4 ms·
Except waiting rooms have a separate security problem https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-m
by bretpiatt 7y ago
Except waiting rooms have a separate security problem https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/ https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto...
HN thread https://news.ycombinator.com/item?id=22768494 https://news.ycombinator.com/item?id=22768494
- detaro 7y agoSo attackers have now ~24 hours to exploit this unpublished security issue before the second stage, required passwords, becomes active.
- prophesi 7y agoHopefully passwords are implemented in a way to slow down brute-forcing. I guarantee the majority of them will be a simple word or number sequence.
- kerng 7y agoThanks for highlighting this, i totally missed that there is waiting room security issue pending disclosure.
- gnicholas 7y agoTLDR: there’s a security issue that has been identified with regard to waiting rooms, and it has been reported to zoom. No further details will be provided until it’s fixed.