INSUBCONTINENT EXCLUSIVE:
Now that we&re all stuck at home thanks to the coronavirus pandemic, video calls have gone from a novelty to a necessity
Zoom, the popular videoconferencing service, seems to be doing better than most and has quickly become one of, if not the most, popular
option going.
But should it be?
Zoom recent popularity has also shone a spotlight on the company security protections and privacy promises
Just today, The Intercept reported that Zoom video calls are not end-to-end encrypted, despite the company claims that they are.
And
Motherboard reports that Zoom is leaking the email addresses of &at least a few thousand& people because personal addresses are treated as
if they belong to the same company.
It the latest examples of the company having to spend the last year mopping up after a barrage of
headlines examining the company practices and misleading marketing
To wit:
Apple was forced to step in to secure millions of Macs after a security researcher found Zoom failed to disclose that it installed a
secret web server on users& Macs, which Zoom failed to remove when the client was uninstalled
The researcher, Jonathan Leitschuh, said the web server meant any malicious website could activate Mac webcam with Zoom installed without
The researcher declined a bug bounty payout because Zoom wanted Leitschuh to sign a non-disclosure agreement, which would have prevented him
from disclosing details of the bug.
Zoom was quietly sending data to Facebook about a user Zoom habits — even when the user does not have
Motherboard reported that the iOS app was notifying Facebook when they opened the app, the device model, which phone carrier they opened the
Zoom removed the code in response, but not fast enough to prevent a class action lawsuit or New York attorney general from launching an
investigation.
Zoom came under fire again for its &attendee tracking& feature, which, when enabled, lets a host check if participants are
clicking away from the main Zoom window during a call.
A security researcher found that the Zoom uses a &shady& technique to install its Mac
app without user interaction
&The same tricks that are being used by macOS malware,& the researcher said.
On the bright side and to some users& relief, we reported that
it is in fact possible to join a Zoom video call without having to download or use the app
But Zoom &dark patterns& doesn&t make it easy to start a video call using just your browser.
Zoom has faced questions over its lack of
transparency on law enforcement requests it receives
Access Now, a privacy and rights group, called on Zoom to release the number of requests it receives, just as Amazon, Google, Microsoft and
many more tech giants report on a semi-annual basis.
Then there Zoombombing, where trolls take advantage of open or unprotected meetings and
poor default settings to take over screen-sharing and broadcast porn or other explicit material
The FBI this week warned users to adjust their settings to avoid trolls hijacking video calls.
And Zoom tightened its privacy policy this
week after it was criticized for allowing Zoom to collect information about users& meetings — like videos, transcripts and shared notes
— for advertising.
There are many more privacy-focused alternatives to Zoom
Three areseveral options, but they all have their pitfalls
FaceTime and WhatsApp are end-to-end encrypted, but FaceTime works only on Apple devices and WhatsApp is limited to just four video callers
A lesser known video calling platform, Jitsi, is not end-to-end encrypted but it open source — so you can look at the code to make sure
there are no backdoors — and it works across all devices and browsers
You can run Jitsi on a server you control for greater privacy.
In fairness, Zoom is not inherently bad and there are many reasons why Zoom
It easy to use, reliable and for the vast majority it incredibly convenient.
But Zoom misleading claims give users a false sense of security
Whether it hosting a virtual happy hour or a yoga class, or using Zoom for therapy or government cabinet meetings, everyone deserves
privacy.
Now more than ever Zoom has a responsibility to its users
For now,Zoom at your own risk.
