Zoom still don't understand GDPR • Hacker News Board

Re: Zoom still don't understand GDPR

#21

Post by MrStonedOne » Fri, Aug 28, 2020, 1:34 AM UTC

awinter-py wrote: post #18

wow as with everything that's come out about them it feels like they're trying to get the job done but with limited platform support and badly it's not absurd for a product manager to want your desktop zoom app to inherit your browser login though as a user if I saw this behavior I would have a few wtfs. But as a user I would never ever install zoom on a laptop my takeaway from this isn't GDPR implications, it's that…

it does it on uninstall, not install.

Re: Zoom still don't understand GDPR

#22

Post by DenseComet » Fri, Aug 28, 2020, 1:40 AM UTC

It's unfortunate that they bought and destroyed Keybase [1] in a bid to improve their security and even still there seems to be no improvement. Guess even the best folks can't make an impact if company culture prevents it.

[1] https://github.com/keybase/client/graphs/commit-activity

Re: Zoom still don't understand GDPR

#23

Post by ppezaris » Fri, Aug 28, 2020, 1:40 AM UTC

ricardo81 wrote: post #10

edoceo wrote: post #6

Brief: adds cookies to Chrome on the UNinstall process. Includes a funny "everlogin" one that lasts 10yr

Worth mentioning that the uninstaller sets the cookie by adapting your cookies file after reading contents of the file entirely unrelated to Zoom.

Worth mentioning that the author speculates that this happens not for a nefarious reason, but in a binary tree search to locate your zoom cookie.

Re: Zoom still don't understand GDPR

#24

Post by suprfsat » Fri, Aug 28, 2020, 1:43 AM UTC

jefftk wrote: post #17

1vuio0pswjnm7 wrote: post #5

I love how when you go to enter a Zoom meeting, they bury the no-install, run-in-browser link in small type in a footer. And then, if you manage to see the link and use the browser, they withhold "Gallery View", forcing you to deal with the extremely annoying "Active Speaker View".

They do have a Chrome App that will run zoom in Chrome with gallery view, but they hide that even more thoroughly unless you're on ChromeOS: https://chrome.google.com/webstore/detail/zoom/hmbjbjdpkobdj...

To be fair, Chrome apps are ending next year. https://blog.chromium.org/2020/08/changes-to-chrome-app-supp...

Maybe they'll be forced to make a usable web version by then, but I doubt it.

Re: Zoom still don't understand GDPR

#25

Post by wnoise » Fri, Aug 28, 2020, 1:50 AM UTC

ComputerGuru wrote: post #16

andrewnicolalde wrote: post #2

Disclaimer: I used to work at ThreatSpike Labs but left before this article was written and before any of the findings on this article were discovered.

HN is cool with self-posting, so in all cases you’re in the clear.

Yes, but they (we) still like disclosure.

Re: Zoom still don't understand GDPR

#26

Post by [deleted] » Fri, Aug 28, 2020, 1:52 AM UTC

ricardo81 wrote: post #10

edoceo wrote: post #6

Brief: adds cookies to Chrome on the UNinstall process. Includes a funny "everlogin" one that lasts 10yr

Worth mentioning that the uninstaller sets the cookie by adapting your cookies file after reading contents of the file entirely unrelated to Zoom.

[deleted]

Re: Zoom still don't understand GDPR

#27

Post by m11a » Fri, Aug 28, 2020, 1:54 AM UTC

qppo wrote: post #11

saagarjha wrote: post #3

C'mon, what does it take for Zoom to understand that when people uninstall software they don't want parts of it to stick around forever?

Usually this happens because the person who wrote the file or daemon didn't write the uninstaller and no one gives a hoot about it at review. Never assume malice that which can be explained by a poor engineering culture

Especially when you consider the software and design of Zoom, poor engineering culture sounds like the more realistic answer.

Re: Zoom still don't understand GDPR

#28

Post by turblety » Fri, Aug 28, 2020, 1:54 AM UTC

DenseComet wrote: post #22

It's unfortunate that they bought and destroyed Keybase [1] in a bid to improve their security and even still there seems to be no improvement. Guess even the best folks can't make an impact if company culture prevents it. [1] https://github.com/keybase/client/graphs/commit-activity

Yeah this was so sad, but I'm happy the guys that made it got paid. Even they would have known this was the end for Keybase. Hopefully when their non-compete clauses end the developers will make another product the same.

Re: Zoom still don't understand GDPR

#29

Post by andrewnicolalde » Fri, Aug 28, 2020, 1:58 AM UTC

DenseComet wrote: post #22

It's unfortunate that they bought and destroyed Keybase [1] in a bid to improve their security and even still there seems to be no improvement. Guess even the best folks can't make an impact if company culture prevents it. [1] https://github.com/keybase/client/graphs/commit-activity

Same, they were my preferred platform for secure messaging, which is bizarre when you think about the fact that this wasn't even their original purpose. I guess this was indicative of the general lack of a single defined direction the product was going in near the time of the Zoom acquisition. What a shame. Hopefully someone makes something similar.

Re: Zoom still don't understand GDPR

#30

Post by arkadiyt » Fri, Aug 28, 2020, 2:00 AM UTC

1vuio0pswjnm7 wrote: post #5

I love how when you go to enter a Zoom meeting, they bury the no-install, run-in-browser link in small type in a footer. And then, if you manage to see the link and use the browser, they withhold "Gallery View", forcing you to deal with the extremely annoying "Active Speaker View".

> they bury the no-install, run-in-browser link

I wrote a browser extension that will transparently redirect all zoom links to user their web client:

https://github.com/arkadiyt/zoom-redirector