“We have already resolved these security issues,” a Zoom spokesperson told WIRED in a statement. In other words, Wardle found that he could change the name of the software he was trying to sneak through to contain the markers Zoom was broadly looking for and get the malicious package past Zoom’s signature check.
Zoom’s signature check was essentially looking at everything on the table and accepting the random birthday card signature instead of actually checking whether the signature was in the right place on the right document.
Imagine that you carefully sign a legal document and then put the piece of paper facedown on a table next to a birthday card that you signed more casually for your sister. Ultimately, he realized that Zoom’s check could be defeated. (It’s a sort of wax-seal check to confirm the integrity and provenance of software.) Wardle knew from past research and his own software development that it can be difficult to truly validate signatures in the types of conditions Zoom had set up. Once this is done, you’ll see them appear on your main screen next to your own video feed.The first vulnerability Wardle found, though, was in the cryptographic signature check. If you’ve turned on the Waiting Room setting (you’ll find this by clicking the More button to the right of the Invite button or the Security tab under the main pane), you’ll be notified as each invitee logs in and be asked to let them join the meeting. At the bottom you’ll see the Invite button, so click this and you’ll see a new box into which you can type the name of your contacts (if you’ve entered any into the Contacts section of your Zoom account, which can be found by selecting the Contacts tab at the top of the page on the Zoom Home screen) or there’s another tab to send invites via email.Ĭhoose whichever is the one that you deem most suitable then wait for the invitees to respond.
To do this, click on the Participants tab and a side window will open on the right. With your call up and running after clicking on the New Meeting button, you’ll want to add more people so you can actually talk. How do I invite people to a Zoom meeting?
0 kommentar(er)
