logoalt Hacker News

vee-kaytoday at 5:43 AM0 repliesview on HN

Zoom is founded by a Chinese origin guy.

Its security issues are already discussed earlier elsewhere, such as in this Reddit thread.

https://www.reddit.com/r/privacy/comments/18d1bgi/is_zoom_st...

[In the past is that Zoom said they were HIPAA Compliant, eg. had end-to-end encryption, and weren't. This was a huge issue at the beginning of the Pandemic when everybody started using them. This has since been fixed, but this wasn't their only lie or breach of trust.

A few years ago, Zoom tried to insert a clause in their ToS that would have allowed them to use audio, video or chat content for training AI. But due to a LOT of backlash they backpedalled on that and now they "just" use telemetry data, product-usage data, diagnostic data and similar data “that Zoom collects or generates in connection with your or your End Users’ use of the Services or Software”.

Zoom has had multiple instances of extremely sketchy behavior, including: * Deploying a rootkit on Macs to allow silent reinstallation of Zoom after removal. * Having vulnerabilities in said rootkit that took months to patch after trying to ghost the researcher. * Using useless encryption. * Lying about end-to-end encryption (they weren't even zero knowledge!) * Routing entirely US calls through China. * Lacking any reasonable access control to stop bombers.

They have been caught lying-- not corporate speaking, not fudging a bit, outright lying-- on multiple occasions and had to replace parts of their leadership structure to try to fix the bad PR around it.]