Zoom Boosts Security: Critical Privacy Flaws Patched in Landmark 5.0 Update

Published 2 hours ago3 minute read
Zoom Boosts Security: Critical Privacy Flaws Patched in Landmark 5.0 Update

The video conferencing platform Zoom experienced a significant surge in its user base over the past few months, a direct consequence of the global coronavirus pandemic which necessitated widespread remote communication. However, this rapid growth also brought to light a number of critical privacy and security concerns, causing both individuals and organizations to become hesitant about using the application.

In a direct response to these growing apprehensions, Zoom announced and began rolling out version 5.0 of its application, claiming to have addressed the major security issues identified. This new update introduces enhanced encryption standards and expanded privacy options, specifically designed to alleviate user worries. While Zoom's download page initially offered version 4.6.12, version 5.0 was expected to be fully available by the end of the week of the announcement.

Prior to this significant update, the increasing global popularity of Zoom led numerous privacy and security experts to scrutinize the app, revealing several concerning vulnerabilities. Early findings, notably an analysis by Motherboard, exposed that Zoom's iOS app was transmitting users' location and device specifications to Facebook. Zoom subsequently updated its iOS application to block these codes, which were embedded within the Facebook login feature.

Weeks later, the company faced further criticism for falsely asserting that its platform offered end-to-end encryption for meetings, a claim it later had to retract and apologize for. The new Zoom 5.0 update now incorporates 256-bit AES-GCM encryption, a more robust form of the Advanced Encryption Standard, specifically to bolster the platform's security. Additionally, a new button has been added to the menu bar, providing users with easier access to available security options.

To combat the phenomenon known as "Zoombombing," where uninvited individuals could disrupt ongoing calls, Zoom 5.0 introduces a "report user" button, allowing participants to easily report such intruders. While this offers a reactive solution, questions remain about why Zoombombing cannot be prevented altogether. Furthermore, to enhance the safety of user data, Zoom has added an option enabling administrators to specify the data center regions where their data is processed.

Zoom's responsiveness to the raised concerns has been largely commendable. The company's earlier commitment to pausing the development of new features for 90 days to solely focus on privacy and security appears to have culminated in the solutions presented in this new update. However, it has been noted that many of these advanced features might primarily benefit tech-savvy users and organizational administrators, as the upgrade seems to involve a more manual configuration process. The full impact of these privacy and security fixes was expected to become clearer once the 5.0 update was widely adopted.

Loading...
Loading...
Loading...

You may also like...