Earlier quoted context omitted.
well another thing is that zoom is a great name, on a marketing level. It implies speed, and thus implies power. Since you zoom in on things to see them better it implies attention to detail. The productivity of the prime minister is in no way hampered, people, he Zooms!
> It implies speed on far too many lenses I've owned it's simply not true
Zoom’s encryption has links to China, researchers discover
31–40 of 137 posts
Re: Zoom’s encryption has links to China, researchers discover
#32Maybe I've been sensitised by all the security flaws, privacy leaks and outright lies on Zoom's part, but I'm starting to really notice how much a lot of public figures are pushing Zoom. Does anyone else find it really weird? Late-night TV hosts, I can understand - maybe they just get paid for it, or have Zoom shares. But for example UK government leaders repeatedly mentioning it by name, e.g. Matt Hancock saying tha…
Maybe they tried Skype first, which works horrible (tried twice, never managed connect all the participants at the same time), and finally relief over something that actually works. I have used Zoom successfully with 70 participants, and then breakout groups. The only alternative I can see that recently came to my attention is Jitsi Meet ( https://jitsi.org/ ), which I will try next time I have the opportunity. But s…
As far as I can find out, FaceTime is currently the only solution for "just works" (in the sense that your grandma could use it) videoconferencing that is e2e encrypted.
Re: Zoom’s encryption has links to China, researchers discover
#33Earlier quoted context omitted.
Even Wikipedia is stating ECB is a very bad choice. How can someone really use it nowadays without fraudulent intentions?
Many of the alternative modes are unsuitable for this case, as it is being used to encrypt UDP packets which may be lost. There are two commonly used modes which support the random access needed here: - ECB - CTR Note that CTR is still recommended for use and is often used for things like hard-disk encryption where random access is required. Furthermore, the only difference between ECB and CTR is that CTR includes an…
Is there a way to use ECB "correctly"?
Is there any non-repeating data apart from noise (if even)?
Re: Zoom’s encryption has links to China, researchers discover
#34Earlier quoted context omitted.
Maybe they tried Skype first, which works horrible (tried twice, never managed connect all the participants at the same time), and finally relief over something that actually works. I have used Zoom successfully with 70 participants, and then breakout groups. The only alternative I can see that recently came to my attention is Jitsi Meet ( https://jitsi.org/ ), which I will try next time I have the opportunity. But s…
As far as I can find out, FaceTime is currently the only solution for "just works" (in the sense that your grandma could use it) videoconferencing that is e2e encrypted.
But it only works if everyone has Apple devices, so it absolutely does not "just work" if even one family member doesn't have it.
Most video chat apps are straightforward once set up on the phone.
Re: Zoom’s encryption has links to China, researchers discover
#35Well, that large majority of developers not is native-speaking seems highly likely if you only look at output of `zoom.sh` startup script.
No pun intended.
Re: Zoom’s encryption has links to China, researchers discover
#36Earlier quoted context omitted.
As far as I can find out, FaceTime is currently the only solution for "just works" (in the sense that your grandma could use it) videoconferencing that is e2e encrypted.
But it only works if everyone has Apple devices, so it absolutely does not "just work" if even one family member doesn't have it. Most video chat apps are straightforward once set up on the phone.
Are you aware of other video chat apps that support e2e-encrypted multi-party videoconference?
Re: Zoom’s encryption has links to China, researchers discover
#37Maybe I've been sensitised by all the security flaws, privacy leaks and outright lies on Zoom's part, but I'm starting to really notice how much a lot of public figures are pushing Zoom. Does anyone else find it really weird? Late-night TV hosts, I can understand - maybe they just get paid for it, or have Zoom shares. But for example UK government leaders repeatedly mentioning it by name, e.g. Matt Hancock saying tha…
Zoom is popular. Enough that it's both the default for many people and the tech that gets brought up in discussions. My dance school uses zoom. My work uses zoom. Online courses use zoom. Maybe it's more noticeable when famous people mention it, but really - it's a default now. Even if there was some shady push for it, it's also organically massively popular.
trying to download the (self-installing) app twice _every_ time, whilst you're (actively) trying to join a meeting in your browser is the kind of organic popularity the yahoo toolbar had...
Re: Zoom’s encryption has links to China, researchers discover
#38Maybe I've been sensitised by all the security flaws, privacy leaks and outright lies on Zoom's part, but I'm starting to really notice how much a lot of public figures are pushing Zoom. Does anyone else find it really weird? Late-night TV hosts, I can understand - maybe they just get paid for it, or have Zoom shares. But for example UK government leaders repeatedly mentioning it by name, e.g. Matt Hancock saying tha…
Isn't it amazing how video conferencing gets reinvented time and time again?
Re: Zoom’s encryption has links to China, researchers discover
#39I'd recommend reading the original Citizen Lab article as well, which discusses the flaws more specifically. This Intercept article is good, but seems to be aimed at more of a general, less-technical audience.
https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto...
At the very least, they are validating TLS certificates. (Which I know is the true bare minimum requirement of TLS, but "goto fail" and all...)
>We set up mitmproxy to intercept the TLS traffic and configured the Zoom Linux client to route its TLS traffic through mitmproxy. Fortunately, the Zoom client did appear to warn us that the fake TLS certificates generated by mitmproxy were untrusted.
Re: Zoom’s encryption has links to China, researchers discover
#40"home grown encryption scheme" seems to imply Zoom is rolling its own crypto, which is tremendously foolish. That isn't exactly the case, per the same article. More Zoom is choosing a poor choice among other choices, of implementing AES: "Furthermore, Zoom encrypts and decrypts with AES using an algorithm called Electronic Codebook (ECB) mode, “which is well-understood to be a bad idea, because this mode of encryptio…
shipping a statically linked version of openssl 1.0.2o (Q2/18) is not building any trust either.