Re: [PLUG] Fwd: Zoom bombing

On Tue, Apr 21, 2020 at 4:29 PM Fred Stluka via plug <plug@lists.phillylinux.org> wrote:

Any evidence of snoopers being able to watch/listen without
being listed as an participant? In Zoom, WebEx, or any other?

--Fred
------------------------------------------------------------------------
Fred Stluka
Bristle Software, Inc.
http://bristle.com #DontBeATrump #SadLittleDonny
#ShakeOffTheTrumpStink
#MakeAmericaHonorableAgain

------------------------------------------------------------------------

On 4/15/20 7:13 PM, Rich Freeman via plug wrote:
> On Wed, Apr 15, 2020 at 6:19 PM Tim Allen via plug
> <plug@lists.phillylinux.org> wrote:
>> Meeting organizers are re-using the same ids for sequences of meetings, and these meeting ids are being sent, and re-sent through insecure channels
>>
>>
>> This is a really tough one to get around.
> Indeed, at work we use recurring meetings with constant meeting IDs
> using WebEx all the time. It can be painful to do it otherwise.
>
> Really though with ANY kind of conferencing solution you should be
> mindful of who is connected to your meetings in general, and
> especially when discussing anything sensitive. With audio teleconf
> this can be more difficult, but with anything that has a web interface
> it is usually pretty easy to count participants/etc, and when you see
> that "Guest 1" that hasn't said a word you can always do a roll
> call/etc.
>
> Unless you have unique credentials for every meeting and don't send
> them out far in advance it can be difficult to keep anything like this
> super-secure. But then again we're not talking about military-grade
> security here.
>
> Not sure how Zoom works but at least with WebEx meetings can't be
> connected to outside of their scheduled timeslot unless a host has
> connected. This at least keeps people from using one of your meeting
> IDs as some kind of free conferencing service at random times. You
> can also do things like lock meetings and take attendance and all that
> stuff, and in general for anything really sensitive you would probably
> have a pretty strict accountability for who is present (either dialed
> in, or in the room with somebody dialed in).
>

___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug