3 ms·

my employer currently signs up for zoom, apparently managed via our SSO-solution. so far so good. Right now, I got an email from Zoom, not showing any relation

by fock 7y ago

my employer currently signs up for zoom, apparently managed via our SSO-solution. so far so good. Right now, I got an email from Zoom, not showing any relation to my employer or mentioning its name: "congratulations for signup, use your account now". Ok. Password reset yields an usable basic account. Seems like somehow Zoom created a personal account for me with my work email. As I didn't get the activation email I got on my private spam-account, I assume somehow they got/requested all the employees email-adresses and automatically created private accounts, not related to the actual business acc.. What the actual f* is that?!? And yeah, I think conceptually this is the same behavior as shown by the ad/malware/spam campaigns ca. 2003. I wonder what had happened if I had just typed a password when signing in with my account... Maybe they just grab the passwords of the illiterate users and check them by trying to login with the university website? (that's sooo userfriendly!)

jamiequint 7y ago
I set up Zoom for our company and nothing like this happened. It seems much more likely (than your wild conspiracy theory) that your company added a "basic", rather than "licensed" account for you and you got an email as a result.
- fock 7y ago
  no, don't know what kind of mess they made; the official login is via SSO (and works with <companyname>.zoom.us). to my understanding the account is typically created on login there (otherwise we would sync our whole list of employees with 100s of services...). and even if it was just a random invitation sent to an email they bought somewhere, it doesn't really explain how I could reset the password for my email then (without ever activating an account)?! It might be a messup from someone but it's definitely strange and I just didn't sign up there, yet got spam and had a working basic account...
  - jamiequint 7y ago
    > otherwise we would sync our whole list of employees with 100s of services Could also have been created with SCIM and you're in a particular SCIM group that other folks are not in.
    - fock 7y ago
      ok, that's interesting. And this is a really creepy thing from a privacy standpoint...
      - jamiequint 7y ago
        Not really, it's not your privacy if it's your work account/email.

by fock 7y ago

jamiequint 7y ago

I set up Zoom for our company and nothing like this happened. It seems much more likely (than your wild conspiracy theory) that your company added a "basic", rather than "licensed" account for you and you got an email as a result.

fock 7y ago
no, don't know what kind of mess they made; the official login is via SSO (and works with <companyname>.zoom.us). to my understanding the account is typically created on login there (otherwise we would sync our whole list of employees with 100s of services...). and even if it was just a random invitation sent to an email they bought somewhere, it doesn't really explain how I could reset the password for my email then (without ever activating an account)?! It might be a messup from someone but it's definitely strange and I just didn't sign up there, yet got spam and had a working basic account...
- jamiequint 7y ago
  > otherwise we would sync our whole list of employees with 100s of services Could also have been created with SCIM and you're in a particular SCIM group that other folks are not in.
  - fock 7y ago
    ok, that's interesting. And this is a really creepy thing from a privacy standpoint...
    - jamiequint 7y ago
      Not really, it's not your privacy if it's your work account/email.