They’re in the same bed as China. I don’t trust them for anything now, this to me is just a PR management exercise. They’re still going to give away your data
So...use a US based video conferencing tool? I'm sure there are no backdoors in those!
Zoom’s 90-day plan to bolster key privacy and security initiatives
21–30 of 113 posts
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#22Zoom won the proverbial lottery with this pandemic and lost their ticket through greed/laziness. Great companies are always prepared when their big break comes. Zoom is not a great company.
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#23I showed Alex Stamos information two days ago that Zoom engineers had surreptitiously spied on women around the world and then assembled their webcams into a single dashboard for Zoom engineers to view. The name of this dashboard was p*ssy4all.dashboard-production.ipa.zoom.us. A quick way to prove this is to type this subdomain into securitytrails.com. It lists a dozen different IP addresses this internal product had…
I don't see anything for that domain...
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#24I showed Alex Stamos information two days ago that Zoom engineers had surreptitiously spied on women around the world and then assembled their webcams into a single dashboard for Zoom engineers to view. The name of this dashboard was p*ssy4all.dashboard-production.ipa.zoom.us. A quick way to prove this is to type this subdomain into securitytrails.com. It lists a dozen different IP addresses this internal product had…
Can you link? I couldn't find that on securitytrails
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#25I showed Alex Stamos information two days ago that Zoom engineers had surreptitiously spied on women around the world and then assembled their webcams into a single dashboard for Zoom engineers to view. The name of this dashboard was p*ssy4all.dashboard-production.ipa.zoom.us. A quick way to prove this is to type this subdomain into securitytrails.com. It lists a dozen different IP addresses this internal product had…
How is that not the biggest scandal around this company, as opposed to intentional or not misinformation about end to end encryption (not that it doesn't count, but for this one, if it's real, the company should be brought up to public scrutiny).
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#26I'm still not sure what to think of the whole debacle.
Zoom could be a victim of the internet mob justice, where every inevitable misstep is blown out of proportion. Perhaps the mob is helped along by some competing interests. Or Zoom could be yet another tech company with dubious ethics (like U: or F). I doubt they are outright a PLA branch, that would be far too obvious.
This isn't just idle musings - I love how Zoom allows me to share screen/whiteboard, and see people's faces at the same time. It works really well for remote dev collaboration, in some ways better than physical presence. And yet the question of safety remains.
Should I go and research WebEx?
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#27Earlier quoted context omitted.
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
Are you suggesting that China isn't responsible for repeated, massive state-sponsored hacks? That they aren't actively committing industrial espionage primarily through said state-sponsored hacking? If you're not saying that, then why are you pretending the fact that Zoom is sending keys THROUGH CHINA and developing the product IN CHINA is not a big deal?
> Are you suggesting that China isn't responsible for repeated, massive state-sponsored hacks? That they aren't actively committing industrial espionage primarily through said state-sponsored hacking?
Nope, not at all. They're guilty of all of it and probably more.
> If you're not saying that, then why are you pretending the fact that Zoom is sending keys THROUGH CHINA and developing the product IN CHINA is not a big deal?
Because for me, as an European, it doesn't really make much difference does it? Both countries are currently led by lying dishonest governments which are spying on anything and everything that moves. If anything, it disappoints me that Americans are wasting so much time complaining about China while the worst parts of the Chinese regime are growing and thriving on their own backyard and affecting their own wellbeing.
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#28I'm still not sure what to think of the whole debacle. Zoom could be a victim of the internet mob justice, where every inevitable misstep is blown out of proportion. Perhaps the mob is helped along by some competing interests. Or Zoom could be yet another tech company with dubious ethics (like U: or F). I doubt they are outright a PLA branch, that would be far too obvious. This isn't just idle musings - I love how Zo…
Occam’s Razor. Zoom usage went up by 8x in a few months. Usually doubling in two years is great for a public company. So that’s 6 years of great growth, compressed into a few months. It shouldn’t be surprising to see six years of security problems also compressed into those three months.
I think Zoom is on track to fix these problems quickly and cement their spot as the best solution for videoconferencing.
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#29Earlier quoted context omitted.
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
There's many reasons not to trust the CPC. (ip theft, surveillance, etc.) There's also many humanitarian concerns as well: https://www.cnn.com/2018/10/10/asia/xinjiang-china-reeducati... https://nypost.com/2019/06/01/chinese-dissidents-are-being-e... https://www.npr.org/sections/health-shots/2019/09/04/7570898...
Interesting that all these comments are being downvoted, even though they all agree with each other?
Re: Zoom’s 90-day plan to bolster key privacy and security initiatives
#30Earlier quoted context omitted.
China, the best bogeyman to discredit anyone you don't like. Is that the 2020s version of a "commie"?
There's many reasons not to trust the CPC. (ip theft, surveillance, etc.) There's also many humanitarian concerns as well: https://www.cnn.com/2018/10/10/asia/xinjiang-china-reeducati... https://nypost.com/2019/06/01/chinese-dissidents-are-being-e... https://www.npr.org/sections/health-shots/2019/09/04/7570898...
> There's many reasons not to trust the CPC. (ip theft, surveillance, etc.)
That's pretty much the summary of US attacks on our EU government as well (remember the backdoor direct attack on Belgacom?), soo... why does it make a difference? If anything, routing things through China denies our data to NSA and makes it less concentrated and useful. Similarly how spreading data over multiple cloud providers gives less power to Google et. al.