4 ms·
I moved away early this year due to its poor track record on security: 2019 - Report of the Zoom app's malware like behaviour-using a hidden web server to enabl
by jcytong 6y ago
I moved away early this year due to its poor track record on security:
2019 - Report of the Zoom app's malware like behaviour-using a hidden web server to enable Zoom much more capabilities than simply launching a zoom call like re-installing the Zoom software[1]
2020-Tricking its users during installation pretending the OS is requiring password[2]
In general, playing fast and loose with its users' data-sending a conference en(de)cryption key between two users in Canada/US to an ip address in Beijing.[3]
[1]https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 https://medium.com/bugbountywriteup/zoom-zero-day-4-million-...
[2]https://twitter.com/c1truz_/status/1244737672930824193 https://twitter.com/c1truz_/status/1244737672930824193
[3]https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/ https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto...