Zoom banned from New York City schools due to privacy and security flaws

Re:Zoom banned from New York City schools due to privacy and... by contravariant on Saturday April 04, 2020 @08:31PM (#22782689)

Although if I'm honest I wouldn't really know if the alternatives are going to be that much better. All alternatives that I know off still follows the same general pattern of letting all connections go through a central server where everyone with the right URL can participate. Sure I wouldn't trust a company that claims to have better security than they actually have and who add weird privacy violating features, but any of the common alternatives are by Microsoft and Google, which I don't trust either.

So in the end I'm not sure what good will come of this decision, while it will definitely cause some confusion.

It's possible I missed something and that Zoom truly is notably worse than any of the common alternatives. I'm partially posting this in the hopes that anyone can point out whether this is the case.

And yes Zoom is definitely worse than a self hosted OSS solution like Jitsi (or even Jitsi without the self hosting) but we all know that that's not going to happen.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by tw04 on Sunday April 05, 2020 @02:12PM (#22787262)

Zoom is notably worse. They rolled their own encryption and it's really, really bad. They also send keys through China even if none of the participants are in China. Questionable behavior even if they were perfect in every other way, which they aren't.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by eagsalazar2 on Saturday April 04, 2020 @08:44PM (#22782750)

Zoom is known to have at best been massively incompetent and at worst to have been grossly irresponsible and possibly malicious.

Sure other solutions might be just as bad but that is hardly and argument against ditching Zoom immediately. If you've missed the many articles about their weirdly bad security you should definitely go read them.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by contravariant on Saturday April 04, 2020 @09:22PM (#22782976)

I saw those articles. Quite a few talked about how Zoom was weirdly insistent that they had end to end encryption (which they do not), and they added some disturbing privacy violating features to the desktop client which they're oddly pushy about, also their privacy statement wasn't exactly reassuring. All red flags, but strictly speaking they don't really impact the security much (they might do god knows what to the metadata, but to my knowledge, that's the same with most alternatives).

The one truly sensitive issue is the zoombombing, and I haven't been able to figure out whether that's truly a security bug or if zoom is just the biggest attack surface and has some terrible default settings.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by Spooky23 on Saturday April 04, 2020 @08:37PM (#22782713)

NYC schools have like a million students. How is jitsi going to scale to that?

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by __s on Saturday April 04, 2020 @08:49PM (#22782785)

By having each school's IT setup a separate server

School's have IT. It isn't always competent IT (I speak from experience), but clear instructions from up high can lead it

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by Spooky23 on Saturday April 04, 2020 @08:55PM (#22782818)

Or, you can flip a switch and enable Zoom, Google, or even Microsoft.

IT people are hammered right now, nobody has time to futz around with some random oss tool that will further stress overutilized remote infrastructure.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by godelski on Saturday April 04, 2020 @09:18PM (#22782966)

While I believe this will work for NYC, I'm not sure how it'll work for Pumpkintown TN

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by Spooky23 on Saturday April 04, 2020 @09:26PM (#22783000)

Pumpkinland, TN will use Zoom. It’s exponentially easier, except for older kids already using Google Classroom.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by godelski on Saturday April 04, 2020 @11:21PM (#22783492)

That's kinda my point. That the IT in a major city can use a custom system but that discludes a lot of people. I would wager that most schools don't have a decent IT department. I know that when I was in high school they weren't great and I grew up in a fairly affluent area. Not everyone has the ability to "roll their own"

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by contravariant on Saturday April 04, 2020 @09:22PM (#22782977)

It probably isn't, but one could hope.

Edit: If I'm honest I'm not even sure how meet.jit.si can function at it's current scale. Especially because I've found no way to send them money.

[ Parent | on HN ]

Re:Zoom banned from New York City schools due to privacy and... by fock on Monday April 06, 2020 @04:01AM (#22791711)

I think it hosts about a thousand rooms on a lowly single core - absolutely unbelievable in the age of kubernetes, I know... Given that, it needs bandwidth (but Zoom needs that as well for a 30 participant video conf...) and this seems paid for by the consulting company upselling it to companies.

[ Parent | on HN ]