4 ms·

Zoom deserves a lot of animosity for its privacy issues like sharing data with Facebook. On the other hand I am mystified by all the security hype. Yes I migh

Zoom deserves a lot of animosity for its privacy issues like sharing data with Facebook. On the other hand I am mystified by all the security hype. Yes I might be able to guess a Zoom meeting ID, just as if I might guess your phone number and prank call you. In a Zoom meeting you can see who is connected. In the old days of conference calls do you remember asking “who’s on the line?”. What are you talking about that requires encryption? If so there are tools for that - signal, etc.

stordoff 7y ago
> What are you talking about that requires encryption? The UK are using it for Cabinet meetings - https://www.bbc.co.uk/news/technology-52126534 https://www.bbc.co.uk/news/technology-52126534
- NikolaeVarius 7y ago
  > In a crisis, communication at speed is the priority. And UK officials say the risks of not communicating in the middle of fast-moving events far outweigh the possible security risks of using such a system. They add most government work to do with the coronavirus is unclassified and anything highly classified is communicated over secure systems Government meetings use the paid-for version of the system and are password protected to prevent "Zoom-bombing", when uninvited individuals intrude on calls. The UK Ministry of Defence also said Zoom should not be used for classified conversations. And it is understood Nato's policy not to use Zoom for any meetings, briefings or conversations between member state ambassadors if classified or sensitive information is shared. Nato staff are understood to be using "more stable and secure" means of communication. ===== They seem to be perfectly well aware of their threat model
ikiris 7y ago
Oh please. They used the fb auth sdk without realizing the implications. That's hardly malicious just incompetent and rushed.
- catalogia 7y ago
  Didn't realize? Or didn't care, and then lied and claimed they didn't realize only after they got called out? There is really no reason to give this company the benefit of the doubt in any regard.
sarakayakomzin 7y ago
> What are you talking about that requires encryption? your health, your finances, your PII >If so there are tools for that - signal, etc. a service that requires a phone number to not let you share your desktop screen with multiple people at once certainly isn't going to be the right tool. > I am mystified by all the security hype https://zoom.us/healthcare https://zoom.us/healthcare they are selling a product at a markup for seats to a play at the local high school security theater.

stordoff 7y ago

> What are you talking about that requires encryption? The UK are using it for Cabinet meetings - https://www.bbc.co.uk/news/technology-52126534 https://www.bbc.co.uk/news/technology-52126534

NikolaeVarius 7y ago
> In a crisis, communication at speed is the priority. And UK officials say the risks of not communicating in the middle of fast-moving events far outweigh the possible security risks of using such a system. They add most government work to do with the coronavirus is unclassified and anything highly classified is communicated over secure systems Government meetings use the paid-for version of the system and are password protected to prevent "Zoom-bombing", when uninvited individuals intrude on calls. The UK Ministry of Defence also said Zoom should not be used for classified conversations. And it is understood Nato's policy not to use Zoom for any meetings, briefings or conversations between member state ambassadors if classified or sensitive information is shared. Nato staff are understood to be using "more stable and secure" means of communication. ===== They seem to be perfectly well aware of their threat model

ikiris 7y ago

Oh please. They used the fb auth sdk without realizing the implications. That's hardly malicious just incompetent and rushed.

catalogia 7y ago
Didn't realize? Or didn't care, and then lied and claimed they didn't realize only after they got called out? There is really no reason to give this company the benefit of the doubt in any regard.

sarakayakomzin 7y ago

> What are you talking about that requires encryption? your health, your finances, your PII >If so there are tools for that - signal, etc. a service that requires a phone number to not let you share your desktop screen with multiple people at once certainly isn't going to be the right tool. > I am mystified by all the security hype https://zoom.us/healthcare https://zoom.us/healthcare they are selling a product at a markup for seats to a play at the local high school security theater.