5 ms·
Yeah but then it sucks for people calling in to have to punch in a 21+ character long meeting ID
by umvi 7y ago
Yeah but then it sucks for people calling in to have to punch in a 21+ character long meeting ID
- toomuchtodo 7y agoCould you not use a telephone intent, where the meeting ID is the suffix to the dial in number with commas for any necessary pauses? Skype for business meeting invites have this. Zoom might then support inviting mobile phone conference participants using SMS, containing the link (think weak 2FA). Example: tel://18005551212,,<meeting_id>#
- anamexis 7y agoThat's not helpful when you have to punch it into a conference room speakerphone. I did once put together a hack that would scrape the meeting ID from the Zoom UI and emit the touchtones from my laptop to dial in.
- toomuchtodo 7y agoThere is always a trade off between security and usability. I like your hack though, any chance you'd put it on Github?
- PeterCorless 7y agoThe most secure computer is a non-networked standalone box sunk in concrete sunk hidden at the bottom of a deep sea trench. It is not, however, very usable.
- anamexis 7y agoI haven't used it in a while, so I wouldn't be surprised if the Zoom bit is broken, but here it is: https://gist.github.com/micahbf/91a295016f4472b47acfe317d714350b https://gist.github.com/micahbf/91a295016f4472b47acfe317d714...
- josteink 7y ago> Yeah but then it sucks for people calling in to have to punch in a 21+ character long meeting ID I may be out of touch with the average biz-guy, but how many people are realistically calling in manually, over traditional phone-lines these days? Is it really a significant percentage?
- apocalyptic0n3 7y agoFar greater than you would expect, I think. This is anecdotal, but we're an admittedly small company (~20-25 employees) and all of our interactions with other companies (clients) are either direct line-to-line or if we do a conference call, we all call in over the phone. Many of the companies who send us WebEx or join.me or Hangouts Meet or whatever invites only send the phone number even, not even bothering to give us a link (and if you go to the room manually in your browser, you're the only one actually connected via computer)
- deleted 7y ago[deleted]
- larrik 7y agoMost of my zoom meetings have at least 20% dial-ins.
- lonelappde 7y agoFrom landlines?
- randycupertino 7y agoWorking in global research, 40% of our ROW (rest of world) sites and vendors use landline or cell pones to join our meetings, depends on their institutional security and IT settings.
- Nextgrid 7y agoThe telephone dial-in option should've been separate - if the user chooses to enable it then they can fall back to shorter IDs, while meetings that don't need it (or where it doesn't make sense anyway - screen shares, presentations, etc) would use longer, more secure IDs.
- azinman2 7y agowhich means all you gotta do is war dial the phone network...
- Nextgrid 7y agoEven if the phone dial-in ID would be enabled by default (which isn't what I am suggesting), the extra latency and cost of brute forcing them over the phone network will make these attacks much harder.
- Symbiote 7y agoAs we've used it at work, the phone dial-in option is the backup plan -- useful when people can't set up their computer's microphone correctly, or lose Internet access for whatever reason.
- bobbyi_settv 7y agoThe "just works" nature is why Zoom is popular. No one wants to have every meeting start with "Is Larry here? Oh, I think he's trying to dial in. I'm going to cancel this meeting and send out a new ID so he can dial in. Everyone watch for that so you can reconnect"
- Nextgrid 7y agoThe second ID can be generated in addition to the first, primary ID.
- bscphil 7y agoYou could even include the option to get approval - pop up says "Mx. Caller ID is calling from 555.555.5555. Approve?" Obviously there's no way to get in through random dialing. And if you get a pile of requests, provide a way to filter incoming numbers and disable the calling ID as soon as everyone is in. That's even assuming that anti-DOS protection on the phone line is impossible.
- chapium 7y agoI've always preferred conf systems with a call-me-at function better anyway. With most lines, sign in over phone is a horrible waiting game where one missed digit means sitting through instructions for another minute.
- panarky 7y agoWhat's worse, entering a 21-character meeting ID on the phone, or entering an 11-character meeting ID plus a 10-character password?