News for hackers. Stuff that matters.
Re:‘War Dialing’ tool exposes Zoom’s password problems by bobbyi_settv on Thursday April 02, 2020 @04:28PM (#22763335)
The "just works" nature is why Zoom is popular. No one wants to have every meeting start with "Is Larry here? Oh, I think he's trying to dial in. I'm going to cancel this meeting and send out a new ID so he can dial in. Everyone watch for that so you can reconnect"
Re:‘War Dialing’ tool exposes Zoom’s password problems by Nextgrid on Thursday April 02, 2020 @05:32PM (#22764103)
The second ID can be generated in addition to the first, primary ID.
Re:‘War Dialing’ tool exposes Zoom’s password problems by bscphil on Thursday April 02, 2020 @07:21PM (#22764891)
You could even include the option to get approval - pop up says "Mx. Caller ID is calling from 555.555.5555. Approve?" Obviously there's no way to get in through random dialing. And if you get a pile of requests, provide a way to filter incoming numbers and disable the calling ID as soon as everyone is in.

That's even assuming that anti-DOS protection on the phone line is impossible.