Connect with us

Apps

Are You Using Zoom For Calls? Here Are Some Security Tips

Published

on

With social distancing and quarantine measures implemented around the globe, people quickly started searching for effective means of communicating with each other. With its reported ease of use and attractive pricing, Zoom quickly rose in popularity. With so much use, Zoom’s flaws came rapidly to light.

The company handled the tremendous increase of workload seamlessly and quickly reacted to security researchers’ discoveries. However, just like with each and every service, code updates will not address every complaint, but some issues are very much worth keeping in mind. So, here are ten security and privacy tips for Zoom users. Keep in mind, that most of them apply to other video messengers too.

Protect Your Account
A Zoom account is just another account, and in setting yours up, you should apply the basics of account protection. Use a strong and unique password, and protect your account with two-factor authentication, which makes your account harder to hack and better protected, even if your account data leaks (though so far that hasn’t happened).

There’s at least one more Zoom-specific catch: After you register, in addition to your login and password you get a Personal Meeting ID. Avoid making it public. And because Zoom offers an option to create public meetings with your Personal Meeting ID (PMI), it’s quite easy to leak that ID. If you do, anyone who knows your PMI can join any meeting you host, so share this information prudently.

Use Your Work E-mail to Register with Zoom
glitch in Zoom causes the service to consider e-mails of the same domain — unless it’s a really common domain such as @gmail.com or @yahoo.com — as belonging to one company, and it shares their contact details with each member of that group. For example, that happened to users who registered Zoom accounts using e-mails ending with @yandex.kz, which is a public e-mail service in Kazakhstan, and it may happen again with e-mail addresses belonging to smaller public e-mail providers.

So, to register with Zoom, use your work e-mail. Sharing your work contact details with your real colleagues should not be a big deal. If you don’t have a work e-mail, use a burner account with a well-known public domain to keep your personal contact details private.

Don’t Fall for Fake Zoom Apps
As Kaspersky security researcher Denis Parinov discovered, this March the number of malicious files incorporating the names of popular video conference services (Webex, GoToMeeting, Zoom, and others) in their filenames had roughly tripled in comparison with the numbers he found month by month over the previous year.

That most likely means malefactors are ramping up their abuse based on the popularity of Zoom and other apps of its kind, trying to disguise malware as videoconference clients. It’s advised to use Zoom’s official website — zoom.us — to download Zoom safely for Mac and PC, and to go to the App Store or Google Play for the mobile versions.

Don’t Use Social Media to Share Conference Links
Sometimes you want to host public events, and in many places online events are the only type of public events available these days, so Zoom is attracting more and more people. But even if your event is truly open to everyone, you should avoid sharing the link on social media. Otherwise, there’s a chance that trolls can disrupt your meeting with offensive content, this phenomenon is now called Zoombombing.

Protect Every Meeting With a Password
Setting up a password for your meeting remains the best means of ensuring that only the people you want in your meeting can attend it. Recently Zoom turned password protection on by default, which is a good move. And like meeting links, meeting passwords should never appear on social media or other public channels, or your efforts to protect your call from trolls will be in vain.

Enable Waiting Room

Another setting that gives you more control over the meeting, is Waiting Room — recently enabled by default — makes participants wait in a “waiting room” until the host approves each one. That gives you the ability to control who joins your meeting, even if someone who wasn’t supposed to participate somehow got the password for it. It also lets you kick an unwanted person out of the meeting — and into the waiting room. We recommend leaving this box ticked.

Pay Attention to Screen-Sharing Features
Every normal videoconference app offers screen-sharing — the ability of one participant to show their screen to the others — and Zoom is no exception. Some settings that are worth keeping an eye on:

  • Limiting screen-sharing ability to the host or extending it to everyone on the call;
  • Letting multiple participants share screens simultaneously.

Stick with the Web Client if Possible
The various Zoom client apps have demonstrated a variety of flaws. Some versions let hackers access the device’s camera and microphone; others let websites add users to calls without their consent. Zoom was quick to fix the aforementioned problems, as well as other, similar ones, and it stopped sharing user data with Facebook and LinkedIn.

However, since this threat is possible, we recommend using Zoom’s Web interface instead of installing the app on your device, if possible. The Web version sits in a sandbox in the browser and doesn’t have the permissions an installed app has, limiting the amount of harm it can potentially cause.

In some cases, however, even if you want to use the Web interface, you may find that Zoom has gone ahead and downloaded the installer, and there’s just no other option to connect to the meeting but to install the client. In that case, you can at least limit the number of devices on which Zoom is installed to just one. Choose a device with next to no personal information. We know that sounds somewhat paranoid, but better safe than sorry.

Make Sure You Always Have the Latest Version of Zoom Installed
Updating apps as soon as the new version comes out is always a good idea — in the vast majority of cases such updates include fixes for serious security bugs that have been found in the previous version.  Zoom is no exception, so  it is likely that the newer version will be addressing certain issues and improving the security of the program.

Think About What People Can See or Hear
This one applies to every videoconferencing service, not just Zoom. Before you jump on the call, take a moment to consider what people will see or hear when you join the call. Even if you’re home alone, they may expect you to be fully dressed. Basic grooming is probably a good idea.

The same holds true for your screen if you plan on sharing it. Close any windows you’d rather others not see, whether it’s a surprise gift you’re buying online for another person on the Zoom call or a job search your boss doesn’t need to know about. We’ll leave other examples to your imagination.

Self-isolation can be boring and lonely. On the bright side, imagine all of this stuff happening before broadband, videoconferences, and the ability of many to work remotely. We’re glad such apps as Zoom exist, and now you know the right way to use it.

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Apps

WhatsApp Now Transcribes Voice Messages on Android

Published

on

Calling all Android users who dread lengthy voice messages: rejoice! WhatsApp is rolling out voice message transcription to its beta app.

This feature, already available for iOS users since May 2024, is now part of the WhatsApp Beta version 2.24.15.5 for Android. It automatically converts voice messages into text, making it easier and faster to understand conversations.

Currently, transcriptions are supported in five languages: English, Spanish, Portuguese (Brazil), Russian, and Hindi, with more languages promised in the future. Users opting in will need to download an additional data package to ensure all transcripts are generated directly on their devices, maintaining message privacy.

This update brings Android users closer to iOS users in terms of features and highlights WhatsApp’s commitment to improving the overall user experience.

Continue Reading

Apps

WhatsApp Trials AI Image Generator

Published

on

Calling all creative minds! WhatsApp is testing a new feature that uses AI to generate personalized avatars. Imagine yourself as a superhero, chilling on a beach, or even exploring space – the possibilities are endless! WABetaInfo discovered this feature in the latest Android beta update.

Here’s the tech behind the magic: a combo of user images, text descriptions, and Meta’s powerful AI, Llama. “Take photos of yourself once, then imagine yourself in any setting from the forest to outer space,” reads the screenshot on WhatsApp. The way it works is in the Meta AI Chat: users can type “Imagine in…” or “@Meta AI imagine me…” as a text prompt. A user’s likeness will then be used to generate the personalized image.

While there’s no official release date yet, this exciting feature is entirely optional. It joins the recently launched in-app custom sticker maker, showcasing WhatsApp’s commitment to fostering creativity within the app. This, alongside their ongoing development of AI chat functionalities, highlights Meta’s focus on making WhatsApp a platform that embraces both technological innovation and user expression.

Continue Reading

Apps

YouTube’s New Eraser Tool Now Removes Songs Without Ruining Your Videos

Published

on

Good news for creators! YouTube has rolled out a major update to its eraser tool, allowing them to effortlessly remove copyrighted music from their videos without sacrificing other audio elements like dialogue or sound effects.

In a recent video, YouTube acknowledged that the previous version of the tool needed improvement in terms of accuracy. This new iteration addresses that concern by utilizing an AI-powered algorithm that precisely detects and removes unwanted songs while leaving the rest of the audio intact.

However, YouTube’s support page advises creators that the algorithm might not always achieve perfect separation. As an alternative, creators can opt to “Mute all sound in the claimed segments,” effectively silencing any portions potentially containing copyrighted material.

Once the edit is finalized, YouTube automatically removes the content ID claim, a system designed to identify the use of copyrighted material within videos on the platform. This allows creators to proceed with their uploads without copyright concerns.

Continue Reading
Advertisement

Latest Reviews

Follow us on Facebook