.com/cloudflare-outage/",
          "record": "https://links.thingelstad.xyz/links/92b0238380a6/"
        },
        {
          "id": "6e2404e27c12",
          "title": "The hardest leadership advice to follow",
          "url": "https://m.signalvnoise.com/the-hardest-leadership-advice-to-follow/",
          "record": "https://links.thingelstad.xyz/links/6e2404e27c12/"
        },
        {
          "id": "19f5ac4444f4",
          "title": "How can you improve your organization’s data strategy?",
          "url": "https://www.blog.google/products/admanager/how-can-you-improve-your-organizations-data-strategy/",
          "record": "https://links.thingelstad.xyz/links/19f5ac4444f4/"
        },
        {
          "id": "db4c1c2fe7f4",
          "title": "Homerun's guide to Diversity & Inclusion",
          "url": "https://www.artofwork.co/diversity",
          "record": "https://links.thingelstad.xyz/links/db4c1c2fe7f4/"
        },
        {
          "id": "77eb6592ec58",
          "title": "USA 2019 Womens World Cup champions were unflappable, unequaled | SI.com",
          "url": "https://www.si.com/soccer/2019/07/08/usa-womens-world-cup-title-uswnt-rapinoe-lavelle-ellis",
          "record": "https://links.thingelstad.xyz/links/77eb6592ec58/"
        }
      ]
    },
    "mentions": [],
    "mentioned_by": [],
    "saved_twice": []
  },
  "elsewhere": {
    "wayback": "https://web.archive.org/web/*/https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5"
  }
}