News for hackers. Stuff that matters.

A comment on Zoom freezes feature development to fix security and privacy issues.

Re:Zoom freezes feature development to fix security and priv... by _6fmb on Thursday April 02, 2020 @09:21AM (#22758613)
Does anyone know how they're handling the E2E situation? Are they removing it from their marketing or trying to actually implement it?
[ Parent | on HN ]
Re:Zoom freezes feature development to fix security and priv... by kjaftaedi on Thursday April 02, 2020 @09:51AM (#22758913)
e2e encryption for multiple video streams at once is not something that is easily done.

if you told me they planned to offer this feature within a year, i would bet money against it happening.

[ Parent | on HN ]
Re:Zoom freezes feature development to fix security and priv... by basch on Thursday April 02, 2020 @10:16AM (#22759200)
Am I misunderstanding the product, or are the streams not being merged on the server into a single feed?

>To be clear, in a meeting where all of the participants are using Zoom clients, and the meeting is not being recorded, we encrypt all video, audio, screen sharing, and chat content at the sending client, and do not decrypt it at any point before it reaches the receiving clients.

https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-...

[ Parent | on HN ]
Re:Zoom freezes feature development to fix security and priv... by kjaftaedi on Thursday April 02, 2020 @06:12PM (#22764445)
They are merged. There is no end to end encryption unless you are talking about the connection between you and zoom.
[ Parent | on HN ]
Re:Zoom freezes feature development to fix security and priv... by basch on Thursday April 02, 2020 @11:55PM (#22766194)
That is not at all how they describe the product, in their correction post clarifying their use of encryption.

The part after the caret is a quote from them.

[ Parent | on HN ]
Re:Zoom freezes feature development to fix security and priv... by _6fmb on Thursday April 02, 2020 @10:04AM (#22759039)
I assume if they do it they'll just be blase about metadata and only encrypt content.
[ Parent | on HN ]