Re:‘War Dialing’ tool exposes Zoom’s password problems
by disiplus on Thursday April 02, 2020 @03:28PM
(#22762704)
i'm sure the reason for that is the UX.
the zoom had a reputation of "just works" and part of it was that is so easy to jump in to a meeting.
if now i have to manage access and so on, it would not be "it just works" like it was
Re:‘War Dialing’ tool exposes Zoom’s password problems
by lonelappde on Thursday April 02, 2020 @03:31PM
(#22762745)
In this context, a password is the same as an id.
There's never a reason to share the id without the password.
I think "no password" is the bigger issue, because repeated attempts with incorrect passwords can be rate-limited. Zoom should be generating a random 6-digit password for each meeting by default.
There may be use cases for not having any password, but that should be explicitly opt-in and have a warning message to every participant that anyone can join and broadcast in this meeting.