zoom

Link

Zoom Tests Advertising for Users on Free Plan

Andrew Orr ·

Zoom announced on Monday that it will begin piloting advertising for users on the free Basic plan.

For this initial program, ads will be rolled out only on the browser page users see once they end their meeting. Only free Basic users in certain countries will see these ads if they join meetings that are hosted by other free Basic users.

Superhuman Email Rolls Out Support for Zoom, Google Meet
Cool Stuff Found

Superhuman Email Rolls Out Support for Zoom, Google Meet

Andrew Orr ·

Email app Superhuman is rolling out support for Zoom and Google Meet integrations into its calendar. The integration was one of the most highly requested features from Superhuman users. With the new integration, users will be able to add Zoom or Google Meet links to the calendar events they create in Superhuman. Like the rest of the calendar experience – you’ll be able to do so with the keyboard only. Superhuman mail is a US$30/month subscription.

Link

Zoom Rolls Out End-to-End Encryption for Video Calls

Andrew Orr ·

Starting next week, video conferencing app Zoom is finally adding end-to-end encryption to its platform.

Zoom’s E2EE offering uses public key cryptography. In short, the keys for each Zoom meeting are generated by participants’ machines, not by Zoom’s servers. Encrypted data relayed through Zoom’s servers is indecipherable by Zoom, since Zoom’s servers do not have the necessary decryption key. This key management strategy is similar to that used by most end-to-end encrypted messaging platforms today.

Good to see Zoom doing this; they’ve certainly had misses in the past. Update: The new version is now available for most users.

Cool Stuff Found

Glenn Fleishmann Introduces Free Book ‘Take Control of Zoom Essentials’

Andrew Orr ·

Glenn Fleishman has released a free version of his book called “Take Control of Zoom Essentials” as well as updated the paid version called “Take Control of Zoom”. Take Control shared the news in a blog post:

Yesterday, we released two Zoom-related books by Glenn Fleishman: a new, free book called Take Control of Zoom Essentials and a gigantic version 1.1 update to the comprehensive Take Control of Zoom. We know a lot of people are using Zoom for work and school, and we hope you find these books helpful.

Zoom usage has skyrocketed now that more people have been working and learning from home due to the COVID-19 pandemic. Consider these books to know everything you want to know about using the video sharing platform.

Link

Zoom Backtracks, Will Give Free Users Encryption Protection

Andrew Orr ·

After a lot of negative attention from press and privacy advocates, Zoom has backtracked on its stance. It will provide free users with end-to-end encryption, a feature previously limited to paying customers.

The company said that free users will have to verify themselves with a phone number in a one-time process. It claimed that this will stop bad actors from creating multiple abusive accounts.

Zoom is also releasing an updated design of its end-to-end encryption solution on GitHub that intends to achieve a balance between “the legitimate right of all users to privacy and the safety of users.”

Good to see Zoom do this.

Link

Zoom: Don’t Want to Get Routed Through Chinese Servers? Fork Over Your Cash

Andrew Orr ·

One of Zoom’s controversies is how it routes some of its network traffic through China’s servers. If you’re privacy conscious, you can opt out of specific data center regions starting April 18. But this is only for paying customers.

This feature gives our customers more control over their data and their interaction with our global network when using Zoom’s industry-leading video communication services.

I can’t say I agree. It’s not about making privacy a paid feature, it’s that Zoom is exploiting its own insecurity to create a paid feature. Next step: Making end-to-end encryption a paid feature, and leaving free users to fend for themselves.

Link

Zoom’s Encryption is Linked to Chinese Servers

Andrew Orr ·

Researchers found that Zoom uses its own encryption scheme, sometimes using keys issued by China.

Some of the key management systems — 5 out of 73, in a Citizen Lab scan — seem to be located in China, with the rest in the United States. Interestingly, the Chinese servers are at least sometimes used for Zoom chats that have no nexus in China. The two Citizen Lab researchers, Bill Marczak and John Scott-Railton, live in the United States and Canada. During a test call between the two, the shared meeting encryption key “was sent to one of the participants over TLS from a Zoom server apparently located in Beijing,” according to the report.

I don’t have further commentary on Zoom, other than asking, “How will this end?”

Link

New Zoom Bug Can Be Used to Steal Passwords, Access Your Webcam, Microphone

Andrew Orr ·

Security researcher Patrick Wardle disclosed two Zoom bugs today. They can be used to steal Windows passwords and access your webcam and microphone. They do however require physical access to the machine.

In this blog post, we’ll start by briefly looking at recent security and privacy flaws that affected Zoom. Following this, we’ll transition into discussing several new security issues that affect the latest version of Zoom’s macOS client.

At this point, Zoom should just rewrite its software completely.