Re: [PLUG] Mute button in conferencing apps may not actually mute your m

Agreed. It appear the intent was to alert people when their mikes are muted. I don't think that that is nefarious but from a security point of view and maybe even a code / social engineering point of view this is a data leak. Putting aside trying be helpful (I don't like this but I get it, they are trying to make the application seem "smart"), when you hit "mute" I think most people would NOT expect audio to be passed upstream to servers. Even if the analysis could be done client side (i.e. you are talking and no one else is... oh wait, maybe the human forget to un-mute?) is it really so bad that someone says, "hey Keith, you're on mute"?

Maybe it just me but I think this is a waste of compute time for something that is not a big deal and could easily lead to some sort of abuse at a minimum.

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Keith C. Perry, MS E.E.

Managing Member, DAO Technologies LLC

(O) +1.215.525.4165 x2033

(M) +1.215.432.5167

www.daotechnologies.com

From: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
To: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
Sent: Monday, April 18, 2022 1:16:02 PM
Subject: Re: [PLUG] Mute button in conferencing apps may not actually mute your mic

That article is implying some sort of nefarious motive to this. Maybe so, but I suspect they do this so that they can give you an alert when you try to talk but you’re muted.

Walt

On Mon, Apr 18, 2022, at 11:58 AM, Keith C. Perry via plug wrote:

https://www.bleepingcomputer.com/news/security/mute-button-in-conferencing-apps-may-not-actually-mute-your-mic/

This is a bit off topic but since we do get into security conversations here, I thought people might find this interesting. Jitsi Meet also happens to be on the list of apps reviewed too. That's been my go to conference app when I get to select what to use. That said, since the Zoom security issue days, I started doing all "muting" activities from my local device controls or I just unplug my webcam when I have concerns.

I'm having a laugh that Cisco WebEx was the "worse case" :D

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Keith C. Perry, MS E.E.
Managing Member, DAO Technologies LLC
(O) +1.215.525.4165 x2033
(M) +1.215.432.5167
www.daotechnologies.com
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug

___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug