First TikTok now Zoom.
Chinese soft power with a side of espionage.
SpaceX bans Zoom over privacy concerns
191–200 of 301 posts
Re: SpaceX bans Zoom over privacy concerns
#192Re: SpaceX bans Zoom over privacy concerns
#193The fact that they show end users (no pun intended) an "end-to-end encrypted" badge on the meeting window itself, and elsewhere explain how a Zoom server (not Zoom client) is what constitutes an "end" despite the whole rest of the electronic communication industry using "end-to-end" to refer exclusively to user agents, is bonkers.
It says "connection is encrypted" in the current version. No mention of end-to-end whatsoever.
https://zoom.us/security still says "Secure a meeting with end-to-end encryption"
Re: SpaceX bans Zoom over privacy concerns
#194Earlier quoted context omitted.
Agreed. It's unlikely they stumbled onto an industry standard phrase like that alone, then innocently used it without knowing the generally accepted meaning. This is deceptive advertising.
Not just "deceptive" nor "unlikely", it's blatant false advertising.
This bothers me so much - as I have personally recommended zoom to many people and customers. People that have likely seen that I spend an unusual amount of time focused on computer security, backups, and care in communications.
If I remember correctly, zoom used to have on the front page - use this it's encrypted, and 'even used by us govt something-something' - so I assumed it was completely secure.
I actually refused to use other conference services much to the bemoans of many clients who already had other 'goto' software installed, used and understood - and convinced them that in order to talk turkey we needed to use the real secure zoom system.
It passed the smell test at the time for me because they also had paid plans which meant to me a legitimate business that did not need to slay privacy with ads and such, as they had a clear path to make money.
Now they are tarnished, and my reputation with several clients and doctors and others may be as well - as this is getting mainstream press (I think that's a good thing actually) - I'm livid about this.
I agree with below it is also fraud - and another commentator mentioned they changed to "your client connection is encrypted" is still deception imho. Needs a big asterisk and real explanation of the lack of privacy.
Re: SpaceX bans Zoom over privacy concerns
#195Earlier quoted context omitted.
iMessage itself bugs you to enable backups? > iOS programs choose how their data is backed up. Well desktop apps don't. Would you say that no desktop app that saves its key can ever qualify as end-to-end encrypted? > And besides, iCloud is made by the same company, it's not a separate entity. I'm not convinced that's relevant to whether the encryption is end-to-end or not.
> Would you say that no desktop app that saves its key can ever qualify as end-to-end encrypted? I would say that no app can qualify as end-to-end encrypted if a large fraction of users send their data to the maker of the app in a form that can be decrypted by the maker of the app, regardless of the reason.
If iMessage was made by a third party and worked exactly the same then you'd have no objection to calling it end-to-end encrypted?
Re: SpaceX bans Zoom over privacy concerns
#196Earlier quoted context omitted.
I haven't used Hangouts on a professional setting in a while. Does it finally support tile view? Another feature I find really valuable is allowing two windows. One for participant view and a separate one for shared screen.
Nope. Have to resort to chrome extension to get the tile view.
When not in presentation mode.
Re: SpaceX bans Zoom over privacy concerns
#197The fact that they show end users (no pun intended) an "end-to-end encrypted" badge on the meeting window itself, and elsewhere explain how a Zoom server (not Zoom client) is what constitutes an "end" despite the whole rest of the electronic communication industry using "end-to-end" to refer exclusively to user agents, is bonkers.
They are using the same language as Apple talking about iMessage and FaceTime. Apple talks about end to end encryption, but one end is iCloud which is why you can get your messages simultaneously on all devices.
That's not true at all. iMessage is really end-to-end encrypted.
Two options impact it: "Messages in iCloud" re-encrypts and uploads messages to the user's iCloud account and stores the key in iCloud Keychain (also end-to-end encrypted).
Only when enabling iCloud backup will that key be revealed to Apple.
Re: SpaceX bans Zoom over privacy concerns
#198Earlier quoted context omitted.
> Would you say that no desktop app that saves its key can ever qualify as end-to-end encrypted? I would say that no app can qualify as end-to-end encrypted if a large fraction of users send their data to the maker of the app in a form that can be decrypted by the maker of the app, regardless of the reason.
If iMessage was made by a third party and worked exactly the same then you'd have no objection to calling it end-to-end encrypted?
No. This is a necessary condition for being end-to-end encrypted, not a sufficient one. But iMessage doesn't meet it.
Re: SpaceX bans Zoom over privacy concerns
#199Earlier quoted context omitted.
And the amount of classified material they handle, and the fact that Jeff Bezos is a direct competitor so Amazon is very very closely affiliated with a direct competitor.
So, SpaceX.com at least uses an IP address owned by Amazon: https://www.abuseipdb.com/whois/50.112.120.214 slenk@Enterprise:~$ host spacex.com spacex.com has address 50.112.120.214 [output truncated]
Well, there is no security problem to host a public web site on e.g. AWS. I think the restrictions more affect internal, confidential data.
Re: SpaceX bans Zoom over privacy concerns
#200Has anyone noticed how hard some late-night-US-TV-shows are pushing (advertising) Zoom?
Stephen Colber, Seth Meyers...
Zoom is spending big $$$$ to advertise. While competition (WebEx for example) has been silently killing it. I feel that Zoom wants to be "the new cool kid" in town for which nobody knows anything about.. and while we do learn it looks that it's got some shady practices (as we discuss here).