<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 12pt; font-family: Calibri, Helvetica, sans-serif; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">Hi Bruna</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 12pt; font-family: Calibri, Helvetica, sans-serif; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">Thanks for sharing the statement from AccessNow. It is important for us to keep pointing out breaches, especially where our
privacy is concerned. </span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="font-size: 12pt; font-family: Calibri, Helvetica, sans-serif; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0);">Zoom has now updated its iOS app so that it will not share user data with FB. It is appalling that even those who have no
fb accounts were not spared of their data being harvested. And this happened without their consent.</span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<span style="color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; background-color: rgb(255, 255, 255); display: inline !important;">In response "Zoom will still give users the option to sign in to the app using Facebook, but will
now do so by requiring the user to log in through a web browser. The company says that the data collection was not intended, but an oversight in its desire to make logging into its app convenient for its users".</span>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="color: rgb(0, 0, 0);"><i>Responding to backlash, Zoom stops sharing user data with facebook: </i></span></div>
<a href="https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp" id="LPlnk865935">https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp</a>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="LPBorder_GTaHR0cHM6Ly93d3ctaW1vcmUtY29tLmNkbi5hbXBwcm9qZWN0Lm9yZy9jL3Mvd3d3Lmltb3JlLmNvbS9yZXNwb25kaW5nLWJhY2tsYXNoLXpvb20tc3RvcHMtc2hhcmluZy11c2VyLWRhdGEtZmFjZWJvb2s:YW1w" class="LPBorder907479" contenteditable="false" style="width: 100%; margin-top: 16px; margin-bottom: 16px; position: relative; max-width: 800px; min-width: 424px;">
<table id="LPContainer907479" role="presentation" style="padding: 12px 36px 12px 12px; width: 100%; border-width: 1px; border-style: solid; border-color: rgb(200, 200, 200); border-radius: 2px;">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td>
<div id="LPImageContainer907479" style="position: relative; margin-right: 12px; height: 122.093px; overflow: hidden; width: 240px;">
<a target="_blank" id="LPImageAnchor907479" href="https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp"><img id="LPThumbnailImageId907479" alt="" height="122" width="240" style="display: block;" src="https://www.imore.com/sites/imore.com/files/styles/large/public/field/image/2020/03/zoom-brand-photo.jpg?itok=CYBTAH8k"></a></div>
</td>
<td style="width: 100%;">
<div id="LPTitle907479" style="font-size: 21px; font-weight: 300; margin-right: 8px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px;">
<a target="_blank" id="LPUrlAnchor907479" href="https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp" style="text-decoration: none; color: var(--themePrimary);">Responding to backlash, Zoom
stops sharing user data with Facebook</a></div>
<div id="LPDescription907479" style="font-size: 14px; max-height: 100px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px; margin-right: 8px; overflow: hidden;">
After it was revealed that the Zoom iOS app was sharing user data with Facebook, the company responded by removing the integration.</div>
<div id="LPMetadata907479" style="font-size: 14px; font-weight: 400; color: rgb(166, 166, 166); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif;">
www-imore-com.cdn.ampproject.org</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<a href="https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp" id="LPlnk579814"></a>
<h1 style="font-size: 26px; margin: 0px 0px 15px; font-family: "Nexa Slab Bold", Helvetica, Arial, sans-serif; color: rgb(16, 16, 16); line-height: 1.1; word-break: break-word; background-color: rgb(255, 255, 255)">
</h1>
<div>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top: 0px; margin-bottom: 0px;">----------------------------------------------------------------------------------</p>
<div id="LPBorder_GTaHR0cHM6Ly93d3ctaW1vcmUtY29tLmNkbi5hbXBwcm9qZWN0Lm9yZy9jL3Mvd3d3Lmltb3JlLmNvbS9yZXNwb25kaW5nLWJhY2tsYXNoLXpvb20tc3RvcHMtc2hhcmluZy11c2VyLWRhdGEtZmFjZWJvb2s:YW1w" class="LPBorder144890" contenteditable="false" style="width: 100%; margin-top: 16px; margin-bottom: 16px; position: relative; max-width: 800px; min-width: 424px;">
<table id="LPContainer144890" role="presentation" style="padding: 12px 36px 12px 12px; width: 100%; border-width: 1px; border-style: solid; border-color: rgb(200, 200, 200); border-radius: 2px;">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td>
<div id="LPImageContainer144890" style="position: relative; margin-right: 12px; height: 122.093px; overflow: hidden; width: 240px;">
<a target="_blank" id="LPImageAnchor144890" href="https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp"><img id="LPThumbnailImageId144890" alt="" height="122" style="display: block;" width="240" src="https://www.imore.com/sites/imore.com/files/styles/large/public/field/image/2020/03/zoom-brand-photo.jpg?itok=CYBTAH8k"></a></div>
</td>
<td style="width: 100%;">
<div id="LPTitle144890" style="font-size: 21px; font-weight: 300; margin-right: 8px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px;">
<a target="_blank" id="LPUrlAnchor144890" href="https://www-imore-com.cdn.ampproject.org/c/s/www.imore.com/responding-backlash-zoom-stops-sharing-user-data-facebook?amp" style="text-decoration: none; color: var(--themePrimary);">Responding to backlash, Zoom
stops sharing user data with Facebook</a></div>
<div id="LPDescription144890" style="font-size: 14px; max-height: 100px; color: rgb(102, 102, 102); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px; margin-right: 8px; overflow: hidden;">
After it was revealed that the Zoom iOS app was sharing user data with Facebook, the company responded by removing the integration.</div>
<div id="LPMetadata144890" style="font-size: 14px; font-weight: 400; color: rgb(166, 166, 166); font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif;">
www-imore-com.cdn.ampproject.org</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-size:12pt"><b>Grace Githaiga</b></span><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-size:12pt">Twitter: @ggithaiga</span><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="font-size:12pt">Skype: gracegithaiga</span></p>
<p style="margin-top: 0px; margin-bottom: 0px;">Linkedin: <a href="https://www.linkedin.com/in/gracegithaiga" class="OWAAutoLink">https://www.linkedin.com/in/gracegithaiga</a></p>
<p style="margin-top: 0px; margin-bottom: 0px;"><br>
</p>
<p style="margin-top: 0px; margin-bottom: 0px;"><span style="color:rgb(85,85,85); font-family:"PT Sans",arial,sans-serif; font-size:14px">.<span style="color:rgb(0,111,201)"><i><span style="color:rgb(75,165,36)">.</span><span style="color:rgb(0,111,201)"><b>.</b></span></i></span><span style="color:rgb(0,111,201); font-family:"PT Sans",arial,sans-serif; font-size:14px"><b><i>the
most important office in a democracy is the citizen. So, you see, that’s what our democracy demands. It needs you!----Barrack Obama.</i></b></span></span><br>
</p>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> NCSG-Discuss <NCSG-DISCUSS@LISTSERV.SYR.EDU> on behalf of Bruna Martins dos Santos <bruna.mrtns@GMAIL.COM><br>
<b>Sent:</b> 28 March 2020 8:36 PM<br>
<b>To:</b> NCSG-DISCUSS@LISTSERV.SYR.EDU <NCSG-DISCUSS@LISTSERV.SYR.EDU><br>
<b>Subject:</b> Re: Zoom is compromised</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Hello all,</div>
<div><br>
</div>
<div>Hope this email finds everyone well! </div>
<div><br>
</div>
On that same note, Access Now sent a letter to the company asking them for more disclosure when it comes to their transparency reports: <br>
<br>
<i>"Access Now argues that Zoom needs to publish a transparency report so that the public can be informed about how the company handles and protects user data. “The growing demand for your services makes Zoom a target for third parties, from law enforcement
to malicious hackers, seeking personal data and sensitive information,” wrote Isedua Oribhabor, Access Now’s US policy analyst, and Peter Micek, Access Now’s general counsel, in the letter to Zoom. “Meanwhile, as people gather online, these assemblies will
draw scrutiny from authorities looking to control the flow of information. This is why disclosing only privacy policies is not enough — it is necessary for Zoom to also disclose its policies and procedures protecting the data and accounts of everyone interacting
with its services through a regular transparency report."</i><br>
<div><br>
</div>
<div>As seen on: <a href="https://www.theverge.com/2020/3/19/21186152/zoom-transparency-report-access-now-advocacy-group">
https://www.theverge.com/2020/3/19/21186152/zoom-transparency-report-access-now-advocacy-group</a><br>
</div>
<div><br>
</div>
<div>Lesser on the control of the data that Zoom possibly shares on us and more on the self protection side, <a href="https://twitter.com/Karisma/status/1242569633619677187">Karisma</a> Foundation, a civil society organization from the LAC region tweeted about
possible tips to lessen any possible risks Zoom might offer us - most of them already in use in ICANN calls. And this is the translated list of their recommendations: <br>
<br>
- Host of the call can restrict the use of the sharing screen feature only to him. You can do this in the call administrator settings - Sharing screen -> Advanced sharing settings; <br>
- Disable other people from entering before the host, disable “Join Before Host” feature; <br>
- Enable the co-host feature for someone else to help moderate the call; </div>
<div>- Disable file transfer to avoid malicious links or documents to be sent; and<br>
- Disable “Allow Removed Participants to Register” so you can prevent unwanted intrusions. <br>
</div>
<div><br>
</div>
<div>Best, </div>
<div>B</div>
</div>
<br>
<div class="x_gmail_quote">
<div dir="ltr" class="x_gmail_attr">Le sam. 28 mars 2020 à 13:34, Carlos Afonso <<a href="mailto:0000103799ed46a9-dmarc-request@listserv.syr.edu">0000103799ed46a9-dmarc-request@listserv.syr.edu</a>> a écrit :<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
I absolutely agree with you on the bigger problems we face right now. I think this pandemic will redefine the world community, and we are not sure what this redefinition will be.<br>
<br>
We may "redive" into the Dark Ages, or emerge as a society in which stupidities like the "minimum State" gibberish and the neoliberal mantras will be extinguished forever.<br>
<br>
fraternal regards<br>
<br>
--c.a.<br>
<br>
On 28/03/2020 12:39, James Gannon wrote:<br>
> I think the community has bigger problems right now tbh, your profiled by FB on the vast majority of the websites on the internet right now, nothing is going to change that.<br>
> <br>
> I have to admit that I find the crying wolf at the moment by a lot of folks (And not targeting folks on this list but the general chatter about this on twitter etc) is particularly ignorant of the current situation that people are in, Zoom has proven to be
a lifesaver in many situations, both private, educational and professional and if anything should be lauded for its work to remain scalable and stable, rather than slated for providing a user requested feature (FB Live integration allow people who are not
tech savvy to be able to see loved ones or participate in education).<br>
> <br>
> Compromised does have a specific meaning within the security community, that the app has been modified or changed by a third party not associated with the creators, which is not the case here, and is merely a tabloid style headline. Which we have enough of
on other topics right now.<br>
> <br>
> -----Original Message-----<br>
> From: NCSG-Discuss <<a href="mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU" target="_blank">NCSG-DISCUSS@LISTSERV.SYR.EDU</a>> On Behalf Of Carlos Afonso<br>
> Sent: Saturday 28 March 2020 15:32<br>
> To: <a href="mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU" target="_blank">NCSG-DISCUSS@LISTSERV.SYR.EDU</a><br>
> Subject: Re: Zoom is compromised<br>
> <br>
> There are different meanings for "compromise"... but anyway, the joint big-time *unauthorized* profiling Zoom-Facebook is the central problem. Not sure if the relationship stopped because of the removal of the SDK.<br>
> <br>
> To be sure, the community should seek alternatives.<br>
> <br>
> fraternal regards<br>
> <br>
> --c.a.<br>
> <br>
> On 28/03/2020 12:05, James Gannon wrote:<br>
>> Its not compromised however, its using the Facebook SDK (And has now been removed) to enable the FB live integration, while yes there may be a feature here that people were not aware of, its not "compromised" in any way.<br>
>><br>
>> -----Original Message-----<br>
>> From: NCSG-Discuss <<a href="mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU" target="_blank">NCSG-DISCUSS@LISTSERV.SYR.EDU</a>> On Behalf Of Carlos
<br>
>> Afonso<br>
>> Sent: Saturday 28 March 2020 14:54<br>
>> To: <a href="mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU" target="_blank">NCSG-DISCUSS@LISTSERV.SYR.EDU</a><br>
>> Subject: Re: Zoom is compromised<br>
>><br>
>> Dear Farell, I think you did not read the second message from Raoul:<br>
>><br>
>> ====<br>
>> <a href="https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-f" rel="noreferrer" target="_blank">
https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-f</a><br>
>> acebook-even-if-you-dont-have-a-facebook-account<br>
>><br>
>> "The Zoom app notifies Facebook when the user opens the app, details <br>
>> on the user's device such as the model, the time zone and city they <br>
>> are connecting from, which phone carrier they are using, and a unique <br>
>> advertiser identifier <br>
>> <<a href="https://konsole.zendesk.com/hc/en-us/articles/115013349668-Identify-A" rel="noreferrer" target="_blank">https://konsole.zendesk.com/hc/en-us/articles/115013349668-Identify-A</a><br>
>> ndroid-AdIDs-Apple-IDFAs-and-Safari-IDs><br>
>> created<br>
>> by the user's device which companies can use to target a user with <br>
>> advertisements <br>
>> <<a href="https://www.singular.net/mobile-tutorial-series-idfa-apple-identifier" rel="noreferrer" target="_blank">https://www.singular.net/mobile-tutorial-series-idfa-apple-identifier</a><br>
>> -advertisers/><br>
>> "<br>
>> -Raoul<br>
>><br>
>> ====<br>
>><br>
>> This is far more serious than hacking vulnerabilities known in the standard configuration of Zoom.<br>
>><br>
>> fraternal regards<br>
>><br>
>> --c.a.<br>
>><br>
>> On 28/03/2020 08:37, Farell FOLLY wrote:<br>
>>> Dear Raoul,<br>
>>><br>
>>> Thanks for sharing this. However, I don’t think the word “compromised” is the right one to use here, unless I don’t understand what you would like to mean. What is described in the link you shared as well as in your second e-mail is something about privacy
setting of the apps….that the user could prevent in many ways. Indeed, anytime you use your browser or anything that connect you to the internet, if you do not properly set up your privacy and cookie setting, it always send some data about your device, your
operating system and your location. This situation is even worse when you accept cookies on a 3rd party website without reading it in details… A “yes” on a website most of the time means: “yes propagate all my date to all your thousand partners”.<br>
>>><br>
>>><br>
>>><br>
>>><br>
>>><br>
>>><br>
>>> @__f_f__<br>
>>><br>
>>> Best Regards<br>
>>> ____________________________________<br>
>>><br>
>>> (Ekue) Farell FOLLY<br>
>>> GNSO Councillor<br>
>>> <a href="http://linkedin.com/in/farellf" rel="noreferrer" target="_blank">linkedin.com/in/farellf</a><br>
>>><br>
>>><br>
>>><br>
>>><br>
>>><br>
>>><br>
>>>> On 27 Mar 2020, at 22:53, Raoul Plommer <<a href="mailto:plommer@gmail.com" target="_blank">plommer@gmail.com</a>> wrote:<br>
>>>><br>
>>>> FYI:<br>
>>>><br>
>>>> <a href="https://www.theguardian.com/technology/2020/mar/27/trolls-zoom-priva" rel="noreferrer" target="_blank">
https://www.theguardian.com/technology/2020/mar/27/trolls-zoom-priva</a><br>
>>>> c<br>
>>>> y-settings-covid-19-lockdown<br>
>>>> <<a href="https://www.theguardian.com/technology/2020/mar/27/trolls-zoom-priv" rel="noreferrer" target="_blank">https://www.theguardian.com/technology/2020/mar/27/trolls-zoom-priv</a><br>
>>>> a<br>
>>>> cy-settings-covid-19-lockdown><br>
>>><br>
>>><br>
>><br>
> <br>
<br>
-- <br>
<br>
Carlos A. Afonso<br>
[emails são pessoais exceto quando explicitamente indicado em contrário]<br>
[emails are personal unless explicitly indicated otherwise]<br>
<br>
Instituto Nupef - <a href="https://nupef.org.br" rel="noreferrer" target="_blank">
https://nupef.org.br</a><br>
ISOC-BR - <a href="https://isoc.org.br" rel="noreferrer" target="_blank">https://isoc.org.br</a><br>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr" class="x_gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div><b><i>Bruna Martins dos Santos </i></b></div>
<div><br>
</div>
<div>
<div>Skype ID: bruna.martinsantos<br>
</div>
<div>@boomartins<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>