On 3/27/20 12:36 AM, Michael wrote:

More info on the participation Zoom users /enjoy/, whether they like it and
have agreed to it, or not:

https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account

No need to rely on vague reports from third parties, just inspect the binary:

holger>strings zoom | sort | uniq | grep facebook
&redirect_uri=https://www.facebook.com/connect/login_success.html&scope=
@chat.facebook.com
facebookLogin
feature.login.disable.facebook
http://graph.facebook.com/
http://www.facebook.com/xmpp/messages
https://dev.zoom.us/facebook/oauth
https://dev.zoom.us/facebook/oauth/client?mode=token
https://devfacebook.zoom.us
https://facebook.zoom.us
https://www.facebook.com/
https://www.facebook.com/ZoomInc
https://www.facebook.com/logout.php?access_token=
https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fzoom.us
https://www.facebook.com/v3.2/dialog/oauth
https://zoom.us/facebook/oauth
https://zoom.us/facebook/oauth/client?mode=token
nofacebook
slt_facebookUrlChanged
user_facebook_login_token

Someone up for an automated hex editor script to remove this shit?
Alternatively I guess the time has come to simply hard-block facebook.com
in DNS. This is easy to do with dnsmasq or dnsdist as local
proxy/cache/multiplexer.

-h

Reply via email to