Zoom is compromised

[Joly MacFie]

I agree with this commenter.
https://arstechnica.com/information-technology/2020/04/unpatched-zoom-bug-lets-attackers-steal-windows-credentials-with-no-warning/?comments=1&post=38771635#comment-38771635







*This is evidently a Microsoft Windows flaw.It appears to be reported along
the same lines as: the Tech Industry built insecure products, so let's
train users to not click links.Fix Windows so it doesn't send credentials
to random SMB servers on the internet that bear no relation to the host's
domain, and using an insecure protocol to boot.Sheesh!  *

On Wed, Apr 1, 2020 at 9:35 PM Raoul Plommer <plommer at gmail.com> wrote:

>
> https://arstechnica.com/information-technology/2020/04/unpatched-zoom-bug-lets-attackers-steal-windows-credentials-with-no-warning/
>
> This discovery was made yesterday, so it's not an April fool's day prank..
>
> -Raoul
>
> On Tue, 31 Mar 2020 at 17:41, Remmy Nweke <remmyn at gmail.com> wrote:
>
>> Very instructive. Thanks
>> ____
>> REMMY NWEKE, mNGE,
>> Lead Consulting Strategist/Group Executive Editor,
>> DigitalSENSE Africa Media [*Multiple-award winning medium*]
>> (DigitalSENSE Business News
>> <http://www.digitalsenseafrica.com.ng/businessnews>; ITREALMS
>> <http://www.itrealms.com.ng>, NaijaAgroNet
>> <http://www.naijaagronet.com.ng>)
>> Block F1, Shop 133 Moyosore Aboderin Plaza, Bolade Junction, Oshodi-Lagos
>> M: 234-8033592762, 8023122558, 8051000475, T: @ITRealms
>> <http://www.twitter.com/ITRealms>
>> Author: A Decade of ICT Reportage in Nigeria
>> <https://www.facebook.com/adecadeofictreportageinnigeria%E2%80%8E>
>>
>> *2020 Nigeria DigitalSENSE Forum on IG4D & Nigeria IPv6 Roundtable
>> <http://www.digitalsenseafrica.com.ng>*
>> JOIN us!!
>>
>> *Vice President, African Civil Society on the Information Society (ACSIS
>> <http://www.acsis-scasi.org/en/>)
>> _________________________________________________________________
>> *Confidentiality Notice:* The information in this document and
>> attachments are confidential and may also be privileged information. It is
>> intended only for the use of the named recipient. Remmy Nweke does not
>> accept legal responsibility for the contents of this e-mail. If you are not
>> the intended recipient, please notify me immediately, then delete this
>> document and do not disclose the contents of this document to any other
>> person, nor make any copies. Violators may face court persecution.
>>
>>
>>
>> On Sat, Mar 28, 2020 at 12:03 AM Raoul Plommer <plommer at gmail.com> wrote:
>>
>>>
>>> https://www.vice.com/en_us/article/k7e599/zoom-ios-app-sends-data-to-facebook-even-if-you-dont-have-a-facebook-account
>>>
>>>
>>> "The Zoom app notifies Facebook when the user opens the app, details on
>>> the user's device such as the model, the time zone and city they are
>>> connecting from, which phone carrier they are using, and a unique
>>> advertiser identifier
>>> <https://konsole.zendesk.com/hc/en-us/articles/115013349668-Identify-Android-AdIDs-Apple-IDFAs-and-Safari-IDs> created
>>> by the user's device which companies can use to target a user with
>>> advertisements
>>> <https://www.singular.net/mobile-tutorial-series-idfa-apple-identifier-advertisers/>
>>> "
>>>
>>> -Raoul
>>>
>>>
>>>
>>> On Fri, 27 Mar 2020 at 17:53, Raoul Plommer <plommer at gmail.com> wrote:
>>>
>>>> FYI:
>>>>
>>>>
>>>> https://www.theguardian.com/technology/2020/mar/27/trolls-zoom-privacy-settings-covid-19-lockdown
>>>>
>>>>
>>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ncsg.is/pipermail/ncsg-discuss/attachments/20200402/4a8742d1/attachment.htm>