Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zoom still don't understand GDPR

threatspike.com

Post reply on HN
Print view View original

191–200 of 267 posts

Re: Zoom still don't understand GDPR

#191

Post by wongarsu »

andrewnicolalde wrote: post #153
grenoire wrote: post #147

Earlier quoted context omitted.

I thought the rule was: If you can see it plaintext on the screen, it's not safe.

Could you elaborate on that? Of course no computer is completely secure against all forms of attack, but I’ve found statements like these to not contribute very much towards solving any practical security problems.

On windows any program can read the contents of any window on the current desktop (with some exceptions, like UAC prompts and other windows that dim your entire screen). This has legimate use cases for screen readers or dictation, but of course it can also be abused. Same for X11. On more modern operating systems like Android the user needs to take very explicit action to allow an app to do that.

Re: Zoom still don't understand GDPR

#192

Post by robflaherty »

currysausage wrote: post #158
robflaherty wrote: post #142

“Zoom cookies are firstly written when the user connects to the website zoom.us and accepts the cookies options.” That was the moment Zoom received your consent to store data transmitted by cookies. Adding a few more cookies to the pile, regardless of expiration date, doesn’t change the agreement. Rummaging round the cookie bin on uninstall is a nice find and deserves a raised eyebrow but this doesn’t really have any…

This is very likely not valid consent under GDPR. Look at specific guidance on valid consent by DPAs: https://ico.org.uk/for-organisations/guide-to-data-protectio...

Can you explain what is invalid about it? The list of functional cookie permissions on the consent opt-in specifically mentions cookies to remember log in details.

Re: Zoom still don't understand GDPR

#193

Post by dividedbyzero »

quadrangle wrote: post #57
Geezus_42 wrote: post #33

Earlier quoted context omitted.

The web version also won't allow the host to request control from what I can tell. I use it daily for remote support because new webex sucks and no one knows what jitsi is.

Chicken-and-egg etc. People will know what Jitsi is when you use it with them. It's so simple, why not have them use it? Why do they have to know it already?

When Teams breaks, it's Teams's fault. When Jitsi breaks, it's your fault.

Re: Zoom still don't understand GDPR

#194

Post by impendia »

whereistimbo wrote: post #173

Why people still uses zoom? Something like Google Meet or Microsoft Teams are better.

Because it's frictionless. It's very easy to set up a Zoom meeting with anyone in the world.

When I tried MS Teams, my impression was that it required a fair amount of advance configuration. This is no problem if you're meeting the same people repeatedly and they work for the same employer as you. Indeed, as the name of the software suggests, it's good for "teams". But for me, anyway, this hasn't been my typical use case.

Re: Zoom still don't understand GDPR

#195

Post by NicoJuicy »

robflaherty wrote: post #142

“Zoom cookies are firstly written when the user connects to the website zoom.us and accepts the cookies options.” That was the moment Zoom received your consent to store data transmitted by cookies. Adding a few more cookies to the pile, regardless of expiration date, doesn’t change the agreement. Rummaging round the cookie bin on uninstall is a nice find and deserves a raised eyebrow but this doesn’t really have any…

> According to the ePrivacy Directive, they should not last longer than 12 months.

( Quick search about cookies)

Re: Zoom still don't understand GDPR

#197

Post by gspr »

hajwh wrote: post #143
1vuio0pswjnm7 wrote: post #5

I love how when you go to enter a Zoom meeting, they bury the no-install, run-in-browser link in small type in a footer. And then, if you manage to see the link and use the browser, they withhold "Gallery View", forcing you to deal with the extremely annoying "Active Speaker View".

Holy shit - you can run Zoom in the browser???

Yes, of course. People wouldn't be crazy enough to install the binary blob of this extremely sketchy company, would they!?

Re: Zoom still don't understand GDPR

#199

Post by rbg246 »

panpanna wrote: post #189
donkeyd wrote: post #155

Earlier quoted context omitted.

Try a different browser. On Mac, Safari is much more resource efficient than Chrome for example. On Windows I'm not sure, but it can't hurt t give FF a try.

Last I checked FF was not even supported :)

Looks supported now

Re: Zoom still don't understand GDPR

#200

Post by Lio »

whereistimbo wrote: post #173

Why people still uses zoom? Something like Google Meet or Microsoft Teams are better.

Zoom has a lot of brand recognition that gives them momentum.

The BBC for instance regularly talks about Zoom for video conferencing. They rarely, if ever, discuss the privacy implications of Zoom or that alternatives are available* in articles not directly about Zoom's privacy failings.

* mentioning "other are available" has become a widely known running joke for the BBC as their charter says they shouldn't favour one firm over another. For instance, in East Enders when in the pub always ask for "vodka", "gin and tonic" or "larger" but never a brand name.

They seem to have dropped that in the case of Zoom.

Post reply on HN