News for hackers. Stuff that matters.

A comment on Tell HN: Zoom truncates passwords to 32 chars. Parent comment

Re:Tell HN: Zoom truncates passwords to 32 chars by fragmede on Wednesday April 01, 2020 @12:37PM (#22750618)
Zoom IPOd in mid-April 2019. In terms of "start up that made it" or "growing pains", this is what happens when you don't hire a seasoned PR team (and even then). No one was looking all that hard at Zoom's technical practices because no one technical cared that much. Now that the UK Prime Minister is tweeting screenshots which include the zoom meeting ID, it's suddenly become a lot more interesting to lots of people, some of them less scrutable than others.

Zoom's older competitors; Microsoft (Skype), Google (Meet), WebEx, etc have undergone similar scrutiny with the similar results - bad press followed by engineering fix.

[ Parent | on HN ]
Re:Tell HN: Zoom truncates passwords to 32 chars by asveikau on Wednesday April 01, 2020 @12:50PM (#22750780)
It actually sounds more like technical hiring and engineering culture was not good, rather than just PR.

I know we all make mistakes, bugs happen, etc. However, if you can't reason through why it's not safe to bind an HTTP server to localhost and consider clients trusted on a laptop that might also run a web browser ... This and other prominent bugs suggests that among other things, security was not a part of the culture or mindset of the rank and file. I don't think you can use "it's a startup, bro" as an excuse for that.

[ Parent | on HN ]