Zoom needs to clean up its privacy act
blogs.harvard.edu
blogs.harvard.edu
- Use the Facebook iOS SDK to measure conversions from app install ads
- Send a list of hashed email addresses to Facebook or other advertisers to do ad re-targeting
- Have Google Analytics on their websites to track where people are visiting their website from, i.e. a click on a Google AdWords ad
While these are all not _ideal_ because _yes_, Google and Facebook use this data for their own purposes as well, it's far from _nefarious_. In fact, it's pretty standard fare. Could Zoom go above and beyond and reject these tools? Yes, they could. Does anyone in practice? No.
If Zoom was selling metadata about their calls, leaking contents of their calls, or themselves served ads – then yes, I'd be concerned. But all indications point to them purchasing ads to further the growth of their business.
I think it is perfectly reasonable to seek guarantees around the usage of the above, more sensitive data (contents of video calls, metadata of video calls, etc.) but on the flip side to imply from their privacy policy that they are sending it to Facebook or that they are "in the advertising business" is jumping the gun a little bit.
(And hashed email addresses? Might as well just send the email addresses. Hashing is kind of useless there.)
Hashed contact info is just how Facebook intakes contact information. Makes it harder for them to get the info of non-Facebook users who are patrons of the business. They claim to delete it: https://www.facebook.com/business/help/112061095610075?id=24...
These are closed source, right? How do you know this feature works?
Aka "common sense" aka "anything that will fit within the Overton window"
Not to be confused with "decent, moral behavior"
I'm waiting for these conferencing apps to feed into clearview ai.
I open the .pkg, click Continue so it can run its script, then a second later Installer quits and the app launches. What?!
Turns out, Zoom installs the entire app in the 'preinstall' script of the installer package! Inside there's a copy of '7z', and the app is extracted with that. The preinstall script is littered with typos and poor grammar.
I'm not one of those people who thinks that Apple is going to force all Mac software to come through the App Store, but when I see stuff this stupid...I start to wonder.
Very few people cared when I commented this https://news.ycombinator.com/item?id=20398084
Suffice it to say, I no longer trust Zoom to be running in my regular user account. I have a separate user on my Mac to isolate it. If you have the means, you might even consider a spare computer or a VM to run Zoom.
Even their iOS/iPadOS app is annoying, because the first time you open it and sign in, it pops 3 (!) permission dialogs (Calendar, Notifications, and TouchID/FaceID). Way too aggressive IMO.
Now, if only they'd make a Mac App Store version of Zoom. I'd be so happy...
I do think on macOS the average user doesn't understand DMG files, run apps from inside the DMG instead of copying them to /Applications and deleting the disk image. My guess is that most people install Zoom after a meeting has started and this was the quickest, fewest dialog method of getting it up and running.
First, there's nothing wrong with that.
Also, some apps display a message asking to be moved to /Applications when launched from a DMG.
Sure, you can technically run .app from most places. It becomes problematic in that you can't write to that directory or self update the app if it's still in the DMG. If you reboot you have to know to remount before launching. Not having it in /Applications also becomes a mess if you're in a multi-user environment.
> Also, some apps display a message asking to be moved to /Applications when launched from a DMG.
This is the kind of friction and extra dialog boxes I'm sure they were avoiding.
Personally, I hate pkg files. I wish macOS had a better flow for unsavvy users to deal with DMG and app files.
So I can totally understand why they would want to use 7zip to shave kilobytes off the download size.
Honestly zoom is something that I would never let near a personal computer. What really surprised me is that there’s a “zoomgov.” (a friend at a defense contractor showed me) Either our government is enjoying the benefits of being able to force companies to be audited because of defense budgets or things have become way more relaxed than they should be. Judging by our “stockpiles” and inability to get critical equipment I’m guessing the second one.
...I was about to write a reply saying "well in that case I don't understand what the GP is complaining about", but then I opened up the installer again.
I didn't fully take in what the parent was saying. Zoom is completely short-circuiting the normal macOS package install flow. You click continue once to acknowledge that "this package will run a program to determine if the software can be installed", and then Zoom is suddenly installed and the installer exits.
I can understand why they did it, but it's not good.
Although, Apple deserves some blame here. Firstly because their non-app-store software install flow has been screwed up since the release of Lion, and secondly because why can't you use Installer's "Show Files" option before the preinstall step?
1. You download an installer.
2. You activate that installer.
3. Your system tells you that the installer can run some code.
4. You agree to the installer running some code.
5. The installer installs some software, via the code that you said the installer could run.
Seems perfectly acceptable to me. If you literally cannot open up the archive file to inspect its contents without running some code inside it, that's not Zoom's problem. It's just a really stupid decision on the part of Apple.
Also packages allow for easier deployment rather than dmg's.
Par for the course with Zoom, so it seems.
NVM I decided to inspect the package with `pkgutil`
Here's the offending code
```################################### function install_app_to_path(){ #path=$1 InstallPath="$1/.zoomus_"$(date)"" mkdir -p "$InstallPath" mkdir -p "$InstallPath/Frameworks" if [[ $? != 0 ]] ; then rm -rf "$InstallPath" return 1 fi
if [[ -d "$1/zoom.us.app" ]] ; then
rm -f "$1/zoom.us.app/Contents/Info.plist"
mv "$1/zoom.us.app/Contents" "$InstallPath/trash"
fi
if [[ $? != 0 ]] ; then
rm -rf "$InstallPath"
return 4
fi
rm -rf "$1/zoom.us.app"
if [[ $? != 0 ]] ; then
rm -rf "$InstallPath"
return 4
fi
mdfind 'kMDItemCFBundleIdentifier == "us.zoom.xos"'> .zoom.us.applist.txt
echo "["$(date)"]un7z zm.7z =================================" >>"$LOG_PATH"
if [[ -f res.7z ]] ; then
./7zr x -mmt ./res.7z -o"$InstallPath/Frameworks"&
fi
if [[ -f resReitna.7z ]] ; then
./7zr x -mmt ./resReitna.7z -o"$InstallPath/Frameworks"&
fi
if [[ -f bundles.7z ]] ; then
./7zr x -mmt ./bundles.7z -o"$InstallPath/Frameworks"&
fi
un7zresult=$(./7zr x -mmt ./zm.7z -o"$InstallPath" 2>>"$LOG_PATH")
ret=$?
echo "["$(date)"]check un7z return:$ret, $un7zresult">>"$LOG_PATH"
wait
echo "["$(date)"]un7z all finished">>"$LOG_PATH"
if [[ $ret != 0 ]] ; then
rm -rf "$InstallPath"
return 3
fi
mv "$InstallPath/Frameworks/"* "$InstallPath/zoom.us.app/Contents/Frameworks">>"$LOG_PATH"
mv "$InstallPath/zoom.us.app" "$1" >>"$LOG_PATH"
if [[ $? != 0 ]] ; then
rm -rf "$InstallPath"
return 1
fi
if [[ "$APP_PATH" == "$GLOBAL_APP_PATH" ]] ; then
chmod -R 775 "$APP_PATH"
chown -R :admin "$APP_PATH"
fi
echo "["$(date)"]mv $InstallPath/zoom.us.app into $1">>"$LOG_PATH"
rm -rf "$InstallPath"&
return 0
}```Whenever I have been told that I have a meeting coming up with some kind of conferencing software that I don't have installed, I immediately install it. I don't wait until 3 minutes before the call to try and install. All kinds of things could happen, such as incompatibilities or missing passcodes.
So for now Skype and MS Teams works fine, or at least fine enough that I don't bother with Zoom. Which brings me to a side question: what is the value proposition for Zoom? What does their product do so much better than the others that I'd put up with this shit? Why am I hearing the hell out of it lately? Outstanding PR department?
EDIT: thanks for your answers to “why use it, then?” Because “it just works” seems to be the summary, which hoo boy, one cannot say about a lot of the competition.
I'll share my perspective as an academic. Many of us have adopted Zoom, practically overnight, for our teaching, for one-on-one meetings with students, and even for conferences [1].
The answer is: It just works. It's easy. It does what we want it to, with a minimum of fuss.
As someone who now has a whole bunch of unanticipated shit to deal with, this is one less thing to worry about.
I definitely share your objection in principle. If this situation continues long into the future (a terrifying thought), then perhaps I'll revisit my choice of software. But in the short term, to be honest, I don't much care.
I've actually found the opposite to be true. Google Meet is an example of a product that just works. Zoom, by contrast, pushes you very heavily into downloading and installing an application on every device you want to use it with, and provides a secondary degraded experience in the browser if you find the right link to use it (which you have to do EVERY SINGLE TIME; there doesn't seem to be a way to permanently opt out of the "install this application" nag flow).
I think the real reason is "it's just what everyone else was doing." All of these apps "just work," as someone who has used a veritable gaggle let me tell you there's scarce difference between them. Except zoom makes it more difficult to join without the app (others work in the browser outright, zoom tricks you into installing).
Zoom I think just happens to be one of the trendiest. But with this kind of behavior there's really no reason to use them.
I guess I'd like to know the details of how its easier than the other of myriad of products on the market for you?
At my company we use Slack Video calls, WebEx, and Zoom, and they seem as identical as each other (I'd argue Slack is easiest since we're all logged into it all the time, but that's us).
I’m not casting any aspersions here, I’m only interested in comparing notes with a fellow teacher.
Do the students not care?
It seems that Zoom is the only popular videoconferencing software these days that allows you to disable all the postprocessing on the audio signal (echo cancellation, noise reduction, etc) through advanced settings. This postprocessing is very useful for /conversation/ meetings among many people with bad audio setups, but for two musicians and music signals, the postprocessing is highly detrimental, causing strange audio artifacts and causing instruments to drop out sporadically.
(It seems like there would be a market for videoconferencing software optimized for musicians, where the audio signal is sent at higher quality, given higher priority, and not postprocessed in detrimental ways. And without all the privacy concerns.)
I've been doing videoconferencing for over 30 years (Yes, they had it back then -we used PictureTel systems, over ISDN).
I regularly participate in Zoom meetings with 20 or more attendees. I know of ones that have over 400.
An amazing thing to me, is that technophobes can pick up on it very easily. Very little of that pre-meeting "Mute your mike!", "Can you hear me?", "Whose dog is that?", tons of texts, asking for help, etc, stuff.
Skype is very bad for more than a small handful of attendees.
WebEx and GoToMeeting are OK, I guess, and I've heard good things about BlueJeans.
But Zoom is what I use, and Zoom is very popular with people that suddenly need to gather, and can't do so, physically.
If you don't want a third party getting your contact information, then use a private solution that's actually private. Jitsi and Matrix are open source solutions that both support video conferencing.
I use Teams at work and would say it is comparable to Zoom in terms of AV quality (Microsoft owns both Skype and Teams portfolios, but Teams is built on a modern codebase that runs on different, markedly superior infra than Skype). Unfortunately Teams only works in the enterprise (O365), and it is still fairly new so it doesn't have a lot of the collab functionality like whiteboarding and breakout rooms that Zoom has.
Privacy issues aside, Zoom really is a better product. People are more forgiving of a product's peccadillos when it just works.
Hard to justify moving from zoom to ms teams when Microsoft have shown they don’t care about privacy either.
For me, it's one of the few video chat clients that works well in Linux. Skype may or may not work depending on the version and whether or not Microsoft supports the Linux client. And I have no idea whether MS teams works at all in Linux.
I am using it in chromium on linux, and I can tell you it does not just work. The audio is really really shit (constant crackling). I'm basically unable to attend meetings on zoom. Luckily most of them are in google meet which works fine in a browser.
I think we can cut them some slack for now as they are under more pressure then many other tech companies. They managed to make a great product - so presumably they'll be able to build the right processes for the company itself soon too.
Does Zoom have ads? I haven't seen any. I believe all of the ad tracking is for the reverse: Zoom wants to see if their own advertising is effective. For example, if they buy an ad on Facebook that you saw and then you install the app, they can attribute the install to that ad and measure ROI.
They will never not do that. Paying customer or not, no business is ever going to say "let's give up a huge amount of revenue so we can avoid invading people's privacy and annoying them with ads they don't want to see". To do so would be to miss an opportunity to make even more money.
The fact you're a paying customer also implies you have disposable income and you're willing to spend it. Ironically, paying money to avoid advertising makes your attention even more valuable to advertisers.
The only way they'll stop advertising is if it's not profitable. The only solution is to block all ads and reduce their return on investment as much as possible.
It only makes sense if you make the unsupported leap in logic that says that the cash price is itself promise to not use analytics. But you are willing to accept $0 adalytics-supported products, and FOSS exists and some has adalytics and some doesnt, showing that $0 is not any kind of meaningful boundary.
Good PR helps too, I suppose.
Personally I haven't seen many people offer up alternatives that are clear winners. They all have tradeoffs. Since there's tradeoffs I have a hard time moving people to some other direction. If I could says, "Oh Zoom is nice, but Schmooz is the best!" I know people who'd make the move. Even if it's paid.
Energy consumption. Half hour hangouts drains 30% of battery 3 hours zoom is roughly 5-10%. UX and performance the two major factors why we chose Zoom.
My company's virtual meeting solutions are a mess; it's the one really messy area in our tooling. For the longest time we had GoTo, but then the dev team specifically also had hipchat for Slack-like interactions. Then hipchat went away, and for some reason the org took that as a cue to do an org-wide rollout of MS Teams, with no approval for us to use Slack. Somewhere along the way certain people somehow acquired Zoom licenses and started using those. Then just about two weeks ago the whole org was told to switch to Zoom, but now not enough people have licenses and all the old GoTo licenses are kaput.
Anyways, the reason I have heard various people from the business side give for why they like Zoom is "GoTo was too hard to use." I don't really see that, and I also wonder if there's some sort of 'FOMO' going on. A couple big vendors we interact with use Zoom, Zoom is big in the news currently -- "everybody uses Zoom!" I do also think it's maybe a bit cheaper at enterprise scale.
I don't mind Zoom from a UX/call quality perspective. I think Alt-A to unmute is super unintuitive but that's a very minor quibble, and for all I know shortcuts are customizable. I am, however, very discouraged by Zoom's privacy story as we're discussing here.
---
As my own side note, I am generally on board with almost everything MS has been doing lately -- we're mostly a MS shop as they help us with pricing, given we're a nonprofit, while AWS told us 'no chance' -- but Teams has to be the single buggiest MS product I've ever used. Just now, over the past month or so, I've noticed it very slowly improving. But for the first year of our usage, we experienced constant issues. Dropped calls, silent crashes, daily sync failures. My favorite one was, every time I would shut down Teams, it would relaunch itself a few seconds later with a message saying "sorry, Teams has crashed, we're recovering." Apparently every time the program received a shutdown msg it just assumed "oops, another crash."
Sadly, this happens everywhere. Verizon and ATT? Selling your location and data usage patterns for years.
Bank accounts and credit cards? Selling your purchase patterns for decades.
PS- I hate misuse of my data as much as the next person.
Skype is terrible some days. Google hangouts is OK. Cisco Webx is dead in the water every time I have tried to use it.
Maybe I just haven't used Zoom enough as the other two do have good days and bad days.
FaceTime is the only serious competitor I can think of that's able to deliver as quality of a call experience in a 1:1 setting with non-technical participants, but it's inaccessible on Windows/Android for starters, and lacks the presentation chops to be used in a business setting.
I agree with your sentiment though - it makes me angry that they're selling my personal data. But sadly I don't think that any companies will voluntarily be non-skeezy...we really need laws and regulations in this space. I don't trust capitalism to take care of my privacy. If companies can get more money without breaking the law, they will absolutely do so.
Why would Zoom care about their privacy issues if they're doing so well off? Seems like that's a good amount of positive reinforcement that their current approach is the right one to them. Maybe they'll lose a few thousand customers because of it, but given what I'm sure was a huge increase in the past few weeks, why would it be something they're concerned about?
Slack's business model [1] is storing all history and charging for access for it. Nothing transient about that.
[1] https://en.wikipedia.org/wiki/Slack_(software)#Business_mode...
With our own product ZeroTier we get maybe 1-2 questions a year about privacy and so far only a few enterprise customers have even asked about the security of encryption and authentication. "It's encrypted" is good enough for 99.9% of the market. Encrypted with what? A cereal box cipher? Nobody cares.
What do people care about? In my experience its ease of use, ease of use, ease of use, ease of use, and ease of use, in no particular order. An app that's a privacy and security dumpster fire but is very easy to set up and use will win hands down over a better engineered one that requires even one or two more steps to set up.
Might be because our clients are banks but they really care about this stuff.
It's why your banker might use their cell phone for a zoom client when everyone else is on a computer - their work computer is locked down. Govt employees often the same way. You'll notice they are doing the phone call in or phone client vs their computer.
Lot's of companies, zoom included, get in through the user side not the big webex / cisco type sales process.
It's very very hard to lock down a network without drastically impacting productivity, especially if you have any kind of science, design, or development going on.
Why would people ask you that? You already put the answers in the public documentation.
The question is "why should Zoom leadership care about the recent privacy concerns if the vast majority of their customers don't care?"
Their stock is up over 6% today while the market is down 4% (volatility caveats here obviously). So far the privacy concerns don't seem to be impacting the companies short or long term prospects, so I wouldn't expect the company to do the right thing.
Zoom's engineering team is based in China - the product is primarily built out of there. [1]
What guarantee is there that the CCP is not intercepting/backdooring all video communications? Especially in current situations, where so much sensitive information is being discussed via Zoom?
[1] https://www.cnbc.com/2019/03/26/zoom-key-profit-driver-ahead...
When I installed Zoom for Mac for the first time, I noticed it took a while to start up and caused beachballing. So I grabbed a sample of the process via Activity Monitor. To my utter horror, the Zoom binary is shelling out by calling system(3) on the fucking main thread.
I just verified this is the case on the latest version of Zoom for Mac. The binary zoom.us.app/Contents/Frameworks/zmLoader.bundle/Contents/MacOS/zmLoader invokes system(3) on three separate occasions in two functions: -[ZPMBSystemHelper disablePTAutoRestoreWindow] and -[ZPMBSystemHelper disableConfAutoRestoreWindow].
And looking at what the string was, it's just a fucking call to defaults(1). Now I'm not a Mac programming expert but I cannot understand why Zoom needs to change its own preference settings this way. This just screams sloppy software engineering quality. I guess this is what you get when you outsource software engineering.
I would not be surprised at all if someone reports vulnerabilities in Zoom, whether deliberate or accidental.
It may be just anecdotal but their calls work flawlessly, regardless of number of participants, where other apps are just a laggy mess. So yes, their apps are just a means to an end and may be rushed and "low quality", but oh boy do they deliver.
Surveillance prospects, doesn't matter where they originate - US or China or Country X - need to be discussed and examined. But apparently, saying anything against China on HN is an automatic ban for creating a flame war. We've become too soft. Obviously personal attacks and racism is not tolerable. But, I would personally (some may disagree) say that we should also criticize bad parts of culture too...that's for another day or a different forum.
Can we just get past the my country your country bullshit on HN and talk about privacy implications especially from the world's largest surveillance network? It is one thing to be spied upon for advertisement tracking, an entirely another to be spied upon by a brutal authoritarian government. Fearlessly criticizing CCP or the NSA, or Israeli intelligence agency or whatever... should be one of the most important things to talk about on "Hacker" news forum.
I am gonna fire off some anon emails to WSJ/NYTimes/WaPo/Guardian to create some awareness and perhaps they can dig further into Chinese influence in using Zoom. I am deeply concerned. The entire world has given up video/audio/screen/application privacy in a snap... for the data might be stored in Tianjin datacenter, needless to say whose keys are in the hands of CCP - I guarantee that but cannot provide proof.
Edit: past comments that were downvoted (and flagged): https://news.ycombinator.com/item?id=22657794
https://news.ycombinator.com/item?id=22684767
Who is "we"?
In case it's not clear, I'm with you. Either you're in a position to state in what capacity you work or you're not. In the latter, don't hint at it. Just leave that out. It's useless, and more likely to make people doubt the validity of the vague claim.
And while I agree with your sentiment regarding the CCP, the comments you link lack the meat of the one you just posted. I'm not surprised they got a kicking.
> I am gonna fire off some anon emails to WSJ/NYTimes/WaPo/Guardian to create some awareness
Well done.
It's not specific to Zoom, they intercept at the global fiber lines, they can watch ANY video they want.
So yes, the CCP can watch your videos and so can the NSA.
I'd be very cautious about sharing information with Zoom. You may be showing it where to fish.
Those last two portions are super critical. No one wants to spend the first 10 minutes of their meeting fighting with their conferencing technology. Also no one wants to sound like robots.
With COVID19 and a ton more people working remote, will there be more competition coming into the space? Sure. But it will take them a lot of work, I'd think, to at least meet Zoom's quality and reliability... and do it either so much better or for so much cheaper to warrant change.
What does zoom do that something like Google Hangouts or Slack doesn't?
Based on some quick googling, are you perhaps mistaking Zoom the video conf software with the confusingly similarly named ZOOM International, which does call-center / agent software but is a completely unrelated and a much older company?
An admin, from a dashboard, can see all meetings currently running. If you "click" into one of those meetings for more details, you can also join the meeting as essentially a cohost, you cannot join invisibly.
You CAN see any meeting title, guests, duration, call quality, IP addresses of attendees, Geolocation of that IP, network ti Mic, Speaker and camera in use, and some other stuff.
YOU CAN see all recordings after the fact that are cloud-hosted, Zoom offers 2 recording types based on where you're recording from, laptops like Mac and PC with min spec can record locally, or in the cloud, everything else is in the cloud. I also do not know and do not believe, there is an audit log for this. This is actually the most troubling thing.
You can see more here https://support.zoom.us/hc/en-us/articles/204654719-Getting-...
Also, unlike say Google Hangouts Meet, you cannot add a room to a meeting without consent. Meet allows you to force ANY room into any meeting you want (defaulting with camera and sound on). I've seen people who have these set up in their homes and think of how bad it can be.
EDIT-
Also while no one at my org uses it, I believe you can easily see all zoom chat history.
> Administrators also have the ability to join any call at any time on their organization’s instance of Zoom, without in-the-moment consent or warning for the attendees of the call.
Please don't use your company issued hardware/software/network for something not-work related ... and something you wouldn't feel comfortable sharing with most of your colleagues. There is already a plethora of monitoring going on out there.
First there was the issue with them turning on the camera by default. At least you could turn that off. Then there was the spyware they installed on every Mac without even asking for consent. And now this...
Since the spyware thing I refuse to install their crap on my machine, but one of our suppliers still uses it and the web client is very choppy.. But they'll just have to put up with it. I'm never installing it again.
FaceTime does this as well, even when I'm making a phone call via Contacts. I hate it.
If you had added them to Favourites and are calling from there, you added FaceTime (video) as the favourite; delete that shortcut and re-add them to Favourites as FaceTime Audio.
What am I missing? I'm asking humbly. Because it seems like we are complaining about the food at a homeless shelter?
It seems to me that this is the best possible time to make some noise about Zoom's privacy problems. What better time for that could there be than during a period of mass adoption? What better opportunity to shame a company into compliance than during a global pandemic when the responsibilities of companies to the community is being emphasized?
You might have a point if castigating Zoom for spying on users somehow facilitated the spread of corona, but it doesn't.
Everybody assumes every company is a villain these days. Maybe this was an overlooking and they'll happily fix? Anybody ever think of that?
Well yes, an example is their reaction on their Zero Day:
https://medium.com/bugbountywriteup/zoom-zero-day-4-million-...
> Ultimately, Zoom failed at quickly confirming that the reported vulnerability actually existed and they failed at having a fix to the issue delivered to customers in a timely manner. An organization of this profile and with such a large user base should have been more proactive in protecting their users from attack.
'unsafe-eval'
'unsafe-inline'
blob:
https://*.50million.club
https://*.adroll.com
https://*.cloudfront.net
https://*.google.com
https://*.hotjar.com
https://*.zoom.us
https://*.zoomus.cn
https://*.zopim.com
https://ad.lkqd.net
https://ajax.aspnetcdn.com
https://apiurl.org
https://appsforoffice.microsoft.com
https://assets.zendesk.com
https://bat.bing.com
https://cdn.5bong.com
https://cdn.jsdelivr.net
https://cdncache-a.akamaihd.net
https://code.jquery.com
https://connect.facebook.net
https://consent.trustarc.com
https://extnetcool.com
https://fp166.digitaloptout.com
https://googleads.g.doubleclick.net
https://intljs.rmtag.com
https://pi.pardot.com
https://px.ads.linkedin.com
https://ruanshi2.8686c.com
https://rum-static.pingdom.net
https://s.dcbap.com
https://s.yimg.com
https://s.ytimg.com
https://s3.amazonaws.com
https://scout-cdn.salesloft.com
https://sealserver.trustwave.com
https://secure-cdn.mplxtms.com
https://secure.myshopcouponmac.com
https://snap.licdn.com
https://sp.analytics.yahoo.com
https://srvvtrk.com
https://static.zdassets.com
https://static2.sharepointonline.com
https://tag.demandbase.com
https://tpc.googlesyndication.com
https://tracking.g2crowd.com
https://translate.googleapis.com
https://trk.techtarget.com
https://unpkg.com
https://www.comeet.co
https://www.dropbox.com
https://www.google-analytics.com
https://www.googleadservices.com
https://www.googletagmanager.com
https://www.gstatic.com
https://www.youtube.com
https://d.adroll.mgr.consensu.org
https://serve2.cheqzone.com
https://static.ada.support
'self'
via: https://twitter.com/jasvir/status/1242518507683639296The product must be really good. I have never used them more than in couple occasions and found it like any other web conferencing tool in my opinion.
As a result, they're going to have staying power.
Video quality is really only necessary when screen sharing, and zoom does OK there.
I haven't heard this abbreviation before but I assume it means Audio Echoing Cancellation.
Everyone is still on the free plan and reconnecting after 40 minutes (it's basically standard procedure when the 10 minute countdown starts to rejoin). I bet it won't take long before zoom sales get in touch and you think the person going to approve the tailor-made $$$ contract cares about privacy? Or the 700 people already using it except for a small minority who don't have any influence in this kind of decision making?
- Having the Facebook SDK installed in their iOS app, which sends user data to Facebook even if the user has no Facebook account
- Having a setting, that's off by default, that lets other callers see whether you have the Zoom app in focus
- Having a general "accessibility over security" engineering attitude, which led them to eg shipping their desktop apps with a builtin HTTP server (and with it a much bigger security surface area), just to skip one extra step in the join-meeting-via-a-zoom-link-flow. They removed it after a backlash, but the engineering attitude probably didn't change.
Now, I agree that all of these are bad. It's OK for outrage to happen over these things, every single one of them are shit and major companies like Zoom need to get their act together.
But I also think that many apps out there do stuff like this. The majority of popular apps, I'd wager. Why is Zoom being singled out? First Vice, now a Harvard blog, a bunch of unsubstantiated tweet storms.. Is it just, en vogue to diss Zoom somehow?
I think this also has to do with the fact that Zoom is being used for work and school and therefore people have less choice over their use of it. It's not a social network that many people have chosen to start using, it's a piece of software that millions of students and other people are being required to use without consideration of privacy.
There is no conspiracy here, calm down. Zoom is popular, therefore people talk about it.
Try it when you want to control who is speaking and when.
Try it when you want to co-ordinate hundreds of participants and still want to track who has a question so you can hand the virtual mic / airtime to them.
Try it when you want breakout groups and to determine who is in which group, and after a set time for the groups to return to the main space.
What is good enough for 2 people facing each other, and appears to work perfectly well for a group of 5 or 6... doesn't quite scale to a company all-hands, or giving a lecture or seminar.
Tools fit a scale, and Zoom is excessive for the small and simple use-case but excels at the large and complex.
I don't quite understand why Hangouts and Skype aren't more robust than they are. I'm sure this is indeed a hard problem, but the utility of getting it right is obvious, and these are massive companies.
My company has been remote-only for about 1.5 weeks now and we have 4 different conferencing systems that people are using. It's interesting that everyone has their preferences, but for small meetings nobody is using Zoom as far as I've seen.
So we have two anecdotes now I guess.
Slack, on the other hand, can go to hell.
There are probably a couple of others you can find here and there.
Edit: Well, this thread also.
The people who are concerned about privacy aren’t really the ones writing them big checks anyway.
I'm a fan of the product but this is ridiculous behavior (great Linux support). I have a hard time imagining the product meeting in which "Yes. That's a good idea. Let's do it." was said. I get that FB is big, that Zoom wants the credibility, etc but that's a sign that management is not thinking clearly about their product and should be a red flag to any investor (among the many green flags from current demand)...
Zoom is the only easy to use videoconferencing tool I have found that can do breakout rooms. Mediation is, by law, a confidential process.
From the ConsumerReports article: "Videos aren't off-limits, according to the document, and neither are transcripts that can be generated automatically, the documents you share on your screen, or the names of everyone on a call."
In recommending that my clients use Zoom, am I violating my ethical and legal requirements? Is Zoom breaking the law?
Also, at my work we use zoom for everything. It is a powerful software that we love.
I have used Skype, webex, hangout meet, gotomeeting, various other entirely web based ones and none come close to the reliability that Zoom provides. No wonder it's getting adopted like crazy.
Kudos to them for handling this traffic with absolutely no visible hiccups.
Anyone know what that permission is even about?
I think it's amazing how zoom became so popular recently. It's even been approved to be used for Passover Seder dinner by some Rabbis :)
It also very popular in academia and reminds me of Dropbox. When I was a student everyone around me used Dropbox. They developed a great product which competes with Google and other giants. But those were all unpaid users and eventually Dropbox moved their focus to Enterprise. Zoom will soon be in a similar situation.
https://d24cgw3uvb9a9h.cloudfront.net/static/40580/doc/Zoom-...
Is Zoom really the best? No other comparable platform out there?
Anyone know how difficult it would be to build something like it on top of aws or a similar cloud?
In terms of actual reliable video/audio experience. When evaluating platforms, other videoconferencing solutions simply suffered quality issues more -- taking longer to start, glitches, latency, pausing, echo, and so on.
Also, the hard part isn't building 1-1 video chat. It's having it work with 20 or 200 separate participants.
I have no idea why they're better except that building reliable audio-video at scale turns out to be a really hard problem, and they seemed to focus their engineering on that specifically.
Kind of like file sync was really unreliable until Dropbox decided to focus on building a sync tool that actually "just worked". Same philosophy. Zoom is the Dropbox of videoconferencing.
Companies have been trying to build the perfect video chat system for about 30 years. Companies with tens of billions of dollars in cash and more in stock. Almost all of them suck in various ways.
You can stream one audio+video to one person, and you can stream it to multiple people. But then do multiple duplex audio+video streams to multiple people, on multiple platforms, with low CPU, memory, and bandwidth requirements, with user controls, recording, chat, screen sharing, drawing, and 50 other features. Get 49 of them right, and the 50th feature will suck, and your users will hate it and be ready to move to a different product. I think it's one of the most complex user applications that exists.
Then consider that contention is terrible for real time and you would want dedicated instances.
I don't know the zoom architecture, but I doubt they could scale so fast without lots of cloud. I think they have an enormous bill, which they are using capital to pay for because they are becoming a household name.
And that university chooses to use Zoom over another solution for many reason - after-sales support, SLAs for performance and availability, pre-written API integrations for their CMS and student ID system, guarantees from their sales team about regulatory compliance, and the like.
Just to clarify - the zoom room is not mine. We are using it across a group of like 10, for a group meetings - sometimes all of us, sometimes subgroups, sometimes one on one.
I can not imagine a world where a company would do that, but given the recent events, I am not ruling out this level of creepines.
Zoom?
Objection - best advertised (or should I say "best" advertised) doesn't equal best. I'd be truly surprised if somebody actually presented convincing arguments that Zoom service is better than anybody else.
Webex addresses are stupid by comparison.
I don’t like this Facebook crap but otherwise Zoom is pretty slick.
https://www.vice.com/en_au/article/z3b745/zoom-removes-code-...
Of those, I tried whereby.com yesterday and was blown away. It just works with zero downloads in any browser, including mobile, and is very high quality. From my brief usage, I highly recommend it for small teams.
Zoom is as good as video can be in 2020. Google may be on parity, but tools like WebX are laughably inferior.
It's like WTF, another contender for this throne? Sigh.
However, I would also like to know if there's more to it. Do they do any server side transcoding? Do they get an advantage by having multiple backend servers connected through good links, having clients connected to the nearest one and routing efficiently through their network? It appears that they use(d) H264 as their codec, are there some technical tricks they use to cope with variable bandwidth (do they use scalable video coding or simulcast)?
That’s how your comment reads. The fact that it’s worth so much is almost completely irrelevant, and if anything, should mean they have more responsibility to do the right thing.
If it's a real problem, go sue them. Do you need a Havard op ed to tell you?
One that has been a total game changer for my company is when I'm hosting a conference call, I can simply "Invite by Phone" my participants. They get a phone call, are prompted to "Press 1 to enter the conference", and boom they're in. It's drastically reduced people fumbling around with phone numbers + participant codes, ending up in the wrong meeting, or getting stuck in some unnecessary software install loop. If someone is more than two minutes late, they're getting a phone call that brings them instantly into the meeting.
Also a really nice feature, again for phone conferences, is when people dial-in I see their phone number handle in the UI. But during the call as they introduce themselves or I look up their number, I can then rename their user to something recognizable. Now if I'm on a call with 5 people at another firm, I appear really impressive because I know who each person is by their name. When someone is speaking on the conference call, their icon lights up. If someone has a ton of background noise I can easily mute them.
Zoom Phone (addl paid feature) is awesome too. Virtual phone numbers, IVR, call routing, busy hours, I can instantly turn a 1:1 conversation into a zoom meeting that other people can join, etc. Zoom Phone works on my iphone like a regular dialer, and I can place/receive fully digital calls on it (pretty similar to how Google Voice works), so it doesn't matter if I have actual cell service.
I've never used Microsoft Teams, and does look really snazzy, but Zoom is an absolute joy to use compared to every single other conferencing software I have ever used. The video chat and screensharing is fast and responsive and just works exactly like you would expect it to.
Teams sorta works, though it often messes up with devices. Headsets and speakers (I've got a Jabra speak 710). Often times it handles contention badly.
Skype ... yeah. The less said the better.
Webex. Must be marketing for Zoom and others, given how unreservedly horrible the UX is.
I've also used uberconference some years ago. Almost as good as zoom.
I am looking at containerized ways to run zoom to restrict its access to my system, but it is the best IMO, by far.
[edit] I should note that I've also used Viber a bit. Less now though. Mostly for calling home from overseas. Not great for conferencing though.
Does it?
Asking because I just left a zoom meeting with horrible sound quality and extremely bad video quality. Why would anyone prefer that to Teams is beyond me.
Edit: interesting this is _heavily_ downvoted. Can't a person have a bad experience and tell HN about it?
Not necessarily, no. It's downvoted because it's one low-evidence anecdote amidst comments from people who've been using it daily (two years, here). That doesn't mean it didn't happen, but without supporting evidence it's difficult to find relevance in a single poor call.
Some basic evidentiary questions for you to consider, that would help distinguish between "someone's Internet was broken" (more likely) and "Zoom is defective" (less likely), for example:
1) Was only one participant experiencing issues, or were all participants blurry? Did Zoom warn you that of connection instability? Did Zoom show yellow or red connection status bars for the affected participant(s)?
2) Does your (or their) Internet connection show instability such as high latency (Bufferbloat) when performing a speed test capable of measuring and reporting latency-under-load fluctuations? https://dslreports.com/speedtest
3) Did the sound quality issue involving one or more participants who were not using in-ear or over-ear headphones?
4) Was the sound quality issue reproducible in a followup call for testing? Was it reproducible using "call in by phone" audio rather than "internet" audio for testing?
EDIT:
5) If you stop sharing your video, does the problem improve? If you activate screen sharing, does the problem worsen?
I can say Zoom is way the hell better than: Slack/Screenhero, TeamViewer, join.me, GoToMeeting, WebEx, Skype, Google Hangouts, BlueJeans, ugh the list goes on over the past years.
https://www.ringcentral.com/whyringcentral/company/pressrele...
1 of the 2 big cell phone networks we have: Rogers, is regularly failing to connect calls during peak hours for the past week. Being able to do digital calls has changed a lot, and probably took a load off their network.
(I say 2 big networks because Bell and Telus share tower infrastructure, Dunno where it separates out again, possibly just billing.)
Contention on uberconference is MUCH worse when two people are speaking. You get that weird halting sorry I spoke on top of you effect.
WebEx always took a while to on-board.
Jitsi Meet has this feature
Why on earth are people needing to make POTS phone calls to join a meeting? Not only is the audio of vastly inferior quality, the information isn't being kept secure AND they can't see anything being presented.
Instead, why not shoot them a link so they can just click it and be in the meeting? That's how it SHOULD work, but that's not how it DOES work with Zoom (unless you engage in tomfoolery to make like you're trying but failing to install the software, and only then do you get a link to join via browser — but then then you get a deliberately-crippled experience because fuck you).
If some of you 10x programmers would go on a Mission from God and get it going that would be super cool.
It is quite possibly the simplest videoconferencing I have ever experienced (Google Hangouts, BlueJeans, Skype for Business and Microsoft Teams being my experience.) I like the Teams experience but the simplicity of just copying an URL from that Jitsi Meet page and having it work within a minute of 5 elderly non-technophile users receiving it in their emails is incredible.
Just looked it up. Seems to be Chrome only. As a Safari and Firefox user, that ends my decision-making tree with two clicks.
You don't need chrome though, chromium should be enough.
https://www.cnbc.com/2019/03/26/zoom-key-profit-driver-ahead...
Look at the top of page 21 of their sec submission. https://www.sec.gov/Archives/edgar/data/1585521/000119312519...