Quite shocking indeed that the Zoom CEO basically said Zoom passed the buck on security to their customers! What responsible software company does that?
When someone buys videoconferencing software they don’t want to buy half a solution which is basically functioning software without security! Forget about videoconferencing software, that applies to any software where private data is passed through, and where logins or other kinds of ids exist which should not be able to penetrated by someone who shouldn’t have access.
It is an astounding statement to make, and when they started out might have made sense. Then they rested on their laurels until as more people used it and it became more well know, in a large part due to the Coronavirus, its weak security got exposed.
The fact that it was leaking data to Facebook even if you were not a Facebook user (not that it is ok if you are one) is scary.
It was also on MacOS devices turning on people’s camera and microphones without them knowing it, until recently when Zoom fixed that issue.
Videoconferencing data not being encrypted end to end? That one shocking and I wonder how many customers “knew” that Zoom was relying on the customer to provide their own security and that all their data going through Zoom was not encrypted!
I did see in one article a school report that during a class, pictures got overlayed with the N word, swastikas, and porn! So much for any school system wanting to use Zoom.
They can fix their security issues in the next 90 days.
Can they rebuild the trust they lost and get back the customers who left their platform? Maybe some percentage but I don’t think anywhere near 100%.
Why would someone who left Zoom and found another videoconferencing platform that worked well for them, bother to go to the trouble to switch back to Zoom even if they trusted that Zoom fixed its issues.
If I were Zoom’s Board of Directors I would fire the Zoom CEO. Who knows how much private data that leaked from their app has been collected and how many companies had confidential data leaked to competitors.
When building a product that is used by customers to discuss sensitive information, the idea that the product doesn’t provide the security and it is on the customers to do so is astonishing. Did they tell their customers who used the software they must provide security around the software so data doesn’t leak out it, or people can’t hack into their meetings? I doubt it!
The article you referenced shows how people could exploit Zoom to give someone access to data on that person’s Windows computer such as userids and passwords.
The article also showed using Zoom on a Windows computer, someone could also upload a script to that person’s computer that could execute any Windows commands so that would allow then to do anything such as erasing data, emailing data, installing malware, etc. That obviously is very dangerous. Having Zoom on your computer, someone can exploit it and basically gain complete access to your computer letting them do anything they want!
Finally, the article has the “icing on the cake”:
‘Just yesterday, another report confirmed that Zoom doesn't use end-to-end encryption to protect calling data of its users from prying eyes despite telling users that "Zoom is using an end to end encrypted connection."’
SHOCKING lack of ethics and very damning in my opinion. Who wants to do business with a company that lies and misleads their customers into a false sense of security?
When someone buys videoconferencing software they don’t want to buy half a solution which is basically functioning software without security! Forget about videoconferencing software, that applies to any software where private data is passed through, and where logins or other kinds of ids exist which should not be able to penetrated by someone who shouldn’t have access.
It is an astounding statement to make, and when they started out might have made sense. Then they rested on their laurels until as more people used it and it became more well know, in a large part due to the Coronavirus, its weak security got exposed.
The fact that it was leaking data to Facebook even if you were not a Facebook user (not that it is ok if you are one) is scary.
It was also on MacOS devices turning on people’s camera and microphones without them knowing it, until recently when Zoom fixed that issue.
Videoconferencing data not being encrypted end to end? That one shocking and I wonder how many customers “knew” that Zoom was relying on the customer to provide their own security and that all their data going through Zoom was not encrypted!
I did see in one article a school report that during a class, pictures got overlayed with the N word, swastikas, and porn! So much for any school system wanting to use Zoom.
They can fix their security issues in the next 90 days.
Can they rebuild the trust they lost and get back the customers who left their platform? Maybe some percentage but I don’t think anywhere near 100%.
Why would someone who left Zoom and found another videoconferencing platform that worked well for them, bother to go to the trouble to switch back to Zoom even if they trusted that Zoom fixed its issues.
If I were Zoom’s Board of Directors I would fire the Zoom CEO. Who knows how much private data that leaked from their app has been collected and how many companies had confidential data leaked to competitors.
When building a product that is used by customers to discuss sensitive information, the idea that the product doesn’t provide the security and it is on the customers to do so is astonishing. Did they tell their customers who used the software they must provide security around the software so data doesn’t leak out it, or people can’t hack into their meetings? I doubt it!
The article you referenced shows how people could exploit Zoom to give someone access to data on that person’s Windows computer such as userids and passwords.
The article also showed using Zoom on a Windows computer, someone could also upload a script to that person’s computer that could execute any Windows commands so that would allow then to do anything such as erasing data, emailing data, installing malware, etc. That obviously is very dangerous. Having Zoom on your computer, someone can exploit it and basically gain complete access to your computer letting them do anything they want!
Finally, the article has the “icing on the cake”:
‘Just yesterday, another report confirmed that Zoom doesn't use end-to-end encryption to protect calling data of its users from prying eyes despite telling users that "Zoom is using an end to end encrypted connection."’
SHOCKING lack of ethics and very damning in my opinion. Who wants to do business with a company that lies and misleads their customers into a false sense of security?
13
