Re:Zoom meetings aren’t end-to-end encrypted, despite marketing
by lvh on Tuesday March 31, 2020 @03:15PM
(#22741313)
Good point--you're talking about the embedded handset or something else? That said, as you hint at: not quite the same thing from a threat model perspective :)
Re:Zoom meetings aren’t end-to-end encrypted, despite marketing
by floatingatoll on Tuesday March 31, 2020 @03:26PM
(#22741441)
Indeed!
That depends entirely on whether the handset is physically disconnected by the on-hook switch, or if a firmware exploit could remotely enable it.
Threat modeling a fax machine in the era of fuzzing-RCEs is a particularly interesting thing to consider.
(And, noting the prevalence of articles from a few years ago talking about "update your fax machine firmware", I suspect you could fuzz their telco line-parser for very interesting results!)