News for hackers. Stuff that matters.
Re:Zoom needs to clean up its privacy act by angry_octet on Friday March 27, 2020 @12:00PM (#22704025)
The consequences of privacy loss can be severe, up to and including violent death (partner violence, anti-LGBTI attacks, religious persecution). A person with a moral (and likely legal) obligation to protect individual privacy cannot lightly discard someone's fundamental rights to favour the marginal benefit of others.

We haven't seen a Zoom log found in an open S3 bucket yet, or a leak via fb, but experience says that it is only a matter of time.

So if you're going to mandate Zoom, own the risk. Mitigation is possible: provide recorded streams for secured download (if safe/ethical/notified to record other participants!); provide a work laptop with a non-identifying config instead of a BYOD; many other options.

Re:Zoom needs to clean up its privacy act by spunker540 on Friday March 27, 2020 @12:45PM (#22704446)
What could possibly happen in an educational setting that is so sensitive that it needs a CIA-level approach to safeguarding privacy?

The consequence of getting on a school bus can be life or death. The consequence of eating a peanut butter sandwich can be life or death.

If you’re a medical professional or psychiatrist, maybe you shouldn’t use zoom due it’s privacy record. But if you’re teaching a lecture on linked lists to your class of 30 kids, death via persecution should probably be very low on your considerations when choosing video conference tech.

Re:Zoom needs to clean up its privacy act by mlyle on Friday March 27, 2020 @09:04PM (#22708324)
Guess (or find a leaked meeting ID) and you can talk / show things pseudo-anonymously to a bunch of kindergartners today. Or just observe them and find out aout them. That has some potential problems.
Re:Zoom needs to clean up its privacy act by madwhitehatter on Friday March 27, 2020 @05:57PM (#22707283)
Why do they have to record calls? Transcribe the call into text then Store it. Why do they need to take copies of whiteboards and PowerPoint’s it’s does not make sense.
Re:Zoom needs to clean up its privacy act by angry_octet on Friday March 27, 2020 @02:51PM (#22705646)
It isn't being used just for comp sci lectures though, it's being used for all sorts of things, e.g. union organising, prayer meetings. (And even for Comp Sci it tells an observer who goes to which university and the class(es) they take.)

Frankly I find your comment dismissive of the real threats faced by women and minorities.

Re:Zoom needs to clean up its privacy act by spunker540 on Friday March 27, 2020 @09:31PM (#22708454)
I did not mean to be dismissive of real threats. But I also think an overwhelming majority of calls on zoom could be leaked wholesale and no one would be harmed. And just because they use the Facebook and Google SDKs to measure their marketing does not mean they’re “selling user data” or inadequately protecting the privacy of video conversations. And it’s a very far leap to blame an educator for choosing zoom (a free and easy to use product) as insensitive to the persecution of minorities, when it’s really not a factor for most use-cases.
Re:Zoom needs to clean up its privacy act by angry_octet on Saturday March 28, 2020 @11:01AM (#22711527)
Let me know where you draw the line for beginning to care, without having asked any of the participants.

I know math lectures don't seem a hot spot, but it's a slippery slope of adoption, and you might be surprised about the depth of harassment problems in the math community.

Re:Zoom needs to clean up its privacy act by matz1 on Friday March 27, 2020 @12:26PM (#22704262)
>The consequences of privacy loss can be severe, up to and including violent death (partner violence, anti-LGBTI attacks, religious persecution)

If you are going that way then likewise, there is always someone somewhere could die because the software doesn't work because they prioritize privacy.

Beside, The reason we have growing acceptance for the LGBT is because of the openness and transparency. That won't happen if we have perfect privacy.

Yes is true that leak is only matter of time, so its even more infeasible to maintain privacy. The solution should be to assume information is public as much as we can and fix the issue that arise from that.

Re:Zoom needs to clean up its privacy act by angry_octet on Friday March 27, 2020 @03:02PM (#22705765)
'A privacy breach is inevitable with this this privacy violating software, so no point in having privacy' is quite an unconventional take.

If you could post your real name, address, phone number, email, sexual orientation, religion, employment status, performance review, salary, hobbies, political viewpoints etc we can get started processing your revocation of privacy.

Oh you didn't realise your boss was having meetings with HR over Zoom? Sorry, we can't have different rules for some.

Oh and you'll start seeing ads for '5 step sobreity' now since we see you were in the local AA Zoom. Sorry about not getting that new job -- that company ticked the 'no addicts' flag in the selection matrix, and, well, the job market is kinda competitive now.

Re:Zoom needs to clean up its privacy act by saagarjha on Saturday March 28, 2020 @03:24AM (#22709758)
> If you could post your real name, address, phone number, email, sexual orientation, religion, employment status, performance review, salary, hobbies, political viewpoints etc we can get started processing your revocation of privacy.

I have actually voluntarily shared pretty much everything on your list publicly at some point. Even then the important part is that it was my choice to do so, and there’s still a number of things I will not freely share.

Re:Zoom needs to clean up its privacy act by matz1 on Friday March 27, 2020 @04:04PM (#22706297)
>If you could post your real name, address, phone number, email, sexual orientation, religion, employment status, performance review, salary, hobbies, political viewpoints etc we can get started processing your revocation of privacy.

Eventually yes, I would prefer that I don't have to keep secret of all of those information but I can't because not everyone is.

>Oh and you'll start seeing ads for '5 step sobreity' now since we see you were in the local AA Zoom. Sorry about not getting that new job -- that company ticked the 'no addicts' flag in the selection matrix, and, well, the job market is kinda competitive now

If a company choose not to hire addict than its their choice, its their lost.