Re:Zoom meetings aren’t end-to-end encrypted, despite marketing
by lvh on Tuesday March 31, 2020 @11:59AM
(#22738836)
You can send faxes to someone without the telco running a local webserver on your fax machine, and you don't run thousands of other applications on your fax machine, and your fax machine doesn't usually come with a nifty record feature, nor a camera and a microphone.
[ Parent
| on HN ]
Re:Zoom meetings aren’t end-to-end encrypted, despite marketing
by floatingatoll on Tuesday March 31, 2020 @01:01PM
(#22739647)
I hesitate to point this out, but quite a lot of fax machines come with a microphone.
(And, noting the prevalence of articles from a few years ago talking about "update your fax machine firmware", I suspect you could fuzz their telco line-parser for very interesting results!)
Re:Zoom meetings aren’t end-to-end encrypted, despite marketing
by lvh on Tuesday March 31, 2020 @03:15PM
(#22741313)
Good point--you're talking about the embedded handset or something else? That said, as you hint at: not quite the same thing from a threat model perspective :)
Re:Zoom meetings aren’t end-to-end encrypted, despite marketing
by floatingatoll on Tuesday March 31, 2020 @03:26PM
(#22741441)
Indeed!
That depends entirely on whether the handset is physically disconnected by the on-hook switch, or if a firmware exploit could remotely enable it.
Threat modeling a fax machine in the era of fuzzing-RCEs is a particularly interesting thing to consider.