Hacker News Reader

I'd argue that focus on Zoom's security is important now more than ever, precisely because so many people are now using the service.

And to be fair, having a 32-char password limit, and silently truncating passwords to that limit, are both pretty poor practise - especially nowadays, we just shouldn't be seeing flaws like this.

View on HN

The existence of zoom is saving lives. Outrage against zoom is misplaced.

Sorry, I think this product-worship is misplaced. Calling out security flaws does not mean you are "hating" on Zoom.

Furthermore, if you want Zoom to keep being beneficial, it's important that there is a focus on finding and fixing security flaws. How many lives is it going to save if attackers can use it as a springboard for malware, or if they can bomb into government or NGO meetings?

Calling out a major security flaw would make sense. Calling out clickbait security flaws like 32 bit password truncation in the context of a global pandemic is ridiculous. Zoom will fix things, but there is no better platform to host large, interactive events than zoom.

It's healthy to call out the flaws in products that you use and like.

Ideally the flaws get fixed, and you end up not having to compromise.

Reply on news.ycombinator.com