Zoom is now critical infrastructure – that’s a concern
brookings.edu
brookings.edu
And "when Zoom goes down, teachers can’t teach"? Come on. I am a college professor. In my class this fall I met my students on Blackboard on Day 1 and Zoom on Day 2. If one of them goes down for the day, we'll switch to the other.
Also, their employees probably have smartphones.
Of the many potential problems six year olds accessing education primarily through webconferencing may face, I'm not sure inability to choose their own preferred videoconferencing service is high up the list, and I doubt Zoom servers have more outages than their home internet and wifi...
Periodically losing connectivity is an occupational hazard of doing things with webconferencing made worse if the people at each end aren't particularly computer literate. But I'm not sure Zoom lockin ranks high on the list of threats to kids' education right now.
And the reality is Zoom is much easier to switch away from if and when its outages are more than temporary inconveniences.
Look elsewhere for work of this is your actual existence.
If this is just some off the cuff anecdote, meh. Stick to real problems not made up ones thanks to hands off clueless management edge cases
In the long view, the younger teachers are more able to learn the new technologies and switch new technologies. But we have to support the professors that are 5 years from retirement now.
I think it's for real. Think about elementary school instead. The kids are just learning to use computers. Their parents may be also, and if not they may be trying to do their own work from home while the kids are in class. There are many low-income and/or ESL families. Even the teachers aren't tech experts.
In my son's kindergarten class, everyone got school-supplied Chromebooks. They all have Google accounts for Google Classroom. That probably means they could switch to Google Hangouts Meet, but it wouldn't be smooth. They'd at least miss a day, and subsequent days would be rocky. The teacher has invested a lot of effort just in teaching the kids how to mute and unmute themselves without waiting for their grown-up to help, and they'd have to go through that again with a different UI.
This view is generally antithetical to innovation. Even if everyone already knows how to use Microsoft Office, it can and should be replaced if better software comes along.
It's only when a central single point of failure is introduced does critical infrastructure become ticking time bomb.
An open source peer to peer zoom would reduce such risk - and any sensible government would find that - cries of private business be damned
And if updates are disabled (or MS goes away), we can add yet-to-be-discovered security flaws to the mix.
Neither of these would impact all (or maybe even most) users, but I think it'd impact enough to make a dent. In contrast, Office 365 is probably less susceptible to such flaws, trading them for others.
Is "critical infrastructure" some sort of official US Government designation? What automatically happens in response to this designation?
Note that:
* I only said teachers sometimes can't teach when it's down—a claim of fact, not any suggestion of how it should be handled.
* The article's only extension of that is "Organizations that rely on video conferencing—and today, that’s most organizations—would be well served to put backup plans in place to minimize the disruption from future Zoom outages."
> This view is generally antithetical to innovation. Even if everyone already knows how to use Microsoft Office, it can and should be replaced if better software comes along.
I think you're suggesting calling Zoom "critical infrastructure" means it can't be replaced if a clearly superior video conferencing product is available? I disagree. In fact, it'd be reasonable to say this means it _should_ be replaced if Zoom can't give rock-solid reliability SLOs.
But the article goes a step further and says that Zoom specifically is of critical importance. I don't think this is true. Zoom is a brand, not a unique technology. If they suddenly made everyone pay $50/day, the world would switch to alternatives very quickly.
It's not all of them, and it may not even be most of them...but it's enough that I spend a decent amount of time handling it. Of course that's part of why I get paid so I'm not really complaining--more just surprised at times.
* Most kindergarteners are illiterate and innumerate. That alone severely limits their ability to quickly navigate an unfamiliar, complex UI, much less the extensive number of relevant abstract concepts and references they've yet to learn about.
* I've never bought into the "you can't teach an old dog new tricks" mentality, especially when simultaneously discarding the value of transferable experience. My senior-citizen parents know how to use iPads just fine, thank you. My dad started programming in the punch card days and has at least used computers almost every day since; don't you think there's some relevance to more modern computers?
If Zoom goes down, so long as there’s some other service, the teacher can send out URLs to the class via emails, and people should be able to get setup quite easily, and help each other out. There will be some corner cases which will involves a bit more of a struggle, but it should be relatively smooth (easier than the first time around).
I'm already sad about the time my son is spending learning about video chat etiquette instead of in-person etiquette or reading and math. Even as an ex-SRE who likes to be n+1 on many things, I can't get excited about kindergarteners spending extra time learning _another_ app. Packaging it as an essential learning experience about vendor lock-in isn't going to change that.
Perhaps I should add that, this past spring, I had a day where Blackboard failed on me, and where I lacked the presence of mind to think of a good Plan B on the spot. To my embarrassment, I ended up cancelling the lecture. That experience is why I thought to plan ahead this time.
When Zoom goes down, certainly we should expect some disruptions. As you say, some will be more serious than what I dealt with. But "critical infrastructure" still strikes me as a bit much.
I don't have kids, but my coworkers do and the ensuing aftermath was not pretty. Beyond the obvious, sometimes just making a parent to move to another platform that they just mastered ( because it is not just kids ) can be challenging. Heavens know if it happened to me, I would question move from say Zoom to FB messenger/duo/we..
The main enabler for this is that apparently the school considered something like this happening and actually trained the teachers for such event.
That's great for college. Not every educational experience is in a college with a big fat IT department to support it.
Think elementary and secondary schools. According to the newspapers this week, the school district where I live has 27,000 students unable to get computers to go online because there simply aren't affordable, or sometimes ANY, computers available for either the parents or the district to buy.
Another 20,000 have no internet access, so the school district rolls out hotspots on school buses each day to the worst-affected neighborhoods.
Do you really think tens of thousands of students will have no problem switching from one piece of software to another? Let alone the millions of ESL and low-literacy parents and students across the nation.
But once you're there lock-in is pretty minimal because joining a class is just "click the link the teacher sent out this morning."
Did you hear about network effect?
Some of the conference tools need/want a client or a specific browser, so there's some amount of benefit from already having used it, so you don't need to install it, but not a whole lot.
That considered, at least in principle, it shouldn't be that hard for a competitor.
It helped also that there were native apps and fwiw the web conf quality is good.
But ya the ux is terrible. I think they are holding up a release of the web sdk that lets you configure ui to give product time to catch up.
It somehow disappeared from communal memory, but before Zoom, it was common for the first 10 minutes on any group skype/hangout/webex/gotomeeting call to be all about making sure everyone is heard and seen.
And with Zoom, it went down to an acceptable 1-2 minutes or so. Others have slightly improved their game since, but not much -- I still occasionally get Meet/Hangout invites for work and there's often problems, mostly related to authorization/authentication and occasionally video/audio feed.
Zoom is bad. But all the competition is still worse (and used to be much worse just a few months ago).
This does NOT come without cost - e.g. their MacOS "just works" setup was incredibly broken from a security perspective, to the point that apple pushed an OS update to block it. But people don't care - convenience consistently trumps security in any mass market system.
Google Hangouts/Meet invariably slows down my whole machine and causes the laptop fans to spin up. Zoom never does that. And the video streams in Zoom have higher quality to boot.
I feel that jitsi for some unbeknownst reason is ignored in favour of zoom, but don't understand why.
Also, Zoom's network effect. A lot of people simply aren't aware of jitsi.
* Do most teachers and/or students have sufficient upload capacity to send n-1 copies of their video stream in an n-person chat? (A 20-person chat might be typical for a K12 classroom.)
* Is it possible to do multicast across the Internet?
I assert the answer to both questions is "no", so all the video streams need to go through a server/reflector. You're suggesting that self-hosting; a follow-up question:
* Does your average school district have the bandwidth for simultaneous duplex video streams for every student and teacher?
* Would they be able to acquire this bandwidth quickly?
Also no.
I've never used jitsi and don't know if there are other problems, but this one's a dealbreaker anyway.
I don't think that's true of video-conferencing either. Zoom is probably the most popular (and technically superior), but there is also: Microsoft Teams, Webex, Google Meet, Slack, and many others, including open source options like Jitsi. And they all pretty much do the job.
The phone app is great too. You can setup a room that people can jump in and out of, which is pretty convenient.
If you're looking for that office feel for your small team, then Jitsi might be worth a shot.
And, I think you can host your own server if you'd like to!
I'm no Zoom fan, but in the Zoom meeting I had this morning with 38 people my 2015 MacBook Pro's processor peaked at 11%.
Zoom knows how to do something better than the other companies. They really need to catch up.
Wasting CPU/heat is a different problem.
If the latter, and you're using X, it should be possible to write a program that takes the selection buffer and provides a different response to each SelectionRequest in turn, letting you walk through a script pasting a command at a time without having to leave the current window. I don't know whether such a thing already exists.
I had a videoconference with some Apple people this month, and they were all on WebEx.
Maybe there's a reason. I couldn't tell you. My company is a hodgepodge of Zoom, Teams, BlueJeans, and who knows what else.
At the same time, outside of work, I was videocalling people on Skype, and my wife had classes delivered via Zoom.
How do corporations even allow access for this particular features?
I'm not concerned about Zoom monopoly at all.
Mostly they were using a 3rd party solution like webx/zoom/etc but one doctor (automated in an online form) noticed his number was tied to iMessage and offered to just FaceTime him at his appointment time. Super easy for him (at 94) to self-manage vs any other solution where we (my mother or myself) need to be around to set things up for him.
Not sure how they are doing this exactly, if this is something Apple specifically enabled for healthcare or whatever, but its a fantastic experience.
Whatever solution they were using did have an "no I have an android and a 'use my computer' option" not sure what path they led down.
Apple is probably doing more harm than good at this point for themselves by keeping iMessage/FaceTime so locked down to their hardware since their revenue stream is trending more towards services and less weighted in hardware.
Apple could easily open up Facetime and iMessage, and they've evaluated doing exactly this, but they ultimately determined that keeping these pieces of communication software exclusive to Apple devices is a big part of why the devices themselves are so sticky.
I can call my doctor using any phone I like, and E-mail her using any E-mail client I like. It is beyond unreasonable to require a patient to install specific client software in order to access care.
Zoom is still better, but Teams now seems "good enough" to me.
Like any mission critical infrastructure, it's up to organizations to have some redundancy. Nothing new.
The industrial revolution and all of its consequences may not have been exclusively a disaster for the human race, and I personally don’t share Bill Joy’s fears of mass extinction https://www.wired.com/2000/04/joy-2/, but proprietary software can cause serious problems for members of the human race and they should have a right to choose not to “use” it. Doesn’t the US Constitution support the Amish’s right to abstain from the power grid, etc.?
The Federal Source Code Policy should revert from requiring 20% of software written with forcibly extracted public money to be free to 100% as it was when open for public comment.
Any software that the public is forced to use, fund, or through network effects promote, the public should be able to audit and control. Windows is explicitly banned from the ISS. The lowly common people down here deserve a fraction of that privilege.
Sounds like you should agree with this petition: https://publiccode.eu (all publicly funded software must be public).
The US government did.
The government is the only organization "allowed" to use physical violence against anyone it wants to.
The author raises many valid points, but I think the logical conclusion of his points condemns the US legal system more than it does zoom.
Author: Having to agree to a contract with a private company in order to access public services is immediately objectionable.
Me: I agree! But unlike the US Government, Zoom doesn't make threats of violence against people that don't want to use it's services.
Author: Second, for the state to require use of Zoom is for it to promote and subsidize that company.
Me: I agree! The but the state wouldn't even BE ABLE to subsidize Zoom if it didn't first threaten me with violence in order to take a large fraction of my money.
for those unaware, this is based from the first line from Ted Kaczynski's "Unabomber Manifesto", which starts with "The Industrial Revolution and its consequences have been a disaster for the human race".
It's actually an interesting read, that is... as long as you don't feel hostility towards rebelious literature: https://www.washingtonpost.com/wp-srv/national/longterm/unab...
"Many leftists have an intense identification with the problems of groups that have an image of being weak (women), defeated (American Indians), repellent (homosexuals) or otherwise inferior. The leftists themselves feel that these groups are inferior. They would never admit to themselves that they have such feelings, but it is precisely because they do see these groups as inferior that they identify with their problems. (We do not mean to suggest that women, Indians, etc. ARE inferior; we are only making a point about leftist psychology.)"
What I find most bizarre is why zoom is on top, this is probably a lesson in how powerful marketing and timing can be for some types of products... But as a counter example: everyone at my company has ended up using google meets, just because through trial and error it fails the least and is the easiest for everyone to get into.
The last time I tried zoom for an external meeting and it was a nightmare, it felt like I had to jump through 10 hoops just to get into the frickin meeting, and even then 4/5 people couldn't get it to pick up their microphone through the browser API.
No, it's a lesson in how powerful "just working" works.
Marketing and timing can still have everything to do with their success btw, even if they had a 9 year run up.
It's not "just video calls". It's nonfree software belonging to a large for-profit company with huge power of developers over users. It will not end well. It's not the first time it happens. https://www.gnu.org/philosophy/free-software-even-more-impor...
If jitsi scaled just as well as zoom and used the same amount of client-side resources, nearly everyone would use that instead. There's nothing to install so people would barely even know hey were using a platform
If Zoom fails at being a product, people will move away.
Literally. As in being evicted from their home: https://www.fsf.org/bulletin/2020/spring/trial-by-proprietar...
In terms of access to the legal system, being able to phone it in at home or get to any public library is actually doing a lot better than the status quo where you have to take off work to appear downtown.
They have accessibility and access and all these baked into the design AFAIK. I don't understand why American govs have such a hard time on this. Some are larger than the UK and have problems!
The US is not. A federalized system means that various components work mostly separately from one another. A county court has sharply limited resources, and no ability to ask the federal government to send it a cadre of web developers. The state it's in may not provide a ton of resources for such things at the county level either.
The actual question here that may wind up a big deal is if a Zoom hearing is the equivalent of a physical one. If it is, failing to show up means forfeiting the right to be heard. Whether it's Jitsi instead might not be a substantive difference.
I think at work we have three IT-approved solutions: Zoom, Meet, and Slack calls (which are admittedly much more limited).
> organizations aren’t going to want to pay for licenses to non-Zoom videoconferencing platforms that they may rarely or never need.
Yeah..so what does this have to do with Zoom? If my organization refuses to pay for anything but Meet we have the exact same issue.
In the short term, it is critical infrastructure. Take Zoom offline permanently, tomorrow, and let us see how the world will handle it. It would find alternatives, and competitors would fill the void, but it would undeniably cause massive disruptions to industries and education. There isn't much of a failover right now for video calling - people have put their eggs in one proprietary basket with no backup plan.
I mean that's a bit of stretch. I work for a company that uses primarily Cisco Jabber (absolutely god awful, atrocious piece of software), but we also interact with folks using Microsoft Teams, Webex, Slack, Skype, join.me, etc. There are no shortage of video conferencing platforms.
I feel pretty certain there was coordination from our Microsoft account manager and Microsoft's PR team on this front.
The funny part is that Skype is famous for zero days while zoom is famous for people running pseudo public non-password protected conference calls that got invaded by teenagers.
Not that MS isn’t shady, dishonest, or even a deep state tool of oppression (in light of the Snowden leaks, and at least in some people’s view Github’s ICE contract).
What I think the article is pointing out is that when Zoom goes down, schools can't teach. And that's true. I think this is indicative of a usability / coordination / culture problem of missing fallbacks. For example, when Zoom goes down a teacher (at least to my knowledge) can't/won't quickly email out a "Hey class, Zoom is down so here is the Google meet link for today".
However, this is true of many technologies (if gmail is down I'm not getting email, if slack is down I'm not reading messages, and if Github is down I'm not pushing code). I think the larger problem is HOW MANY institutions it's a critical point of failure for. If Zoom goes down, our courts largely pause, our education largely pauses, our economy largely pauses, etc. The same is not true of Github or Gmail. In this regard it's closer to a powergrid failure.
This should go away as verticalized solutions and fallbacks appear (leading to broader diversity, where not all courts use the same platform), but I think the key things to think about until then are:
1. Is there anything Zoom could do to create stronger network effects (https://ayushsood.com/zooms-missing-platform/) preventing new entrants from entering the market? 2. If they did those things, how could we respond to ensure Zoom's incumbent position didn't allow them to prevent new entrants? An old-internet answer would be to centralize the key nodes, effectively utilitize them, and then allow anyone to make a platform that connects to them (i.e. AT&T doesn't own telephony, DNS' don't own the internet, Gmail doesn't own email).
I'm not sure how likely this is given (1) we're moving towards centralization generally (2) the importance of performance in video streaming. Any abstraction creates overhead, and that might be a critical failure to open standards in the video streaming space.
I used like 5 different services in the last 7 months and all worked reasonably well.
This fixation on Zoom really mystifies me. A couple months ago trolls were wandering around in Zoom conferences, recording things and interfering, making headlines. I would have thought users would abandon this open wound immediately for any of a plethora of alternatives, but for some reason they're dogmatically faithful.
Somehow Zoom appears exempt from confidentiality or privacy concerns, even among corporate and government users. Have all the lawyers vanished with the appearance of COVID-19?
Dynamically change video quality to fit in the bandwidth, work correctly with a hundred different types of webcam, do echo cancellation, and wrap the whole thing up with a simple UI. Echo cancellation by itself is a hard problem.
The low-friction nature of jumping on a Zoom call with a meeting code and PIN dominates security concerns. In fact, this phrase I've heard people use, "jump on a Zoom," indicates that the speaker expects it to be easy and fast to start the call.
Hopefully it's still possible to develop something that's both secure and convenient. But I fear there's no economic incentive to do it.
Moreover, I find it somewhat strange that he's referring to Zoom as "critical infrastructure" instead of the major cloud providers like AWS or Azure. If Zoom goes down, it's an inconvenience to many. If AWS or Azure goes down, many business just stop functioning. Heck, many government departments might stop functioning, given how government infrastructure has been moving to "the cloud".
Gmail dominates e-mail in a similar matter.
And remember just a year ago barely anyone had even heard of Zoom -- there's still Google Meet, Microsoft Teams, FaceTime, Skype...
This piece feels like it's trying to stir up worry over nothing. Yes, critical business software tends to have outages once or twice a year. But no, Zoom doesn't appear to be any obviously better or worse than the competition.
A future Zoom-killer app would need to provide that much better service.
In Webex I can either send someone the link to my personal room or I can schedule a meeting via Outlook (with a Webex plugin)or the Webex app.
With Zoom I can either start a meeting with my personal meeting ID or I can schedule a meeting via Outlook (with a Zoom plugin) or the Zoom app.
Inside both there are buttons to turn on/off mic, camera, change settings of those things, share the screen, and if I am the host, I can assign various privileges or revoke them.
I haven't used Lync in years so I have no idea what that's like, but from what I've seen, Webex and Zoom are basically in a back and forth to add the handful of minor features they're missing compared to the other. Zoom has been improving security options and defaults. Webex added virtual backgrounds and is about to add breakout rooms.
I understand that there are bigger differences in enterprise license options and backend, but for users they seem like similar-looking fraternal twins.
1. One click meeting starts w/ a simple URL
2. One click meeting joins w/ a simple URL
3. Standing reservation-less room with a URL to remove the hassle of booked by 15-minute segments that WebEx wanted
As for Lync, not sure where to start. There are times 3 or 4 years ago when you were lucky to be able to log in. Their auth was a mess and if -- God forbid -- you had a legacy Skype or legacy Microsoft account, there were strange auth/password reset loops where accessing your account was virtually impossible. You'll find plenty of discussion online about people who suddenly found themselves shut out of a decade-old Skype account because their Skype email was somehow mal-merged into a Microsoft account. I was similarly trapped in this endless loop of auth issues and gave up entirely on Lync.
The pandemic has significantly increased an already high level of data collection. Does anyone think government should have a role in regulation?
Author: A single California-based company, Zoom, is now the foundation for education access from elementary school up through graduate school.
Me: Hah. The 'foundation' for education for the last 100 years has been the US Government, which exerts so much power over the entire system.
Author: Another challenge is that Zoom is a relatively young company (founded in 2011) that has experienced some security-related growing pains.
Me: The US Gov. has experienced security-related growing pains, but at least Zoom doesn't kill tens of thousands of people around the world every year.
Author: In March 2020, the company was widely criticized for a dubious claim that it supported end-to-end encryption for videoconferences.
Me: At least Zoom doesn't have a track record of spending billions of dollars to subvert encryption technology, wiretap hundreds of millions of people, and then lies about it.
Author: There are plenty of alternatives to Zoom, including Skype, Webex, and GoToMeeting. The challenge of course, is that Zoom has benefited from an enormous network effect.
Me: Oh how I wish there were a less-violent alternative to the US Government. At least Zoom cannot enforce it's monopoly of certain services with violence and billions of dollars of money
The US Government is pretty impervious to change. For example, people still get arrested for smoking weed. Most o America supports decriminalizing weed.
Why is it still illegal? Shouldn't the government enact policies that most of America agrees with?
I mean... don't most of us agree that if a private company were doing any of this stuff, they would lose all their customers ASAP:
- https://arstechnica.com/tech-policy/2016/09/judge-child-porn...
- https://www.reddit.com/r/baltimore/comments/5jt6k0/where_the...
- https://www.thedenverchannel.com/news/crime/sterling-correct...
- https://www.aufamily.com/forums/topic/156988-obama-nsa-discl...
- https://reason.com/2017/04/25/a-man-died-in-jail-after-getti...
- https://www.washingtonpost.com/lifestyle/magazine/what-happe...
I believe the burden of proof is on someone who thinks the US Government is a good representative of it's people.
I didn't say the system was fair, but it's still not a fair to compare a private company to how a government is supposed to function. Governments enforce laws and provide public services. You want things to change? vote for it.
Tell us more?
These two things as a common toolkit would accelerate offerings that could decentralize the marketplace. I've seen jitsi offerings (scalable setup isn't as straightforward last I checked which admittedly was a long time ago), twilio (still someone else's servers), etc. I'm sure these toolkits are being worked on (heck I'm working on one), it just takes a bit of time for the players to catch up in a market that exploded overnight.
Blows my mind how quickly people accepted the product into their organizations. Zoom Phone... no thank you.
it looks relatively straightforward, and seems to me like most tech companies (and some university IT departments) could pretty easily build internal conferencing stuff on top of it if they cared to.
its quite funny if you think about it