Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm seeing references to Zoom "getting over these security issues". Some of the issues (e.g. not requiring passwords) can be relatively easily addressed. Others, like transmitting symmetric encryption keys over the wire and storing them in databases in China, are more fundamental to Zoom's corporate strategy. I doubt Zoom would change the most jarring of their security gaffes in a way that would satisfy security-focused companies like Google.


It seems to me Zoom follows the "dont ask for permission, ask for forgiveness later" model. You don't accidentally send data to China. Zero excuse.


Not sure why this is getting downvoted. I totally agree.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: