Linux Zoom client proactively reading everything written to X11 clipboard
Points and comments are a snapshot, not live.
Zoom 7.1.5 for Linux reads all X11 clipboard changes via XFIXES.
Simon Tatham discovered that Zoom 7.1.5 uses the XFIXES extension to detect clipboard changes and immediately requests paste data from the new owner. This broke his one-shot paste tool, which terminates after one paste request. The behavior targets only the CLIPBOARD selection (Ctrl+C/Ctrl+V), not PRIMARY. It does not appear in Zoom 6.6 or older versions. Tatham identified the behavior by running 'xkill' on auxiliary windows and logging paste requests. Commenters suggest checking other popular apps like Discord, and some propose a clipboard firewall that serves fake data to blacklisted apps.
What commenters are saying
Top comments overwhelmingly criticize Zoom's history of privacy violations, citing the MacOS webserver backdoor incident and recommending browser use or alternative services like Jitsi, Google Meet, or Galene. Some note that sandboxing on X11 is ineffective against clipboard snooping. One commenter reports similar behavior from Easy Effects (audio app) in addition to Zoom. A few defend Zoom's ease-of-use rationale but are rebutted with security concerns. Multiple commenters suggest the browser client is sufficient for most needs, though some note reduced video quality.