3 ms·
Since some people are entirely mistaking my point, here some more in-depth thoughts. We should hold the companies and individuals operating on the internet to
by Slikey 7y ago
Since some people are entirely mistaking my point, here some more in-depth thoughts.
We should hold the companies and individuals operating on the internet to the highest standard to prevent such security violations. I am talking about a balance of the barrier here. Guessing meeting IDs is such an obvious and trivial attack vector that it should be expected to be abused.
We look at companies like Facebook and expect them to keep our data safe and if they don't, we hold them accountable even though they are a victim of a crime. Some comment equated that to victim blaming in case of rape and that is just an insane analogy.
Obviously if there is a real world consequence and people having damage they should have the right to get compensated and that is why we expect providers and companies to keep logs, but honestly how do we expect services to develop the highest standard if they can pass the blame to an attacker. At least an equal part if not the majority should be the organization that engineered a vulnerability because in most cases these happen due to improper design. (See programming vs. civil engineering quality discussion)
We are talking about a minor inconvinience through trolling easily fixed by a proper token system on Zoom's end. This is not what the criminal justice system should be prosecuting some teenagers for.
- mannykannot 7y agoZoom's inaction here seems to better fit the concept of an attractive nuisance than a crime.
- JoeAltmaier 7y agoEverybody 'operates on the internet'. We're going to hold everybody to the highest standards of security? This is silly. There's already plenty of law around contract damages etc. Is there any need to rail about this example, and propose new rules? If you can show monetary losses due to using Zoom, go ahead and sue. Using a free account? Then there's no contract between you and Zoom - has to be 'value received' to have a contract, and you didn't pay them anything. Since there are and have been alternative to Zoom for a decade, it's hard to make this some national priority.
- crankylinuxuser 7y agoI think its more of "Think of the children" argument cropping up. IIRC there was a few high profile naked people (primarily men) doing obscene things. And there was at least 1 porno track being played. Of course, it was all during k-12 zoom. Once you introduce sex crimes against children in a public (online) school room setting, all bets are off.
- JoeAltmaier 7y agoWow that seems very prosecutable. Doesn't Zoom know who attended each meeting?