Zoombombing – the end-to-end fallacy
Abstract
Zoombombing, a trend in recent months, has quickly moved from online classroom pranks to organised disruption efforts, which the FBI has threatened to punish with jail time. “The FBI has received multiple reports of conferences being disrupted by pornographic and/or hate images and threatening language.” the agency stated in a recent press release.1
Zoombombing has quickly moved from online prank to organised disruption effort, which the FBI has threatened to punish with jail time.
As the use of Zoom has increased dramatically due to the Covid-19 pandemic, multiple security issues have emerged concerning the platform. The company is taking steps to bring the platform up to date with industry standards. But the issue clearly shows that certain companies focus more on the functionality they provide to their users than they do on the appropriate security, says Ion-Alexandru Secara.
References
- 1 ‘FBI warns of teleconferencing and online classroom hijacking during Covid-19 pandemic.’;
30 Mar 2020:
Boston FBI>
www.fbi.gov/contact-us/field-offices/boston/news/press-releases/fbi-warns-of-teleconferencing-and-online-classroom-hijacking-during-covid-19-pandemic
accessed May 2020 Google Scholar - 2 ‘Zoom CEO says company reached 200 million daily users in March’;
Apr 2020:
The Hill>
https://thehill.com/policy/cybersecurity/490794-zoom-ceo-says-company-reached-200-million-daily-users-in-march
accessed 2 April 2020 Google Scholar - 3 ‘Zoombombing becomes a dangerous organised effort’;
3 Apr 2020:
The New York Times>
www.nytimes.com/2020/04/03/technology/zoom-harassment-abuse-racism-fbi-warning.html
accessed April 2020 Google Scholar - 4 ‘Researchers found and bought more than 500,000 Zoom passwords on the dark web for less than a cent each’;
14 Apr 2020:
Business Insider>
www.businessinsider.com/500000-zoom-accounts-sale-dark-web-2020-4
accessed April 2020 Google Scholar - 5 ‘The facts around Zoom and encryption for meetings/webinars’;
1 Apr 2020:
Zoom Blog>
https://blog.zoom.us/wordpress/2020/04/01/facts-around-zoom-encryption-for-meetings-webinars/
accessed April 2020 Google Scholar - 6 ‘Move Fast and Roll Your Own Crypto’;
3 Apr 2020:
The Citizen Lab>
https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/
accessed April 2020 Google Scholar - 7 ‘Form 10-K Zoom Video Communication, Inc’;
31 Jan 2020:
United States Securities and Exchange Commission>
https://investors.zoom.us/static-files/09a01665-5f33-4007-8e90-de02219886aa
accessed March 2020 Google Scholar - 8 ‘US military, government workers still use Zoom despite FBI warning’;
10 Apr 2020:
VOA News>
www.voanews.com/silicon-valley-technology/us-military-government-workers-still-use-zoom-despite-fbi-warning
accessed May 2020 Google Scholar - 9 ‘After backlash, Zoom ditches snooping Facebook code from iOS app’;
29 Mar 2020:
Tech Radar>
www.techradar.com/news/after-backlash-zoom-ditches-snooping-facebook-code-from-ios-app
accessed March 2020 Google Scholar - 10 ‘Simple illustration of Zoom encryption failure’;
10 Apr 2020:
Security Boulevard>
https://securityboulevard.com/2020/04/simple-illustration-of-zoom-encryption-failure/
accessed April 2020 Google Scholar - 11 ‘Zoom CEO explains stance on encryption, says he wants to ‘work together’ with law enforcement’;
3 Jun 2020:
CNBC>
www.cnbc.com/2020/06/03/zoom-ceo-eric-yuan-on-encryption-working-with-law-enforcement.html
accessed June 2020 Google Scholar - 12 ‘Identifying encryption algorithms in ECB and CBC modes using computational intelligence’;
Jan 2018:
Journal of Universal Computer Science>
www.jucs.org/jucs_24_1/identifying_encryption_algorithms_in/jucs_24_01_0025_0042_demello.pdf
accessed November 2018 Google Scholar - 13 ‘How does AES encryption work?’;
4 Feb 2019:
ProPrivacy>
https://proprivacy.com/guides/aes-encryption
accessed January 2020 Google Scholar - 14 ‘Use Cryptography Like The CIA’;
24 Mar 2017:
Cryptosense>
https://cryptosense.com/blog/use-cryptography-like-the-cia/
accessed August 2019 Google Scholar - 15 ‘Wiley CIA Exam Review 2020, Part 2: Practice Of Internal Auditing’; Sep 2019: Wiley Efficient Learning> Accessed Feb 2020. Google Scholar
- 16 ‘End to end encryption saves lives: it’s time for Zoom to lead the way in online public safety says civil society groups and security expert at press conference’. Stop Spying, Apr 2020. Accessed May 2020. Google Scholar
- 17 ‘Zoom zero day: 4+ million webcams & maybe an RCE? Just get them to visit your website!’;
8 Jul 2019:
Medium Infosec Write-ups>
https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5
accessed December 2019 Google Scholar - 18 ‘Pentagon Issues New Guidance on Zoom Use’;
10 Apr 2020:
VOA News>
www.voanews.com/silicon-valley-technology/pentagon-issues-new-guidance-zoom-use
accessed April 2020 Google Scholar - 19 ‘Zoom acquires Keybase and announces goal of developing the most broadly used enterprise end-to-end encryption offering’;
7 May 2020:
Zoom Blog>
https://blog.zoom.us/wordpress/2020/05/07/zoom-acquires-keybase-and-announces-goal-of-developing-the-most-broadly-used-enterprise-end-to-end-encryption-offering/
accessed May 2020 Google Scholar - 20 ‘Evaluation of some blockcipher modes of operation’. Cryptography Research and Evaluation Committees for the Government of Japan’;
https://web.cs.ucdavis.edu/~rogaway/papers/modes.pdf 10 Feb 2011:
accessed January 2020 Google Scholar