4 ms·
IMO, when it comes to security, the fact that other people have made the same mistake makes a design flaw more egregious, not less.
by teraflop 7y ago
IMO, when it comes to security, the fact that other people have made the same mistake makes a design flaw more egregious, not less.
- tptacek 7y agoThat is absolutely not an information security norm. Most security mistakes fall into common patterns.
- Spooky23 7y agoIt’s not an egregious flaw, any more than the telephone numbering system is. It’s a design decision to improve usability that is generating a lot of noise during an extraordinary period. Usability is the zoom priority, and the reason why people who already own more secure, no cost, solutions like Teams, Skype or Google Meet buy Zoom.
- filleduchaos 7y agoKnowing someone's phone number very obviously doesn't grant you direct access to autojoin their calls with people. At _best_ you can attempt to tell if they're currently in a call or not by calling them, but even that is far from reliable (e.g. in places where voicemail isn't as much of a thing do not disturb is sometimes implemented by pretending to be busy or switched off)
- apple4ever 7y agoPeople often forgot that its a Security-Usabilty scale, with perfect security on one side and perfect usability on the other. An unplugged computer is perfectly secure, while a computer wide open is perfectly usable. But neither is usually preferable. As with most things, its a trade off.