Zoom - recent security vulnerabilities, exploits in wild

Forums › IT Pro and developers › Zoom - recent security vulnerabilities, exploits in wild

1 | 2 | 3

BlakJak

1330 posts

Uber Geek
+1 received by user: 735

Trusted

#2454235 4-Apr-2020 11:19

https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/ is also a good read.

Use Zoom in an informed way, dont trust it with your secrets... I'd certainly not encourage it as a corporate-enterprise solution, given its history.

No signature to see here, move along...

Oblivian

7345 posts

Uber Geek
+1 received by user: 2117

ID Verified

#2454380 4-Apr-2020 13:48

But wait, there's more. Apparently can find videos saved online

https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=12322451

I don't know why they feel the need to inject Covid stuff into EVERY article. (You'll see)

billgates

4706 posts

Uber Geek
+1 received by user: 672

Trusted

#2454389 4-Apr-2020 13:55

We use both Teams and Skype for Business at our work.

Saying that most people likely don’t know that the consumer version of Skype also offers no sign up or downloads required video conferencing feature. If you use a modern browser on desktop or laptop then it will auto detect your mic and webcam and start the conferencing within your browser. If someone in the conference want to use their smartphone or tablet in the conference then they download the app from their App Store, click on the invite link they have been sent and it will auto open the app and join them them into the app as guest. Works very well

https://www.skype.com/en/free-conference-call/

Do whatever you want to do man.

BlakJak

1330 posts

Uber Geek
+1 received by user: 735

Trusted

#2454397 4-Apr-2020 14:08

Oblivian:
But wait, there's more. Apparently can find videos saved online

https://www.nzherald.co.nz/business/news/article.cfm?c_id=3&objectid=12322451

I don't know why they feel the need to inject Covid stuff into EVERY article. (You'll see)

" many participants in Zoom calls may be surprised to find their faces, voices and personal information exposed because a call host can record a large group call without participants' knowledge or consent."

So what's stopping any call participant from recording their screen?

Nothing.

Zoom supports cloud recording. It can also be turned off globally within the enterprise admin panel.

There are some issues with Zoom's security, this is not one of them IMO (because at least one party knows precisely what they're doing - unless they're ignorant, in which case it's their fault!)

https://arstechnica.com/information-technology/2020/04/security-tips-every-work-from-homer-needs-to-know-about-zoom-right-now/

No signature to see here, move along...

antonknee

1133 posts

Uber Geek
+1 received by user: 1145

#2454398 4-Apr-2020 14:09

Using a browser to access a video meeting from a link is common to most meeting platforms I’ve used... Hangouts Meet, Teams, Skype, WebEx etc. This is hardly Zoom specific functionality.

Technofreak

6657 posts

Uber Geek
+1 received by user: 3477

Trusted

#2454451 4-Apr-2020 15:18

antonknee: Using a browser to access a video meeting from a link is common to most meeting platforms I’ve used... Hangouts Meet, Teams, Skype, WebEx etc. This is hardly Zoom specific functionality.

I think you missed the point. Zoom can be used via it's own plugin or app OR it can be used via a browser. I think what was said in that article is using it via a browser a much safer option.

Sony Xperia XA2 running Sailfish OS. https://sailfishos.org The true independent open source mobile OS
Samsung Galaxy Tab S6
Dell Inspiron 14z i5

Mighty Ape

Shop now at Mighty Ape (affiliate link).

antonknee

1133 posts

Uber Geek
+1 received by user: 1145

#2454647 4-Apr-2020 21:06

Technofreak:
antonknee: Using a browser to access a video meeting from a link is common to most meeting platforms I’ve used... Hangouts Meet, Teams, Skype, WebEx etc. This is hardly Zoom specific functionality.

I think you missed the point. Zoom can be used via it's own plugin or app OR it can be used via a browser. I think what was said in that article is using it via a browser a much safer option.

I believe WebEx and Teams do this also via browser don’t they? Certainly I’ve joined a Teams meeting (Before we used it at work) via browser without installing stuff.

Intravix

110 posts

Master Geek
+1 received by user: 49

#2454653 4-Apr-2020 21:14

Have used Zoom a lot (mainly with vendors and external contractors). That may change given recent advisories and interest from NZ and five eyes govts/agencies. There are a few minor things that Zoom does better than Teams, which our business has started to use massively.

ANglEAUT

altered-ego
2436 posts

Uber Geek
+1 received by user: 842

Trusted

Lifetime subscriber

#2454694 5-Apr-2020 00:02

Intravix: ... There are a few minor things that Zoom does better than Teams, which our business has started to use massively.

Care to elaborate?

Please keep this GZ community vibrant by contributing in a constructive & respectful manner.

1 | 2 | 3