Dear community members,

Yesterday, we were notified of a _security issue in Zoom_ 
<https://www.theverge.com/2019/7/8/20687014/zoom-security-flaw-video-conference-websites-hijack-mac-cameras>,
 the video conferencing software we use for our community meetings. As we do 
use Zoom in our many of our community meetings, and therefore many in our 
community may have this app, we want to make people aware of the issue, and the 
updates and changes in settings that can be made to address it.

A bug in the Zoom app on Mac devices allows meeting hosts to forcibly connect 
users to a meeting when they click on a URL. The default settings in Zoom 
automatically start video and audio when joining a meeting, meaning that users 
who click this URL could join a meeting with their audio and video on, without 
a warning. This bug potentially affects any Mac user who has installed the Zoom 
desktop app, even if they are logged out or have uninstalled the app. 



Zoom has _released a statement_ 
<https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/> 
announcing a planned patch to fix this security issue, which is scheduled to 
take effect tonight by midnight Pacific US Time. We encourage all Mac users in 
our community to update their Zoom version after this patch is released. In the 
meantime, you can change your settings in the Zoom desktop app by following 
_these instructions_ 
<https://support.zoom.us/hc/en-us/articles/203024649-Video-Or-Microphone-Off-By-Attendee>.
 (You cannot currently change these settings on the web interface.) You can 
test your settings to make sure your audio and video are disabled by logging in 
to your _Zoom profile_ <https://www.zoom.us/profile> and going to Meetings → 
Personal Meeting Room → Start Meeting.



We are aware of concerns that this security issue raises about design choices 
made in the development of Zoom and are continuing to monitor the discussion 
around this issue and Zoom’s response. Please get in touch with us 
(_team@carpentries.org_) with any concerns.

Sincerely,
Erin Becker
------------------------------------------
The Carpentries: discuss
Permalink: 
https://carpentries.topicbox.com/groups/discuss/T7860c1ae65805b43-Me993184f6ee950514bb3f117
Delivery options: https://carpentries.topicbox.com/groups/discuss/subscription

Reply via email to