Zoom will enable waiting rooms by default to stop Zoombombing • Hacker News Board

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#11

Post by detaro » Sat, Apr 04, 2020, 1:40 AM UTC

bretpiatt wrote: post #8

Except waiting rooms have a separate security problem https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto... HN thread https://news.ycombinator.com/item?id=22768494

So attackers have now ~24 hours to exploit this unpublished security issue before the second stage, required passwords, becomes active.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#12

Post by shmoogy » Sat, Apr 04, 2020, 2:39 AM UTC

jdlyga wrote: post #4

I work for a large multi-national media company, and we've been using BlueJeans for video conferencing for the last few years. It's been very reliable, but I haven't heard of very many others using BlueJeans. I'm curious if the security issues in Zoom vs its competitors more have to do with the amount of people using it and putting eyes on it.

I found the quality and ease of use better with zoom, it's probably security through obscurity in the case of zoom vs BlueJeans though.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#13

Post by avs733 » Sat, Apr 04, 2020, 2:43 AM UTC

jdlyga wrote: post #4

I work for a large multi-national media company, and we've been using BlueJeans for video conferencing for the last few years. It's been very reliable, but I haven't heard of very many others using BlueJeans. I'm curious if the security issues in Zoom vs its competitors more have to do with the amount of people using it and putting eyes on it.

same.

we've had a few glitches here and there but overall highly reliable. The ability to do a meeting or do an event to prevent zoom bombing type issues is wonderful.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#14

Post by faitswulff » Sat, Apr 04, 2020, 2:55 AM UTC

Waiting rooms don't help because you don't see any identifying information. My sister's call got zoombombed even with a moderated waiting room. They were trying to keep within their university's students, but they couldn't see the email addresses associated with the zoom user name in the waiting room, so a griefer got through.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#15

Post by arwineap » Sat, Apr 04, 2020, 3:00 AM UTC

jdlyga wrote: post #4

I work for a large multi-national media company, and we've been using BlueJeans for video conferencing for the last few years. It's been very reliable, but I haven't heard of very many others using BlueJeans. I'm curious if the security issues in Zoom vs its competitors more have to do with the amount of people using it and putting eyes on it.

Bluejeans seemed to be running into audio issues as we leaned on it heavier recently

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#16

Post by rdlecler1 » Sat, Apr 04, 2020, 3:11 AM UTC

Wouldn’t it have been easier to present an option to the presenter once X number of people joined? So 3-5, no, but more then a dialog pops up asking the presenter if they’d like to have a waiting room.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#17

Post by kerng » Sat, Apr 04, 2020, 3:24 AM UTC

bretpiatt wrote: post #8

Except waiting rooms have a separate security problem https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto... HN thread https://news.ycombinator.com/item?id=22768494

Thanks for highlighting this, i totally missed that there is waiting room security issue pending disclosure.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#18

Post by mroche » Sat, Apr 04, 2020, 4:45 AM UTC

jdlyga wrote: post #4

I work for a large multi-national media company, and we've been using BlueJeans for video conferencing for the last few years. It's been very reliable, but I haven't heard of very many others using BlueJeans. I'm curious if the security issues in Zoom vs its competitors more have to do with the amount of people using it and putting eyes on it.

Red Hat uses Blue Jeans for their webinars, and the OKD project uses it for the WG meetings. Not sure about internally or other projects as I don’t have experience with them nor am I an employee.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#19

Post by TACIXAT » Sat, Apr 04, 2020, 4:55 AM UTC

I see some people running meetings who can barely find the chat. I'm not sure I trust them to manage a waiting room.

Re: Zoom will enable waiting rooms by default to stop Zoombombing

#20

Post by raverbashing » Sat, Apr 04, 2020, 4:57 AM UTC

faitswulff wrote: post #14

Waiting rooms don't help because you don't see any identifying information. My sister's call got zoombombed even with a moderated waiting room. They were trying to keep within their university's students, but they couldn't see the email addresses associated with the zoom user name in the waiting room, so a griefer got through.

For these cases required sign in might be best