Live data from Hacker News

Zoom sued for overstating, not disclosing privacy, security flaws

uk.reuters.com

41–50 of 166 posts

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#42
post #16

Earlier quoted context omitted.

Do the other common solutions claim to have e2e encryption?

Yeah. The problem here is that Zoom lied about it. And, like, why ? Sure, if no one ever caught them, e2e could be a reason to choose Zoom—but it's like lying on a resumé. Which, I guess is also a thing that happens sometimes, but it's generally understood to be a bad idea.

Because it was clearly botched marketing material rather than a coordinated plan. Hypothetical: somebody asked an engineer what kind of encryption Zoom used, the engineer responded somewhat vaguely and the marketing person heard "we encrypt between endpoints" as "end to end encryption" and then nobody noticed when reviewing the text.

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#43
post #11

Note that the lawsuit is a class action for shareholders of Zoom stock. Filing: https://i.judge.sh/natural/Babs/1-main.pdf

Interesting that shareholders are the one to fill a lawsuit.

In the US lying to users is merely frowned upon while lying to investors is illegal.

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#44

Earlier quoted context omitted.

Oh wow. ECB mode? That's horrifying.

For those that don't know much about encryption, here is an example image for why ECB mode is trash: https://i.stack.imgur.com/bXAUL.png

Images are uniquely bad for ECB mode since they almost definitionally will have repeated material. ECB mode is bad and shouldn't be used. But it isn't like somebody listening to your zoom traffic can transparently see penguins.

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#46

Earlier quoted context omitted.

Yeah. The problem here is that Zoom lied about it. And, like, why ? Sure, if no one ever caught them, e2e could be a reason to choose Zoom—but it's like lying on a resumé. Which, I guess is also a thing that happens sometimes, but it's generally understood to be a bad idea.

Because it was clearly botched marketing material rather than a coordinated plan. Hypothetical: somebody asked an engineer what kind of encryption Zoom used, the engineer responded somewhat vaguely and the marketing person heard "we encrypt between endpoints" as "end to end encryption" and then nobody noticed when reviewing the text.

Yeah right, oops

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#47

Note that the lawsuit is a class action for shareholders of Zoom stock. Filing: https://i.judge.sh/natural/Babs/1-main.pdf

Is there a simple way for those of us who hold index funds to check if we are shareholders?

yes:

if you hold an index fund which holds zoom, you are not a shareholder, the fund managers are.

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#48
post #11

Note that the lawsuit is a class action for shareholders of Zoom stock. Filing: https://i.judge.sh/natural/Babs/1-main.pdf

Interesting that shareholders are the one to fill a lawsuit.

Shareholders sue companies all the time. Usually an enterprising law firm will cook up some claim and start collecting plaintiffs (shareholders) and then when they win the law firm collects their paycheck.

Re: Zoom sued for overstating, not disclosing privacy, security flaws

#50
Don't know what is going on at Zoom, but I suspected at least part of it sneaky. For example, about 3 or 4 weeks ago I heard about this company, and learned that it has R&D in China per its SEC filing at IPO. However, checked its website, the career section led me to https://jobs.lever.co/zoom, and there was ONLY one opening at China per the website (I remember it was a position at marketing department). Then I searched the company in Chinese media, and saw that they were hiring all types of engineers. That made me feel uncomfortable in buying its stock. Interestingly, now you look at the same career website, and China is removed from the list of city dropdown - maybe they are cutting off or "decoupling" the Chinese R&D?
Post reply on HN