> Unless the cost equation changes, it is hard to get business users to change their priority With GDPR getting teeth (see recent fines of BA and Marriott) for

> Unless the cost equation changes, it is hard to get business users to change their priority With GDPR getting teeth (see recent fines of BA and Marriott) for security breaches, I think this is the beginning of that cost equation changing. But also bear in mind this is a company who have someone with the title Chief Information Security Officer. If alarm bells didn’t start ringing for that person when this vulnerability was reported, then they likely aren’t the right person for the job. Especially as Zoom have customers in the EU so that person is also likely their nominated Data Protection Officer and should therefore be well aware of the privacy requirements imposed by GDPR and the penalties for a privacy breach (which someone secretly recording webcam footage would surely qualify as). As for local helper agents accessible from the internet, you only need to browse google project zero to see what a bad idea that is.