Zoom rolled their own encryption scheme, transmit keys through servers in China
1–10 of 316 posts
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#2This is honestly the best “Zoom is bad” summery I’ve seen so far. While I certainly believe some of the Zoom hate is blown out of proportion, this article does a good job explaining to someone who isn't a security expert what the issues are. I've been getting questions about the company from family and friends, and will be forwarding this to them. Well done.
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#3This is honestly the best “Zoom is bad” summery I’ve seen so far. While I certainly believe some of the Zoom hate is blown out of proportion, this article does a good job explaining to someone who isn't a security expert what the issues are. I've been getting questions about the company from family and friends, and will be forwarding this to them. Well done.
I think of it as a warning to future companies who take these kind of liberties...
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#4Keynote:
Zoom’s encryption and decryption use AES in ECB mode
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#5Zoom just works great ... just focus on making a better product (aggh Google Hangouts) than hyping up the hysteria by adding China to the mix.
It is rather suspicious to see all the articles of late.
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#6Is there any reasonable explanation for why this scheme was designed in this manner?
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#7Keynote: Zoom’s encryption and decryption use AES in ECB mode
[deleted]
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#8Zoom deserves a lot of animosity for its privacy issues like sharing data with Facebook.
On the other hand I am mystified by all the security hype. Yes I might be able to guess a Zoom meeting ID, just as if I might guess your phone number and prank call you. In a Zoom meeting you can see who is connected. In the old days of conference calls do you remember asking “who’s on the line?”. What are you talking about that requires encryption?
If so there are tools for that - signal, etc.
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#9Could we fix the title of this post please? There is a GULF of difference between 'transmit keys through servers in China' and the actual text from the article, " We suspect that keys may be distributed through these servers."
Implication is fine, but it should not be declarative without proof.
Re: Zoom rolled their own encryption scheme, transmit keys through servers in China
#10> Zoom’s most recent SEC filing shows that the company (through its Chinese affiliates) employs at least 700 employees in China that work in “research and development.”
Wow. What could all of these people possibly be doing? It can't be development and QA; what's going on over there?