security issue of ZOOM

For discussions about security.
Post Reply
Message
Author
hatemonday
Posts: 35
Joined: Thu 10 Oct 2019, 13:23

security issue of ZOOM

#1 Post by hatemonday »

Seems to be another company from China ...... Is it trustworthy ?

https://citizenlab.ca/2020/04/move-fast ... -meetings/
Attachments
zoom_security_issue.jpg
(147.8 KiB) Downloaded 522 times

User avatar
8Geee
Posts: 2181
Joined: Mon 12 May 2008, 11:29
Location: N.E. USA

#2 Post by 8Geee »

Zoom Bombing is a rather nasty eploit based upon this weak security coupled with default setups and usage. Rather nasty indeed.

If the article is right, the public has been openly deceived. Investors should tank the stock to zero dollars. JMNSHO

***EDIT*** This article shows the pitfalls

Regards
8Geee
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."

step
Posts: 1349
Joined: Fri 04 May 2012, 11:20

#3 Post by step »

[url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Fatdog64-810[/url]|[url=http://goo.gl/hqZtiB]+Packages[/url]|[url=http://goo.gl/6dbEzT]Kodi[/url]|[url=http://goo.gl/JQC4Vz]gtkmenuplus[/url]

some1
Posts: 117
Joined: Thu 17 Jan 2013, 11:07

#4 Post by some1 »


jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#5 Post by jamesbond »

You know, there is an alternative to Zoom, right? It's not a Hobson's choice.

Online meetings and video conferencing software is old hat. Even before the start of the millenium we already have Microsoft Netmeeting for those who remember it.

Today there are plenty more of alternatives. Microsoft has Team Meetings, Skype, Skype for Business, Google has Google Hangouts Meet, and I'm sure Apple and other big players have their own stuff as well. And if you're no believer in big corporations, why don't you try to setup and run Apache OpenMeetings (free and open source software) on your own private server?

If you think Zoom is not for you, there is no one stopping you to use others. But people choose to flock to Zoom instead. I wonder why? :lol:
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#6 Post by ozsouth »

@JB - I tried to get folks interested in Talky (no accounts or downloads, simple set up), but everyone I know wanted zoom & I could run that in ScPup64, so it won the day. Suspect that's a common reason. Skype for web works, but needs chrome, which I don't usually have installed.

some1
Posts: 117
Joined: Thu 17 Jan 2013, 11:07

#7 Post by some1 »

@JamesBond :Yes.(Apple has Facetime).
--
At my location - the lockdown was rather early,total - and rushed.
In one day smaller businesses,organitions,groups were scrambling to implement videoconferencing.
Zoom was hyped,viewed as easy - "just another app,see" .
Security-thoughts were probably second thoughts -if any.
Everybody had an upside-down world to attend to - and the trolls,bombers
and other barbarians were onto it very fast.
--
Anyway -the society now has a notion of videoconferencing,work/study-from-home
- so its commoditized -sortof.like with browsers - security comes later.,if ever.

User avatar
8Geee
Posts: 2181
Joined: Mon 12 May 2008, 11:29
Location: N.E. USA

#8 Post by 8Geee »


Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."

User avatar
8Geee
Posts: 2181
Joined: Mon 12 May 2008, 11:29
Location: N.E. USA

#9 Post by 8Geee »

One more link, this to an article posted at yahoo.

Even visiting the yahoo stock-quote page lists as news no fewer than 5 class action lawsuits already.

IMHO if you can find an alternative, use it.

Enuff 4 now
8Geee
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."

User avatar
8Geee
Posts: 2181
Joined: Mon 12 May 2008, 11:29
Location: N.E. USA

#10 Post by 8Geee »

ozsouth:

I see you recommend talky, but unfortunately my old kernel does not support WebRTC, as it needs a higher version of OpenGL. IIRC Slacko5.7 is still OpenGL1.x.

Regards
8Geee
Linux user #498913 "Some people need to reimagine their thinking."
"Zuckerberg: a large city inhabited by mentally challenged people."

ozsouth
Posts: 858
Joined: Fri 01 Jan 2010, 22:08
Location: S.E Australia

#11 Post by ozsouth »

@8Geee - sorry - I mentioned ScPup64, but not webrtc, thinking that those with similarly modern pups would be ok. To run Talky on those, I use the Firefox esr packages I've posted in the browser area & run: apulse firefox
Current Seamonkey won't work; Chrome does. I use zoom socially to connect with my friends who all do.

jamesbond
Posts: 3433
Joined: Mon 26 Feb 2007, 05:02
Location: The Blue Marble

#12 Post by jamesbond »

My original question was rhetorical, but for those who answered it (ozsouth and some1), thank you.

The fact of the matter is this: people __always__ choose convenience above anything else. Including security. Security will only factor in once the inconvenience of insecure communications outweights that convenience (that is, until there is a security breach).

Zoom is popular simply because it is convenient.

Case in point. Skype used to be so extremely popular. Why? Before skype started (circa year 2000), there were already voip solutions. In fact there were many voip software. But skype eventually won. Why? Because it was convenient. The other solutions required you with tinker with router settings (NAT, DMZ, port-forwarding, etc - which you definitely cannot do in an office environment). Skype didn't. Install it, and it worked. Never mind that it was rumoured that skype was sponsored by spy agencies and all communications were routed via their servers. People loved skype, people used it. And some still does.

Hence, telling people __NOT__ to use Zoom will not work unless you can offer an equally convenient solution. The very fact that Zoom rises in popularity is a testimony that others existing solutions (who should know better) can't match the convenience offered by Zoom.

Telling people that Zoom has security problems, however, is a great help. Not many people are aware of the problem. It also forces Zoom to improve their game, and hopefully make it more secure.
Fatdog64 forum links: [url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Latest version[/url] | [url=https://cutt.ly/ke8sn5H]Contributed packages[/url] | [url=https://cutt.ly/se8scrb]ISO builder[/url]

mikprog
Posts: 21
Joined: Mon 30 Mar 2020, 14:11

#13 Post by mikprog »

jamesbond wrote: The fact of the matter is this: people __always__ choose convenience above anything else. Including security. Security will only factor in once the inconvenience of insecure communications outweights that convenience (that is, until there is a security breach).
The another fact is this: the most of people are not choose anything by themselves. Nowadays computers are on the supermarket shelves for people who can't "choose". Software installed on such computers is wild mix of software recommended by friends, neighbors, top of magazine ratings and other savagelikedglassbeads. Nobody (99 percent of computer users) take care about privacy and security breaches at all. So convenience is minor factor for most of users who want to keep mainstream.

step
Posts: 1349
Joined: Fri 04 May 2012, 11:20

#14 Post by step »

[url=http://murga-linux.com/puppy/viewtopic.php?t=117546]Fatdog64-810[/url]|[url=http://goo.gl/hqZtiB]+Packages[/url]|[url=http://goo.gl/6dbEzT]Kodi[/url]|[url=http://goo.gl/JQC4Vz]gtkmenuplus[/url]

User avatar
Flash
Official Dog Handler
Posts: 13071
Joined: Wed 04 May 2005, 16:04
Location: Arizona USA

#15 Post by Flash »

Yes, Jitsi Meet looks like the way to go. Open source and free. Unlike Zoom, it's end-to-end encrypted, if that matters. Zoom is not encrypted in the server and some Zoom traffic is routed through servers in China even if neither end is in China.
Security and Privacy Implications of Zoom

hatemonday
Posts: 35
Joined: Thu 10 Oct 2019, 13:23

#16 Post by hatemonday »

The astonishing growth in the collaboration space drove Zoom shares to record highs. The stock zoomed from $68 at the start of 2020 to an all-time high of $180 last week. It's trading at $138 as I write, down 10% since yesterday.
https://www.fool.com/investing/2020/04/ ... users.aspx
Attachments
fool_investing.jpg
(141.34 KiB) Downloaded 188 times

User avatar
d4rkn1ght
Posts: 55
Joined: Wed 20 Jan 2010, 00:47
Contact:

Zoom's RISE & FALL: A Security & Privacy Analysis

#17 Post by d4rkn1ght »

Zoom's RISE & FALL: A Security & Privacy Analysis

https://youtu.be/K1TsmPY1fNI

phredo
Posts: 65
Joined: Mon 21 Oct 2013, 23:15

#18 Post by phredo »

Just type "meet.jit.si" into a recent Chrome/Chromium browser, and youre off and running!

Post Reply