4 years, 5 months ago

Zoom Can No Longer Lie to its Users About How Secure Its Service Is, Says US FTC

Zoom, the video conferencing service that overnight became both a messiah and a villain in the initial months of the Covid-19 pandemic, has been issued a settlement order by the United States Federal Trade Commission. The main reason behind this was because of how Zoom told its users since 2016 that its video conferencing services offered 256-bit end-to-end encryption, which was completely untrue. Zoom also secretly downloaded a web service on Apple Mac users that allowed Zoom to bypass the Safari web browser’s security prompt, which would have informed users before allowing Zoom to log users into a meeting automatically. Zoom is also prohibited from making misrepresentations about its privacy and security practices, including about how it collects, uses, maintains, or discloses personal information; its security features; and the extent to which users can control the privacy or security of their personal information.” “Finally, the company must obtain biennial assessments of its security program by an independent third party, which the FTC has authority to approve, and notify the Commission if it experiences a data breach,” it further added. Zoom has since hired ex-Facebook security chief Alex Stamos to head its security efforts, and of late, has rolled out end-to-end encryption for all users.

News 18

Discover Related