Zoom Security Issues

Seamus
Morning Mark. Morning listeners.

Mark
Okay. We’re going to be talking about Zoom and security issues.

Seamus
Yes, that’s right. So there’s been, I mean, I think everyone in the world now has heard of Zoom, due to the coronavirus and, actually, they must be laughing all the way to the bank because they, in March this year they had 200 million users, in December last year they had 10 million. So that’s a huge jump.

Mark
I think a lot of the time thing it’s the security issues that people are worried about, whether it’s rumour or fact, what are the facts?

Seamus
Well, I’m not an expert at what I’m doing is reading what, experts say that, from what I’ve been reading; as you know I’m not an expert on security issues, particularly with a big company like this but from what the experts say some of the security concerns, are very very real. Some are hyped up and some, there are a few people just hopping on the bandwagon, thinking they can write about Zoom and, you know, not totally be correct. Apparently there is an inherent security flaw with video cameras and the ease with which you can connect to Zoom. So, there are some security issues that probably aren’t going to go away. But I think, at the very least, zoom, has jumped on these security concerns. And, in fact, the ZoomCEO said last week that they’re going to freeze feature updates to address security concerns for the next three months. So, and they do seem to be jumping on the bandwagon and being really transparent about what’s happening and giving a lot of good advice.

Mark
So basically if you are on a Zoom and you are doing multiple calls everything else like that, you got multiple people over on the one call; all the faces on the screen. Ca people come in and backdoor through that connection and infect the machine or take over or leave a bug on the machine.

Seamus
That’s probably likely, I’m not sure. Certainly, people can come into your meeting and that started a new word called ZoomBombing

Mark
I’ve done that

Seamus
Yeah, you were saying!

Mark
I was going to a Zoom and I hit the wrong number, and it took me to, I think it was some blokes from Telstra or something, and I was I don’t know any of these guys, “Oh sorry guys” and I left

Seamus
Yes, and that that certainly is possible, and was possible and then there are a lot of instances of people doing that and most of the time was silly or annoying or funny but occasionally big businesses or business conferences where someone sort of snuck in really and then heard internal information that they didn’t want to get out externally. So, it sometimes was a very serious issue. But, Zoom, really fixed all that very very quickly and they’ve got quite good security things you can do now. And one of the things I would suggest is, in your Zoom settings, are five things that are really worth doing and one is to say, always have a random meeting ID. The second one is to turn the waiting room on. And I think zoom might have done that by default now. The third is to disable join before the host. Number four is only to allow authorised users. And number five, not in order of importance is to require passwords.

Mark
Now when you dial in I think you have to have a password; I think that’s probably the best security

Seamus
That’s very true, yes, so a combination of random meeting ID and password, and only send your password, the link, to the people that you want at the meeting. Once you put any Zoom link on the web, or in the public arena, then it’s available for the public.

Mark
So, do you think with the education department, now we’ll have schools back, we’ll have kids learning by the internet, would it be Zoom or do you think the education dept will be using a different format?

Seamus
They’ve got different formats; they’ve got a thing called Blackboard and they’ve got a couple of other ones. I think it’s a big leap for them to do this. But, as far as I know, they don’t do zoom. And with all of these things there often is security flaws but I think the education department would have really looked into this.

Mark
People will be using video links And you will find a lot of businesses using these, but you’ll also find using medi-help where you’re not actually in a medical or doctor’s surgery. You’re on the screen, and this is becoming more and more of the norm, I suppose.

Seamus
Yes, and I’m almost absolutely certain that that’s very very secure. I don’t know anything about it personally but I would think that because it’s very sensitive information that it would be really good security. Things that are there, you know, to make sure it was secure.

Mark
I suppose one of the other things I wanted to touch base with was Skype. That’s also another possibility, but that doesn’t handle as many people or is as easy to use

Seamus
No, and it’s not as easy. Skype was the king several years ago and then Zoom came along and Skype really didn’t keep up with Zoom. Now, if they had of done that they could have been doing what Zoom is doing now, but they didn’t and so a lot of people got onto Zoom. You’re right Zoom is really really easy to use. The free version gives you a huge amount of features. Obviously the paid version gives you more but for most people, the free version is enough. And I think just because it’s, it’s so easy and generally such a good piece of software that’s why it’s just boom like this. Zoom boom. Oh damn, I shouldn’t have said that, should I?

Mark
Another thing I’ve found, ‘cos I’ve got not very good internet now, on satellite now so it really depends on your internet connection now because there is a lot of weaving on mine or jerky video. And that’s something you can’t get away unless you boost your internet somehow

Seamus
Exactly. And one of the things with Zoom – when you download the Zoom app that somehow allows you to use less internet speed, and it’s better than Skype in that area as well. They’ve done a lot of work in, I don’t understand how they do it, in making it so lower internet speeds can still give you video and audio. And if you’ve got really low internet speed, you can turn your video off, that makes a big difference. Do that.

Mark
So just audio only

Seamus
Yes, so that if your voice is going like you were describing before. Just turn your video off and that gives you, gives you a little bit more chance of getting better voice.

Mark
Let’s face it with a face like mine, what do you think I’m on radio for?

Seamus
I’m not gonna comment there

Mark
So basically we’re looking at Zoom at the moment that’s probably the best way for people do get on video conferencing. I’m finding I’m using it to talk to my grandkids, and it’s great, it’s absolutely fabulous for that

Seamus
Yeah, it is. I think we should be aware too that because it has grown so rapidly so quickly. All the hackers are just trying their best to get, you know, access to people who are using Zoom and there’s already false Zoom websites out there and Zoom malware being made so I think people should be very wary of just the fact that the hackers are really trying to attack and I mean there’s the official zone website is zoom.us. Anything that just looks like that but he’s not exactly that, just be really really wary.

Mark
And Zoom doesn’t send out emails either

Seamus
No. And they have actually got very good best security practices links on their website. I’ll actually I’ll put a transcript of this up on my website and I’ll put some links into zoom security issues and best practices that zoom suggest

Suggested Links

• https://www.techradar.com/news/more-top-companies-ban-zoom-following-security-fears
• https://www.cnet.com/how-to/no-more-zoombombing-4-steps-to-a-more-secure-zoom-video-chat/
• https://zoom.us/docs/en-us/privacy-and-security.html
• https://www.tomsguide.com/news/zoom-security-privacy-woes
• https://blog.zoom.us/wordpress/2020/03/20/keep-uninvited-guests-out-of-your-zoom-event/