News for hackers. Stuff that matters.

A comment on ‘War Dialing’ tool exposes Zoom’s password problems. Parent comment

Re:‘War Dialing’ tool exposes Zoom’s password problems by toomuchtodo on Thursday April 02, 2020 @03:16PM (#22762529)
Could you not use a telephone intent, where the meeting ID is the suffix to the dial in number with commas for any necessary pauses? Skype for business meeting invites have this. Zoom might then support inviting mobile phone conference participants using SMS, containing the link (think weak 2FA).

Example: tel://18005551212,,<meeting_id>#

[ Parent | on HN ]
Re:‘War Dialing’ tool exposes Zoom’s password problems by anamexis on Thursday April 02, 2020 @03:20PM (#22762593)
That's not helpful when you have to punch it into a conference room speakerphone.

I did once put together a hack that would scrape the meeting ID from the Zoom UI and emit the touchtones from my laptop to dial in.

[ Parent | on HN ]
Re:‘War Dialing’ tool exposes Zoom’s password problems by toomuchtodo on Thursday April 02, 2020 @03:21PM (#22762606)
There is always a trade off between security and usability. I like your hack though, any chance you'd put it on Github?
[ Parent | on HN ]
Re:‘War Dialing’ tool exposes Zoom’s password problems by anamexis on Thursday April 02, 2020 @03:51PM (#22762966)
I haven't used it in a while, so I wouldn't be surprised if the Zoom bit is broken, but here it is:

https://gist.github.com/micahbf/91a295016f4472b47acfe317d714...

[ Parent | on HN ]
Re:‘War Dialing’ tool exposes Zoom’s password problems by PeterCorless on Thursday April 02, 2020 @03:34PM (#22762786)
The most secure computer is a non-networked standalone box sunk in concrete sunk hidden at the bottom of a deep sea trench. It is not, however, very usable.
[ Parent | on HN ]