If you've ever wondered Zoom is getting banned left and right -- or just want to hear a good story of drama, bug exploits, how one of the most used apps right now used to be a time bomb -- then oh boy do I have the video for you. Here, I explain how Zoom put 4 million computers at risk, of not only privacy breaches, but of being completely taken over by random people. And just as importantly, the hilarious drama that ensued. Main sources, if you want to read more on this: [Warning -- unlike the video, these may be fairly technical] The post that started it all: https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 Jonathan Leitschuh's own retelling of the story: https://www.youtube.com/watch?v=FismZ6ZDKXU Assetnote's post on Zoom App Remote Code Execution: https://blog.assetnote.io/bug-bounty/2019/07/17/rce-on-zoom/ What this all teaches us about local HTTP web security: https://web.stanford.edu/class/cs253/lectures/Lecture%2018.pdf Special thanks to Feross, my web security professor at Stanford, for introducing me to the story and being an amazing source of information on the topic :) More Llama Explains: https://www.facebook.com/llamaexplains/