Stop using Zoom!

And any other corporate video conferencing apps for your private or sensitive conversations

Zoom bombings showing child porn, abusive language, racism etc should have been enough to warn anyone of the dangers

But I am still seeing people use zoom etc for these

  • Schools to remote teach their students (who are minors and subject to child protection laws)
  • Therapists holding remote sessions with their clients – (incredibly sensitive information that should it ever be breached or hacked could lead to marriage breakdowns even suicide

Only after the event did they stop to think, schools now have largely been told by their authorities not to use, after actually recommending it

The UKCP and BCPA official line showed that they clearly do not understand what security and privacy actually mean and are putting their members and clients at risk

Why take the risk when you dont have to. This is common sense

Zoom confirmed that video calls are not end-to-end encrypted

In a separate report by The Intercept, Zoom video calling service confirmed that their video calls are not E2E protected as mentioned in their privacy policy pages and security white paper.

“Currently, it is not possible to enable E2E encryption for Zoom video meetings. Zoom video meetings use a combination of TCP and UDP. TCP connections are made using TLS and UDP connections are encrypted with AES using a key negotiated over a TLS connection,” said the spokesperson to the news website.

It has been mentioned that Zoom uses TLS encryption, which is the same that is used in HTTPS websites. This means that the Zoom app running on your computer or smartphone has the same encryption level as it is between the browser and any other website. This is different from end-to-end encryption, which is there in services such as WhatsApp, Telegram and others

In its latest blog post, the company has however, apologised for using the term ‘end-to-end encryption’, which indeed confirms the aforementioned claims. “In light of recent interest in our encryption practices, we want to start by apologizing for the confusion we have caused by incorrectly suggesting that Zoom meetings were capable of using end-to-end encryption. Zoom has always strived to use encryption to protect content in as many scenarios as possible, and in that spirit, we used the term end-to-end encryption,” states the post

Also read: Elon Musk’s SpaceX bans Zoom over privacy concerns

Zoom has also confirmed that while the videos are safe from others trying to snoop-in, the company itself can access them. The privacy policy page, as pointed out by Consumer Reports, lets Zoom collect your data and share it with advertisers, which is the case with other social media websites and services as well.

However, Zoom is said to gather ‘customer content’ as well. This includes “information you or others upload, provide, or create while using Zoom.” Some of the examples mentioned by the company are “Cloud recordings, chat/instant messages, files, whiteboards, and other information shared while using the service, voice mails.” And the company says that these details are used to provide Zoom services, for easy search in chat log history, Zoom phone services and more.

https://tech.hindustantimes.com reference above paragraphs

The Alternatives

  • Jitsi meet – no user accounts or apps needed – all in browser. Optional App for android and iOS
  • Signal Video call
  • Linphone Video call – video drops too often – research

Update: Zoom says E2E encryption will only be for paying users

Source https://www.androidauthority.com/zoom-encryption-1125396/

Facebook
Twitter
Email
Print