News for hackers. Stuff that matters.
Re:Zoom End-to-End Encryption Whitepaper by MintelIE on Wednesday June 17, 2020 @03:28PM (#23555649)
How can they offer E2E while still complying with Chinese laws?
Re:Zoom End-to-End Encryption Whitepaper by logie17 on Wednesday June 17, 2020 @04:50PM (#23556581)
It's not just Chinese laws, Zoom has shutdown accounts of Chinese dissidents who are residing in California.[1] This seems like more than just complying with local laws; it's actively supporting the policy of a government upon people who do not even live there.

[1] https://www.washingtonpost.com/world/asia_pacific/zoom-censo...

Re:Zoom End-to-End Encryption Whitepaper by frenchy on Wednesday June 17, 2020 @03:50PM (#23555905)
Quite easily. They just need to make it so that one of the "ends" is Zoom itself.
Re:Zoom End-to-End Encryption Whitepaper by kerkeslager on Wednesday June 17, 2020 @04:02PM (#23556038)
Zoom isn't an end. That's not what "end" means in the context of "end to end".
Re:Zoom End-to-End Encryption Whitepaper by frenchy on Wednesday June 17, 2020 @04:09PM (#23556106)
It shouldn't be, but if you don't control the software and the encryption algorithm, there's no reason why zoom couldn't just sign the content so that could evesdrop on everything.
Re:Zoom End-to-End Encryption Whitepaper by kerkeslager on Wednesday June 17, 2020 @04:15PM (#23556192)
If you don't have end-to-end encryption, then yes, Zoom can man-in-the-middle your conversation. That is how we know Zoom doesn't have end-to-end encryption.

That doesn't mean end-to-end encryption is pointless, if that's what you're implying.

Re:Zoom End-to-End Encryption Whitepaper by dependenttypes on Wednesday June 17, 2020 @04:45PM (#23556516)
Signing has nothing to do with eavesdropping.
Re:Zoom End-to-End Encryption Whitepaper by kerkeslager on Thursday June 18, 2020 @10:26AM (#23563385)
That's simply not correct. If you don't have authentication you don't have encryption.
Re:Zoom End-to-End Encryption Whitepaper by ViViDboarder on Wednesday June 17, 2020 @07:17PM (#23557992)
That’s actually what they did before. They’ve been claiming to have e2ee for a while now and their excuse when caught was just that.