Expert Pitch
University of Notre Dame

Zoom should be criticized for poor communication rather than privacy, security, Notre Dame expert says

9-Apr-2020 1:20 PM EDT, by University of Notre Dame

The video platform Zoom has experienced overnight success with offices and schools closed around the world due to the coronavirus pandemic. The increased usage has resulted in a string of security concerns, which, according to a University of Notre Dame cybersecurity and privacy expert, have largely been blown out of proportion.

Zoom is not dealing with a security and privacy crisis, it’s facing a communication and transparency crisis, according to Mike Chapple, associate teaching professor of IT, analytics and operations at Notre Dame’s Mendoza College of Business.

“Zoom’s recent privacy and security issues aren’t any more significant than those facing any other tech company, and Zoom has quickly moved to correct each one of them,” said Chapple, a former computer scientist with the National Security Agency. “The challenge Zoom faces is that they were a specialized niche company that was suddenly thrust into the role of a critical infrastructure provider overnight and they simply weren’t ready for the intense level of scrutiny that they’ve received as a result.”

Perhaps the most publicized of Zoom’s woes is the practice of ‘Zoombombing’ where people join unsecured Zoom calls and disrupt private conversations.

“These aren’t the result of a security flaw in Zoom,” Chapple explained. “Zoombombing occurs when people either don’t use a password to secure their Zoom meeting or give out the password on a public forum. You can protect yourself against this by following some simple best practices, such as not publishing your meeting password, using a waiting room to control access to your meeting and restricting screen sharing.”

Zoom also has been criticized for not offering end-to-end encryption for videoconferences, an approach Chapple says most people never use.

“It’s true that Zoom doesn’t offer this level of encryption,” Chapple said. “That’s because it’s technically very difficult to do so. Look at the other major videoconferencing providers. Skype, Microsoft Teams and BlueJeans don’t offer end-to-end encryption either. It’s simply not a reasonable security expectation. Cisco WebEx does offer an end-to-end encryption option, but choosing that option disables major features of the platform, including the ability to record a meeting.

Chapple points out that Zoom did make a major mistake in this area by publishing a false claim that the service supported end-to-end encryption. They’ve since apologized and published a technical description of exactly how their encryption works.

There also have been reports of Zoom video recordings appearing on public websites and cloud storage services, but Chapple says there is no indication this was Zoom’s doing.

“Zoom offers a recording feature to meeting hosts and discloses to all participants when a meeting is being recorded,” he said. “At the end of the meeting, the host gets a copy of the video file. If they post it on an open forum, it’s not reasonable to hold Zoom accountable for the meeting host’s actions.”

While researchers have identified a few security flaws in Zoom’s technology over the past few weeks, Chapple says that’s not unexpected for a platform suddenly thrust into the spotlight.

“The reality is that every software product has critical security flaws that we simply haven’t discovered yet,” he said. “Zoom reacted to each one of these with a patch that corrected the problem. That’s what any responsible technology company would do.”

Where Zoom really failed, according to Chapple, is with their pre-pandemic privacy policy.

“It contained some truly awful terms and conditions that basically granted the company the right to access private meeting information. After some scathing public criticism, Zoom revised their privacy policy to align with industry best practices.

"If you’re worried about the privacy and security issues at Zoom, don’t use the service. Personally, I’ve found Zoom to be a crucial part of my ability to teach and work from home. I’m comfortable that they’re focusing on correcting security issues quickly and have built a platform that is scalable, reliable, and secure.”

Filters close

Showing results

110 of 5575
Released: 6-May-2021 4:20 PM EDT
How to Win Over Vaccine Skeptics: Live Expert Panel for May 20, 3pm ET

How to Win Over Vaccine Skeptics: Live Expert Panel for May 20, 3pm ET

Released: 6-May-2021 2:15 PM EDT
Review of the Emerging Evidence Demonstrating the Efficacy of Ivermectin in the Prophylaxis and Treatment of COVID-19
Front Line COVID-19 Critical Care Alliance (FLCCC Alliance)

After the Most Comprehensive Review to Date, a Panel of Leading Medical Experts Conclude that Ivermectin Should be Systematically and Globally Adopted for the Prevention and Treatment of COVID-19

Released: 6-May-2021 2:10 PM EDT
Mayo Clinic


Newswise: CSUCIVaxClinic4-29-21.JPG
Released: 6-May-2021 2:05 PM EDT
CSU Expands Vaccine Availability with New Partnerships
California State University (CSU) Chancellor's Office

Many CSU campuses now offer even more options for students and employees to get their COVID-19 shots, thanks to unique partnerships with national pharmacies and local hospitals.

Released: 6-May-2021 1:50 PM EDT
الأطفال أيضًا يواجهون آثارًا طويلة المدى لفيروس كورونا المستجد (كوفيد-19)
Mayo Clinic

مدينة روتشستر، ولاية مينيسوتا ― تؤثر الآثار طويلة المدى لعدوى فيروس كورونا المستجد (كوفيد-19) على صحة بعض الأطفال والمراهقين، وكذا البالغين. في حين أن معظم الأطفال المصابين بعدوى فيروس كورونا المستجد (كوفيد-19) يعانون من أعراض خفيفة أو لا تظهر عليهم أي أعراض على الإطلاق، فإن أي شخص أصيب بفيروس كورونا المستجد (كوفيد-19) - حتى لو كان المرض خفيفًا أو لم تظهر عليه أعراض - قد يُصاب بآثار طويلة المدى.

Released: 6-May-2021 1:35 PM EDT
As crianças também enfrentam efeitos de longo prazo da COVID-19
Mayo Clinic

Os efeitos de longo prazo da infecção por COVID-19 estão afetando a saúde de algumas crianças e adolescentes, bem como de adultos. Embora a maioria das crianças com infecção por COVID-19 tenha sintomas leves ou nenhum sintoma, qualquer pessoa que teve COVID-19, mesmo se leve ou sem sintomas, pode ter efeitos de longo prazo.

Newswise: Retired Nurse Returns to the Front Lines
Released: 6-May-2021 1:25 PM EDT
Retired Nurse Returns to the Front Lines
Rush University Medical Center

During the COVID-19 pandemic, Martha Kuhr, RN, came out of retirement to care for some of Rush University Medical Center's most severe COVID-19 patients in the CVICU.

Released: 6-May-2021 12:40 PM EDT
Achieving high COVID-19 vaccine coverage levels by summer can prevent millions of cases
CUNY Graduate School of Public Health and Health Policy

With around 30 percent of the U.S. population now fully vaccinated, the rate of daily vaccinations has started to slow, raising concerns that greater efforts and investments may be needed to reach higher coverage levels.

Released: 6-May-2021 12:30 PM EDT
Los niños también enfrentan los efectos a largo plazo de la COVID-19
Mayo Clinic

Los efectos a largo plazo de la infección por COVID-19 están repercutiendo en la salud de algunos niños y adolescentes, además de los adultos. Si bien la mayoría de los niños con infección por COVID-19 tienen síntomas leves o no tienen síntomas en absoluto, cualquier persona que haya tenido COVID-19 (incluso si la enfermedad fue leve o no tuvieron síntomas) puede tener efectos a largo plazo.

Showing results

110 of 5575