Features

Zoombombing – the end-to-end fallacy

Abstract

Zoombombing, a trend in recent months, has quickly moved from online classroom pranks to organised disruption efforts, which the FBI has threatened to punish with jail time. “The FBI has received multiple reports of conferences being disrupted by pornographic and/or hate images and threatening language.” the agency stated in a recent press release.¹

Zoombombing has quickly moved from online prank to organised disruption effort, which the FBI has threatened to punish with jail time.

As the use of Zoom has increased dramatically due to the Covid-19 pandemic, multiple security issues have emerged concerning the platform. The company is taking steps to bring the platform up to date with industry standards. But the issue clearly shows that certain companies focus more on the functionality they provide to their users than they do on the appropriate security, says Ion-Alexandru Secara.

References

1 Kristen Setera ‘FBI warns of teleconferencing and online classroom hijacking during Covid-19 pandemic.’; 30 Mar 2020: Boston FBI> www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic accessed May 2020 Google Scholar
2 Maggie Miller ‘Zoom CEO says company reached 200 million daily users in March’; Apr 2020: The Hill> https://thehill.com/policy/cybersecurity/490794-zoom-ceo-says-company-reached-200-million-daily-users-in-march accessed 2 April 2020 Google Scholar
3 Taylor Lorenz Davey Alba ‘Zoombombing becomes a dangerous organised effort’; 3 Apr 2020: The New York Times> www.nytimes.com/2020/04/03/technology/zoom-harassment-abuse-racism-fbi-warning.html accessed April 2020 Google Scholar
4 Isobel Asher Hamilton ‘Researchers found and bought more than 500,000 Zoom passwords on the dark web for less than a cent each’; 14 Apr 2020: Business Insider> www.businessinsider.com/500000-zoom-accounts-sale-dark-web-2020-4 accessed April 2020 Google Scholar
5 Oded Gal ‘The facts around Zoom and encryption for meetings/webinars’; 1 Apr 2020: Zoom Blog> https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-encryption-for-meetings-webinars/ accessed April 2020 Google Scholar
6 Bill Marczak John Scott-Railton ‘Move Fast and Roll Your Own Crypto’; 3 Apr 2020: The Citizen Lab> https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/ accessed April 2020 Google Scholar
7 ‘Form 10-K Zoom Video Communication, Inc’; 31 Jan 2020: United States Securities and Exchange Commission> https://investors.zoom.us/static-files/09a01665-5f33-4007-8e90-de02219886aa accessed March 2020 Google Scholar
8 Carla Babb ‘US military, government workers still use Zoom despite FBI warning’; 10 Apr 2020: VOA News> www.voanews.com/silicon-valley-technology/us-military-government-workers-still-use-zoom-despite-fbi-warning accessed May 2020 Google Scholar
9 Sharmishta Sarkar ‘After backlash, Zoom ditches snooping Facebook code from iOS app’; 29 Mar 2020: Tech Radar> www.techradar.com/news/after-backlash-zoom-ditches-snooping-facebook-code-from-ios-app accessed March 2020 Google Scholar
10 Davi Ottenheimer ‘Simple illustration of Zoom encryption failure’; 10 Apr 2020: Security Boulevard> https://securityboulevard.com/2020/04/simple-illustration-of-zoom-encryption-failure/ accessed April 2020 Google Scholar
11 Jordan Novet ‘Zoom CEO explains stance on encryption, says he wants to ‘work together’ with law enforcement’; 3 Jun 2020: CNBC> www.cnbc.com/2020/06/03/zoom-ceo-eric-yuan-on-encryption-working-with-law-enforcement.html accessed June 2020 Google Scholar
12 Flavio L de Mello Jose AM Xexeo ‘Identifying encryption algorithms in ECB and CBC modes using computational intelligence’; Jan 2018: Journal of Universal Computer Science> www.jucs.org/jucs_24_1/identifying_encryption_algorithms_in/jucs_24_01_0025_0042_demello.pdf accessed November 2018 Google Scholar
13 Douglas Crawford ‘How does AES encryption work?’; 4 Feb 2019: ProPrivacy> https://proprivacy.com/guides/aes-encryption accessed January 2020 Google Scholar
14 ‘Use Cryptography Like The CIA’; 24 Mar 2017: Cryptosense> https://cryptosense.com/blog/use-cryptography-like-the-cia/ accessed August 2019 Google Scholar
15 S Rao Vallabhaneni ‘Wiley CIA Exam Review 2020, Part 2: Practice Of Internal Auditing’; Sep 2019: Wiley Efficient Learning> Accessed Feb 2020. Google Scholar
16 ‘End to end encryption saves lives: it’s time for Zoom to lead the way in online public safety says civil society groups and security expert at press conference’. Stop Spying, Apr 2020. Accessed May 2020. Google Scholar
17 Jonathan Leitschuh ‘Zoom zero day: 4+ million webcams & maybe an RCE? Just get them to visit your website!’; 8 Jul 2019: Medium Infosec Write-ups> https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5 accessed December 2019 Google Scholar
18 Carla Babb ‘Pentagon Issues New Guidance on Zoom Use’; 10 Apr 2020: VOA News> www.voanews.com/silicon-valley-technology/pentagon-issues-new-guidance-zoom-use accessed April 2020 Google Scholar
19 Eric Yuan ‘Zoom acquires Keybase and announces goal of developing the most broadly used enterprise end-to-end encryption offering’; 7 May 2020: Zoom Blog> https://blog.zoom.us/wordpress/2020/05/07/zoom-acquires-keybase-and-announces-goal-of-developing-the-most-broadly-used-enterprise-end-to-end-encryption-offering/ accessed May 2020 Google Scholar
20 Phillip Rogaway ‘Evaluation of some blockcipher modes of operation’. Cryptography Research and Evaluation Committees for the Government of Japan’; https://web.cs.ucdavis.edu/~rogaway/papers/modes.pdf 10 Feb 2011: accessed January 2020 Google Scholar

1 August 2020Volume 2020Issue 8

ISSN (print): 1353-4858
ISSN (online): 1872-9371

Metrics

History

Published online 3 November 2021

Published in print 1 August 2020

Information

PDF download