Re:‘War Dialing’ tool exposes Zoom’s password problems
by bobbyi_settv on Thursday April 02, 2020 @04:28PM
(#22763335)
The "just works" nature is why Zoom is popular. No one wants to have every meeting start with "Is Larry here? Oh, I think he's trying to dial in. I'm going to cancel this meeting and send out a new ID so he can dial in. Everyone watch for that so you can reconnect"
[ Parent
| on HN ]
Re:‘War Dialing’ tool exposes Zoom’s password problems
by Nextgrid on Thursday April 02, 2020 @05:32PM
(#22764103)
The second ID can be generated in addition to the first, primary ID.
Re:‘War Dialing’ tool exposes Zoom’s password problems
by bscphil on Thursday April 02, 2020 @07:21PM
(#22764891)
You could even include the option to get approval - pop up says "Mx. Caller ID is calling from 555.555.5555. Approve?" Obviously there's no way to get in through random dialing. And if you get a pile of requests, provide a way to filter incoming numbers and disable the calling ID as soon as everyone is in.
That's even assuming that anti-DOS protection on the phone line is impossible.