They’re in the same bed as China. I don’t trust them for anything now, this to me is just a PR management exercise. They’re still going to give away your data
Zoom’s 90-day plan to bolster key privacy and security initiatives
11–20 of 113 posts
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#12Earlier quoted context omitted.
I think this is the Zoom response to that one: https://blog.zoom.us/wordpress/2020/04/03/response-to-resear... As I read it they accidentally routed some data to China based servers for a month (Feb 2020) due to a config mess up during their crazy fast scaling period. This is since fixed.
They were making requests to IPs in China long before Feb 2020. At the time I assumed they’d been hacked, but in retrospect it seems like this was just how their organisation is distributed. Needless to say, I have decided not to endorse their videoconferencing solution.
Do you have evidence of this?
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#13They’re in the same bed as China. I don’t trust them for anything now, this to me is just a PR management exercise. They’re still going to give away your data
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#14So were they really sending data to servers in China? From what little I've heard and read about this, that is what stood out to me. Not sure they should ever be trusted again after that.
I think this is the Zoom response to that one: https://blog.zoom.us/wordpress/2020/04/03/response-to-resear... As I read it they accidentally routed some data to China based servers for a month (Feb 2020) due to a config mess up during their crazy fast scaling period. This is since fixed.
I'm inclined to believe that for now. Though I fully expect that a bunch of security researchers will be taking a very close look indeed at exactly what data is still going to or through China. I am open to changing my mind upon seeing evidence that, after being informed of the problem and promising to correct it, they failed to resolve the issue and continue to send data to any country it doesn't need to go to.
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#15They’re in the same bed as China. I don’t trust them for anything now, this to me is just a PR management exercise. They’re still going to give away your data
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
Are you suggesting that China isn't responsible for repeated, massive state-sponsored hacks? That they aren't actively committing industrial espionage primarily through said state-sponsored hacking?
If you're not saying that, then why are you pretending the fact that Zoom is sending keys THROUGH CHINA and developing the product IN CHINA is not a big deal?
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#16Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#17I showed Alex Stamos information two days ago that Zoom engineers had surreptitiously spied on women around the world and then assembled their webcams into a single dashboard for Zoom engineers to view.
The name of this dashboard was p*ssy4all.dashboard-production.ipa.zoom.us. A quick way to prove this is to type this subdomain into securitytrails.com.
It lists a dozen different IP addresses this internal product had for several months between September and November of 2019.
LINK: https://securitytrails.com/domain/pussy4all.dashboard-produc...
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#18They’re in the same bed as China. I don’t trust them for anything now, this to me is just a PR management exercise. They’re still going to give away your data
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
There's many reasons not to trust the CPC. (ip theft, surveillance, etc.)
There's also many humanitarian concerns as well:
https://www.cnn.com/2018/10/10/asia/xinjiang-china-reeducati...
https://nypost.com/2019/06/01/chinese-dissidents-are-being-e...
https://www.npr.org/sections/health-shots/2019/09/04/7570898...
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#19"90 day plans" tend to be management & PR things... Real engineering is more of a "it takes as long as the job takes"...
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#20Earlier quoted context omitted.
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
Are you suggesting that China isn't responsible for repeated, massive state-sponsored hacks? That they aren't actively committing industrial espionage primarily through said state-sponsored hacking? If you're not saying that, then why are you pretending the fact that Zoom is sending keys THROUGH CHINA and developing the product IN CHINA is not a big deal?
It's the industrial espionage angle that is probably more concerning. The Chinese government certainly can get attendee lists and keys for Zoom meetings; want to listen to meetings the cxx folks are in?
Or worse, steal prospects for domestic companies? I'd be pretty enthused about getting the list of people my competitors are doing sales calls with.