Live data from Hacker News

Google bans Zoom from employees' computers

buzzfeednews.com

381–390 of 450 posts

Re: Google bans Zoom from employees' computers

#381

Earlier quoted context omitted.

> because it costs Google a nontrivial amount of money for every user. Google is the fourth biggest public company in the world as measured by market cap. A Microsoft 365 "E3" license is $20/user/month. They can afford it. This restriction is entirely about eating your own dogfood.

I'd seriously doubt more than a few of people at Google would want to use 365 at work. I for one never felt the need when I was there nor afterwards and the entire company is fully utilizing Google Docs which is a better product as far as sharing and search is concerned. It's not like people at Google constantly email .docx files to each other, lol. Nevertheless, you can request it (in an AppStore like fashion, not s…

Docs is good at sharing and searching, but bad at editing. Anything over a few pages brings a workstation to its knees.

Re: Google bans Zoom from employees' computers

#382
post #262

Earlier quoted context omitted.

MS Office isn't "banned" from employees' computers at Google. If you need it (and some do) you must request it specifically, because it costs Google a nontrivial amount of money for every user. Same thing with any piece of commercial software: for example, I have Adobe Photoshop on my Google laptop, and I had to request it because it costs Google a few hundred bucks, and most people don't need it at all. Before Googl…

I haven't once thought, "Gee, I really wish I could use Microsoft Word". I have thought, "there's a capability I wish I had in Docs" a few times. I did most of my doc writing in LyX before Google, though.

Entire GSuites is a productivity and doc formatting disaster. From docs, sheets to mail all very inconsistent and formatting of content and information is terrible compared to Office. Glad I'm back at a company that uses O365.

Re: Google bans Zoom from employees' computers

#383
post #103

Earlier quoted context omitted.

> Google's threat model may not be your threat model, and it definitely isn't the threat model of my daughter's school. A corporation like Google may be concerned using native applications, written in unsafe languages, written by developers from other corporations in China. That said, Zoom isn't wrong for everyone. Google's threat model surely differs in some way from a school, but the specific threats you named seem…

The threat model for a school is kids/others disrupting sessions and creepers using access to gawp at (or communicate with kids). Since the Chinese government is unlikely to feel the need to compel Zoom to do that, the fact that they have all the keys centrally stored is not a problem. Google's threat model actually does include state level attack (And specifically by China) to steal IP or access confidential user da…

A risk when talking about memory safety vulnerabilities is that someone (not china especially, just someone exploiting zoom) pwns the child's or family's computing infrastructure and gains access to everything running on there and possibly does it without detection for a long time. It's badically an all-bets-are-off situation that also puts social media contacts at risk.

Zoom is of course just one vector for this, but the threat model of "it's just schoolwork at risk" is wrong. It's actually integrity of tje computing environment.

Re: Google bans Zoom from employees' computers

#384
post #371

Earlier quoted context omitted.

I can't comment on that because I rarely use Sheets or Excel. I think my usage of Sheets is `=SUM...` :D

Then I'm not sure why you're replying to my comment about Excel. :-)

Because even between Excel / Sheets, formatting is still much easier in Excel. But formulas I cannot comment on as I just don't use that.

Re: Google bans Zoom from employees' computers

#385
post #207

Earlier quoted context omitted.

The threat model for a school is kids/others disrupting sessions and creepers using access to gawp at (or communicate with kids). Since the Chinese government is unlikely to feel the need to compel Zoom to do that, the fact that they have all the keys centrally stored is not a problem. Google's threat model actually does include state level attack (And specifically by China) to steal IP or access confidential user da…

> The threat model for a school is kids/others disrupting sessions and creepers using access to gawp at (or communicate with kids). Not if the school actually cares about the future of its students. From a blog post[0] we published at NuCypher a while back: > If we fail to take action now, we risk a world in which unsavory actors - domestic and foreign - have built rich, comprehensive profiles for every one of our ch…

Is Google or Facebook any better in this regard?

Re: Google bans Zoom from employees' computers

#386
post #339
post #333

Earlier quoted context omitted.

When you say hangouts, do you mean old hangouts or the newer Hangouts Meet? They are 2 very different products.

It is, as of today, just Google Meet, no "Hangouts".

Hangouts still exists, I'm too confused at this stage as to what is what.

Re: Google bans Zoom from employees' computers

#387
post #303

(disclaimer: I work at El Goog) A number of companies have rightfully banned Zoom's native apps, given how insecure they are. I had previously uninstalled it when the news about the secret web server they install came out. Google is still allowing use of the web app, but the web app bizarrely doesn't support Grid/Gallery View, which is the main reason my friends/family wanted to use it. Hangouts Meet was optimized fo…

I went from Zoom to Jitsi with my family, because I was tired of it pushing the desktop client to me and the webapp limitations as you point out. Jitsi web supports Grid view, as well as desktop sharing (with audio!). We've been playing Jackbox games over it just fine.

How do you manage the audio for your games? Do you use the newer audio sharing setup, or have you rigged something up in OBS, etc?

Re: Google bans Zoom from employees' computers

#388
post #55

Is there any technical merit to this ban? Why would forcing use of web version mitigate any concerns? (The concerns I have heard are lack of proper end-to-end encryption, servers in China and the possibility to join chatrooms by guessing a name (zoom-bombing)).

Using Zoom or any other videoconferencing app that might retain data for an internal meeting is presumably banned regardless, and unnecessary given that Google Meet exists. But some employees might need to use it to videoconference with customers and partners, and some employees might be using it for personal calls on their work laptop. Banning the native app of a company that is clearly 100% shady 100% of the time seems wise.

Re: Google bans Zoom from employees' computers

#389
post #38

Earlier quoted context omitted.

Right but it's also astonishing that was allowed before. If it's not needed for work why would it be installed? Why would any non-work software be allowed on corp laptops?

Because unlike most large workplaces that inhibit innovation and productivity and infantilize staff with an “anything not specifically permitted is prohibited” rule which also creates continuous work for a review and approval bureaucracy and guarantees that toolsets are outdated and improvements difficult to discover, Google apparently has an “everything not specifically prohibited is allowed” policy.

There's a third "use at your own risk" option between the two extremes. Sure, install your favorite terminal emulator, but if it steals your production credentials you may get fired...

Re: Google bans Zoom from employees' computers

#390

Earlier quoted context omitted.

Corporate devices should be for work. Especially if you're sheltering-in-place anyway and you're not even physically at the office.

> Corporate devices should be for work. Many (most?) companies are perfectly fine with you using your corporate machine for typical home-life stuff and side projects as well. Reduces waste of having to buy two devices. Seems nothing wrong with it to me?

It's something I would strongly recommend against, since it gives your employer easy access to monitor you, and if for some reason your employer winds up in court, everything you used the machine for could end up read into the record.
Post reply on HN