Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

vice.com

Post reply on HN
Print view View original

11–20 of 30 posts

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#11

Post by strbean »

vkou wrote: post #4
Ijumfs wrote: post #3

Why are courts using Chinese spyware to conduct official business?

The same reason why Europeans use American spyware and adware to communicate with eachother. Because the risk profile permits it. In this county, many courts are open, and prior to COVID, you could just walk into one and listen. Court decisions are likewise open, and part of the public record. Edit: Did you also know that courts and lawyers still use faxes? Did you know that tapping a fax line has been trivial for de…

"Sorry, we can't accept an email. You'll have to fax it to us. Why, you ask? Because security reasons..."

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#12

Post by supernova87a »

AdmiralAsshat wrote: post #2

> According to Ryan Hughes, a reporter from local outlet WFLA, Judge Christopher Nash said next time he'll require a password. Are you kidding me? I know the courts tend to be tech Luddites, but jeeze.

Well, this brings up the problem, even if you require a password, as an open court, they're required to publish it to allow people to join. Would they simply post it physically somewhere and only local people could access? But then people could share it with bad actors anyway.

Maybe it would just reduce the volume of attacks, not eliminate them.

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#13

Post by dhosek »

ilikehurdles wrote: post #7

Organizations really need someone who is technically proficient enough to dig in to zoom settings and configure meetings to disallow anonymous users, screen shares, videos. Zoombombing can be simply prevented by putting everyone not part of the hearing in a "listen-only" mode, and I'm pretty sure the controls to enable that are already there.

I'd argue that this is something that Zoom should have made easily discoverable and probably the default from the beginning. It's bad UI design.

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#14

Post by AdmiralAsshat »

supernova87a wrote: post #12
AdmiralAsshat wrote: post #2

> According to Ryan Hughes, a reporter from local outlet WFLA, Judge Christopher Nash said next time he'll require a password. Are you kidding me? I know the courts tend to be tech Luddites, but jeeze.

Well, this brings up the problem, even if you require a password, as an open court, they're required to publish it to allow people to join. Would they simply post it physically somewhere and only local people could access? But then people could share it with bad actors anyway. Maybe it would just reduce the volume of attacks, not eliminate them.

I have to use Zoom at my day-job, and there's quite a few things you can do to try to minimize noise, unwanted guests, etc, including:

- Automatically muting people on entry

- Not allowing people to unmute themselves

- "Locking" the room after the mandatory attendees have joined.

It's not intuitive, but it's not super-complicated, either. I don't think it's a failure of the judge, per se--it's a failure of the court not to provide someone knowledgeable to help setup the meeting.

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#15

Post by jonny_eh »

supernova87a wrote: post #12
AdmiralAsshat wrote: post #2

> According to Ryan Hughes, a reporter from local outlet WFLA, Judge Christopher Nash said next time he'll require a password. Are you kidding me? I know the courts tend to be tech Luddites, but jeeze.

Well, this brings up the problem, even if you require a password, as an open court, they're required to publish it to allow people to join. Would they simply post it physically somewhere and only local people could access? But then people could share it with bad actors anyway. Maybe it would just reduce the volume of attacks, not eliminate them.

They could use Zoom for meeting participants, and a separate video streaming service for viewers.

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#16

Post by [deleted] »

supernova87a wrote: post #12
AdmiralAsshat wrote: post #2

> According to Ryan Hughes, a reporter from local outlet WFLA, Judge Christopher Nash said next time he'll require a password. Are you kidding me? I know the courts tend to be tech Luddites, but jeeze.

Well, this brings up the problem, even if you require a password, as an open court, they're required to publish it to allow people to join. Would they simply post it physically somewhere and only local people could access? But then people could share it with bad actors anyway. Maybe it would just reduce the volume of attacks, not eliminate them.

[deleted]

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#17

Post by jaywalk »

jonny_eh wrote: post #15
supernova87a wrote: post #12

Earlier quoted context omitted.

Well, this brings up the problem, even if you require a password, as an open court, they're required to publish it to allow people to join. Would they simply post it physically somewhere and only local people could access? But then people could share it with bad actors anyway. Maybe it would just reduce the volume of attacks, not eliminate them.

They could use Zoom for meeting participants, and a separate video streaming service for viewers.

That's what all of the courts I've seen do. They stream the Zoom meeting via YouTube.

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#19

Post by supernova87a »

jaywalk wrote: post #17
jonny_eh wrote: post #15

Earlier quoted context omitted.

They could use Zoom for meeting participants, and a separate video streaming service for viewers.

That's what all of the courts I've seen do. They stream the Zoom meeting via YouTube.

Ah, that's a good solution. Although clearly beyond the current capabilities of many departments still...

Re: Twitter Hack Zoom Court Hearing Interrupted by Zoombombers

#20

Post by Nullabillity »

henryfjordan wrote: post #18
Ijumfs wrote: post #3

Why are courts using Chinese spyware to conduct official business?

The court is already public, no spying necessary.

So? Most of Zoom's vulnerabilities have been about endpoint security, not meeting privacy.
Post reply on HN