4 ms·
I recently had a sales call with a potential vendor (they were a startup). They used the same number and meeting code for all of the meetings. I had accidentall
by sbr464 8y ago
I recently had a sales call with a potential vendor (they were a startup). They used the same number and meeting code for all of the meetings. I had accidentally called in about 10 minutes early and was dumped into another conversation, and heard the other potential customer talking. It was odd how insecure and weird it was. I think this is a potential issue for all meeting services.
- sbr464 8y agoI also mentioned it to the sales guy, but he was unfazed, which I think shows a lack of respect for customer privacy, even though he probably didn't realize it.
- themodelplumber 8y agoThis is really unfortunate but all too common. Sales guys are typically (as a type/group) improvisational in nature. They actually thrive in insecure environments, because solving problems as they occur (i.e. putting off security for later) gives them more freedom and flexibility _right now_, which is what they crave. They tend to wonder "why are you using valuable money-making time to secure that which is constantly expanding--maybe we won't even need this system tomorrow" and so on. (So goes the thinking; it obviously has its pros and cons...and HN readership eats these guys' psychology for breakfast anyway, with a generally systems-focused mindset)
- wild_preference 8y agoYou keep responding to your own post. Curious why you thought this was appropriate or necessary.
- deleted 8y ago[deleted]
- deleted 8y ago[deleted]
- acct1771 8y agoYou don't know what you don't know.
- acct1771 8y agoAlso, you can't know what you aren't taught.
- sbr464 8y agoI just checked and the meeting code is still valid, It was from a meeting from mid June 2018, using the zoom.us service. It's a meeting room/code assigned to a specific rep. Reused/resent to all leads.
- syntheticnature 8y agoProbably their "personal meeting room" -- Zoom makes it very easy to just use that for all of one's meetings. For intracompany use, I've used it, but I prefer to not use it for intercompany discussions, too much chance of leakage.
- sbr464 8y agoYes that's correct, it was a personal meeting room for a salesperson. But don't you think it's odd that I can call into to any meeting for months on end? Or that someone could do that to you? We were talking to them about a partnership deal, and would of needed to sign a contract which included certain non-disclosures etc. Yet someone could just call in and listen?
- jobigoud 8y agoMassive security hole. You could setup a bot constantly in the call and record all the conversations. It could be setup with a seemingly official name like "admin" or the name of the company, so any one looking at the live list of attendees would think it's a normal maintenance bot from either the company or the service.
- jcrawfordor 8y agoThe meeting/conferencing system at my workplace generates a unique code for each meeting. The major downside to this is that the codes are very long, twice as long as they'd need to be if we just assigned a code to every employee (which is what my last employer did)