Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zoom monitors activity on your computer

twitter.com

Post reply on HN
Print view View original

141–149 of 149 posts

Re: Zoom monitors activity on your computer

#141

Post by whoislewys »

barbs wrote: post #88
userbinator wrote: post #85

Earlier quoted context omitted.

What I find irritating is this proliferation of meeting apps like these, all using their own proprietary variations of protocols and consuming huge amounts of system resources, when there has been a standard protocol for it that's been around since the late 90s, with a variety of different clients available: SIP. One could be sent a SIP URI for a meeting and it would work in any client. Maybe it's like IRC vs all the…

Excuse my ignorance but is there a good implementation out there that uses this protocol? Jitsi perhaps?

Jitsi Desktop uses SIP (never used it)

Jitsi Meet (browser client) uses WebRTC, and is really nice!

Re: Zoom monitors activity on your computer

#142

Post by whoislewys »

cassianoleal wrote: post #126
hjek wrote: post #119

Earlier quoted context omitted.

I've been using Jitsi Meet a lot as well. It has terrible Firefox support but works decent if all participants are using Chromium / Chrome[0]. Asking other people to install Chromium makes me feel dirty but I don't know any other login-free cross-platform open source easy-to-use video conferencing apps than Jitsi Meet. [0]: https://github.com/jitsi/jitsi-meet/issues/4

That could have been the issue, I haven't asked to be honest. It does tell you that Firefox is not supported when you log in though, so I'd have expected people to say something but hey ho...

Hopefully WebRTC becomes more thoroughly implemented cross-browser Chromium has waaaay better support since WebRTC is primarily maintained by a team at Google.

Re: Zoom monitors activity on your computer

#144

Post by change_yourself »

Truly, I was passing an online interview on programming position, and almost in the end of the process I had remembered that I could be asked on the design patterns, I opened browser, came to the site with patterns' descriptions and... the interviewer's last questions was: "I think that's all... But I have yet one question on the design patterns."

Re: Zoom monitors activity on your computer

#145

Post by madwhitehatter »

discreditable wrote: post #37

When someone sends you a zoom invite, cancel the download, then click the having problems link to download again. Cancel it again. It will show you a link to join by browser. A few other meeting apps have dark patterns like this. One of my favorite things about Hangouts Meet is it's web first.

The one thing nobody ever mentions about this is the Chinese connection. Zoom is 100% developed in China. They have a datacentre in tianjin. Even states in their financial papers. The S1 form that one of the risks is the fact the product is predominantly developed in China. By PRC citizens.

Encryption is also off by default? why is this?

The Zoom App also collects screenshots and transcriptions of shared data. This is fine if you are Facebook or Google.

Re: Zoom monitors activity on your computer

#146

Post by pressurefree »

GuqLyr wrote: post #130
guessmyname wrote: post #93

Earlier quoted context omitted.

This is one of the reasons why I always join a Zoom call from my phone, by calling their international numbers [1]. Recruiters sometimes ask me to turn my video on during interviews… I politely decline and move on to other opportunities. Their app is so privacy invasive, I cannot understand why people keep using it, specially considering 2018 vulnerability [2]. Feross Aboukhadijeh talks about Zoom security problems i…

Looks like Zoom is discussed in Lecture 18: https://web.stanford.edu/class/cs253/lectures/Lecture%2018.p...

STEVEN KING.

Re: Zoom monitors activity on your computer

#148

Post by madwhitehatter »

whoislewys wrote: post #142
cassianoleal wrote: post #126

Earlier quoted context omitted.

That could have been the issue, I haven't asked to be honest. It does tell you that Firefox is not supported when you log in though, so I'd have expected people to say something but hey ho...

Hopefully WebRTC becomes more thoroughly implemented cross-browser Chromium has waaaay better support since WebRTC is primarily maintained by a team at Google.

The question is, why doesn't Zoom use WebRTC in favor of the plug-in. WebRTC uses the SRTP Cryptosuite which is pretty secure and can be made very secure https://wiki.freepbx.org/display/DIMG/SRTP+Cryptosuite

Zoom is unencrypted by default? So you have to physically turn encryption on. Also, it is very unclear if your data is encrypted at rest. "End to end encryption" does not necessarily mean "end-to-end encryption" as has been shown many times before

Re: Zoom monitors activity on your computer

#149

Post by madwhitehatter »

tympan wrote: post #128
Godel_unicode wrote: post #101

Earlier quoted context omitted.

Standards are distinctly not products. Also, the thing that tends to win in this space is lock-in and network effects.

What really wins is if management thinks the interface is pretty.

https://www.infosecurity-magazine.com/news/uk-government-zoo...

https://www.sec.gov/Archives/edgar/data/1585521/000119312519...

The top of page 21 in the first set of SEC documents:

Quote " Many governments have enacted laws requiring companies to provide notice of data security incidents involving certain types of personal data. In addition, some of our customers require us to notify them of data security breaches. Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. In addition, we have a high concentration of research and development personnel in China, which could expose us to market scrutiny regarding the integrity of our solution or data security features. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode confidence in the effectiveness of our security measures, negatively affect our ability to attract new customers and hosts, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could harm our business. "

Post reply on HN