<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><a href="https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5" class="">zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5</a><div class=""><br class=""></div><div class="">Well, that’s rather more than I can take on board today. Is it something to do with zoom migrating to DNS over HTTPS (DoH) - ?</div><div class=""><br class=""></div><div class="">Just to add that members of this household who choose not to employ video have developed an effective workaround in the form of a small sticker (e.g. half a postage stamp) which obscures the webcam lens. Problem solved?</div><div class=""><br class=""></div><div class="">Just a thought. ;=))</div><div class=""><br class=""></div><div class="">CW<br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On 10 Jul 2019, at 13:47, Alexander Schubert <<a href="mailto:alexander@schubert.berlin" class="">alexander@schubert.berlin</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">Hi Rubens,<o:p class=""></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">OMG. And do we have to do anything, or is Zoom updating the software (Windows; Android) automatically? Do we need to “patch” smth, delete the application and reinstall? (I for example do not use Mac/Apple – only Android and Windows).<br class=""><br class="">Thanks for the warning,<o:p class=""></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">Alexander<o:p class=""></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><o:p class=""> </o:p></span></div><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0cm 0cm;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><b class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">From:</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="Apple-converted-space"> </span>Gnso-newgtld-wg [<a href="mailto:gnso-newgtld-wg-bounces@icann.org" class="">mailto:gnso-newgtld-wg-bounces@icann.org</a>]<span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>Rubens Kuhl<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Wednesday, July 10, 2019 1:50 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Vaibhav Aggarwal, Catalyst & Group CEO <<a href="mailto:va@bladebrains.com" class="">va@bladebrains.com</a>><br class=""><b class="">Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:goran.marby@icann.org" class="">goran.marby@icann.org</a>; <a href="mailto:ericsyuan2011@gmail.com" class="">ericsyuan2011@gmail.com</a>; Priscilla McCarthy <<a href="mailto:priscilla.barolo@zoom.us" class="">priscilla.barolo@zoom.us</a>>; Dorrain, Kristine via Gnso-newgtld-wg <<a href="mailto:gnso-newgtld-wg@icann.org" class="">gnso-newgtld-wg@icann.org</a>>; Zoom Press <<a href="mailto:press@zoom.us" class="">press@zoom.us</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [Gnso-newgtld-wg] Please specify & Clarify is My Privacy at Risk?<o:p class=""></o:p></span></div></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">VA,<o:p class=""></o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">It's customary in the information security practice to not disclose vulnerabilities before a solution is provided by the software author, in order to better serve public interest. And this process was followed in this case by both the security researcher that identified it and Zoom and Zoom itself, but in the end it was clear that Zoom was not willing to change the architecture to really solve the problem. That made the security researcher disclose the vulnerability at the end of the customary 3-month period, which forced Zoom's hand and starting version 4.4.4 release 53932 it seems to be solved now. See <a href="https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS" style="color: purple; text-decoration: underline;" class="">https://support.zoom.us/hc/en-us/articles/201361963-New-Updates-for-Mac-OS</a> . <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">You can read more about responsible disclosure in <a href="https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.md" style="color: purple; text-decoration: underline;" class="">https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.md</a> . <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Zoom trying to downplay the severity of this vulnerability is indeed a problem; it was not low risk, and their attitude of thinking that prevented they fixed it in time, requiring a 0-day attack to be disclosed before they actually plugged the hole. Fixing people is harder than fixing software, and the handling of this does not bring any confidence to how they will handle other vulnerabilities in the future. The full recap published by the security researcher is worth reading:<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><a href="https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5" style="color: purple; text-decoration: underline;" class="">https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5</a><o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Rubens<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><br class=""><br class=""><o:p class=""></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class="" type="cite"><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">On 10 Jul 2019, at 01:47, Vaibhav Aggarwal, Catalyst & Group CEO <<a href="mailto:va@bladebrains.com" style="color: purple; text-decoration: underline;" class="">va@bladebrains.com</a>> wrote:<o:p class=""></o:p></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Dear Priscillia,<o:p class=""></o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">I appreciate your response. But this is too little and too late. If there was a Vulnerability, why were we not informed earlier as a customer / User. Secondly, I will need to understand what is the extent of this vulnerability. By Saying “Low risk Vulnerability” it is clearly showing that you are not willing to elucidate and want to either brush it under the carpet or ignore or underplay the risk. <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">This is a mandatory disclosure you need to do as it is my privacy at stake. This is Super Important. <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Regards,<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">-VA<o:p class=""></o:p></div></div><div class=""><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><br class=""><br class=""><o:p class=""></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class="" type="cite"><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">On Jul 10, 2019, at 2:44 AM, Priscilla McCarthy <<a href="mailto:priscilla.barolo@zoom.us" style="color: purple; text-decoration: underline;" class="">priscilla.barolo@zoom.us</a>> wrote:<o:p class=""></o:p></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Hi there Vaibhav,<o:p class=""></o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Thank you for your email. These are low-risk vulnerabilities that apply only to Mac users, and we have drafted a blog post discussing them. We are updating our service tonight and this coming weekend. When you see prompted updates, you should update your Zoom app to ensure your security. Here is more information: <a href="https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/" style="color: purple; text-decoration: underline;" class="">https://blog.zoom.us/wordpress/2019/07/08/response-to-video-on-concern/</a><o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Thank you!<br clear="all" class=""><o:p class=""></o:p></div><div class=""><div class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse: collapse;"><tbody class=""><tr class=""><td valign="top" style="padding: 0cm;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width: 330pt; border-collapse: collapse;"><tbody class=""><tr class=""><td width="66" valign="top" style="width: 48pt; padding: 0cm 11.25pt 0cm 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><a href="https://zoom.us/" style="color: purple; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><img border="0" id="_x0000_i1025" src="https://smart.zoom.us/v2/imagebucket/zoom.us/Camera_Icon.png" alt=" " class=""></span></a><o:p class=""></o:p></span></div></div></td><td width="374" valign="top" style="width: 270.75pt; padding: 0cm;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width: 270.75pt; border-collapse: collapse;"><tbody class=""><tr class=""><td valign="top" style="padding: 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif; line-height: 12pt;" class=""><b class=""><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class="">Priscilla Barolo<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></b></div></div></td></tr><tr class=""><td valign="top" style="padding: 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif; line-height: 12pt;" class=""><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class="">Manager, Communications<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></div></div></td></tr><tr class=""><td valign="top" style="padding: 0cm 0cm 3pt;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif; line-height: 12pt;" class=""><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class="">Zoom Video Communications<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></div></div></td></tr><tr class=""><td valign="top" style="padding: 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif; line-height: 12pt;" class=""><b class=""><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class="">Call</span></b><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><span class="Apple-converted-space"> </span><a href="tel:650-438-9456" style="color: purple; text-decoration: underline;" class=""><span style="color: rgb(51, 51, 51); text-decoration: none;" class="">650-438-9456</span></a></span><b class=""><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(183, 183, 183);" class=""> | </span></b><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><span class="Apple-converted-space"> </span> <span class="Apple-converted-space"> </span><b class="">Click</b><span class="Apple-converted-space"> </span><a href="https://zoom.us/" style="color: purple; text-decoration: underline;" class=""><span style="color: rgb(13, 137, 254);" class="">zoom.us</span></a><span class="Apple-converted-space"> </span></span><b class=""><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(183, 183, 183);" class=""> | </span></b><span style="font-size: 9pt; font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><span class="Apple-converted-space"> </span><b class="">Zoom</b><span class="Apple-converted-space"> </span><a href="http://zoom.us/j/650-438-9456" style="color: purple; text-decoration: underline;" class=""><span style="color: rgb(51, 51, 51); text-decoration: none;" class="">650-438-9456</span></a><o:p class=""></o:p></span></div></div></td></tr><tr class=""><td valign="top" style="padding: 5.25pt 0cm 1.5pt;" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width: 0cm; border-collapse: collapse;"><tbody class=""><tr class=""><td width="30" valign="top" style="width: 19.5pt; padding: 0cm 3pt 0cm 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><a href="http://www.facebook.com/zoomvideocommunications" style="color: purple; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><img border="0" width="24" height="24" id="_x0000_i1026" src="https://smart.zoom.us/v2/imagebucket/zoom.us/facebook.png" class=""></span></a><o:p class=""></o:p></span></div></div></td><td width="30" valign="top" style="width: 19.5pt; padding: 0cm 3pt 0cm 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><a href="http://www.twitter.com/zoom_us" style="color: purple; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><img border="0" width="24" height="24" id="_x0000_i1027" src="https://smart.zoom.us/v2/imagebucket/zoom.us/twitter.png" class=""></span></a><o:p class=""></o:p></span></div></div></td><td width="30" valign="top" style="width: 19.5pt; padding: 0cm 3pt 0cm 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><a href="http://www.linkedin.com/company/zoom-video-communications-inc-/" style="color: purple; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><img border="0" width="24" height="24" id="_x0000_i1028" src="https://smart.zoom.us/v2/imagebucket/zoom.us/linkedin.png" class=""></span></a><o:p class=""></o:p></span></div></div></td><td width="107" valign="top" style="width: 71.25pt; padding: 0cm 3pt 0cm 0cm;" class=""><div style="margin: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><span style="font-family: Arial, sans-serif; color: rgb(51, 51, 51);" class=""><a href="https://zoom.us/referrals" style="color: purple; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><img border="0" width="101" height="24" id="_x0000_i1029" src="https://smart.zoom.us/v2/imagebucket/zoom.us/refer-friend.png" class=""></span></a><o:p class=""></o:p></span></div></div></td></tr></tbody></table></td></tr></tbody></table></td></tr></tbody></table></td></tr><tr class=""><td style="padding: 0cm; min-width: 147px;" class=""><div align="center" class=""><table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="0" style="width: 330pt;"><tbody class=""><tr style="height: 0.75pt;" class=""><td style="padding: 0cm; height: 0.75pt;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><img border="0" width="147" height="1" id="_x0000_i1030" src="https://smart.zoom.us/v2/imagebucket/zoom.us/1x1.png" class=""><o:p class=""></o:p></div></td><td style="padding: 0cm; height: 0.75pt; min-width: 147px;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><img border="0" width="147" height="1" id="_x0000_i1031" src="https://smart.zoom.us/v2/imagebucket/zoom.us/1x1.png" class=""><o:p class=""></o:p></div></td><td style="padding: 0cm; height: 0.75pt; min-width: 147px;" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><img border="0" width="147" height="1" id="_x0000_i1032" src="https://smart.zoom.us/v2/imagebucket/zoom.us/1x1.png" class=""><o:p class=""></o:p></div></td></tr></tbody></table></div></td></tr></tbody></table><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><br class=""><br class=""><a href="https://smart.zoom.us/v2/a/zoomtopia19/5d2503c401ca44fa0d942282-OjqXg/httpszoomtopia.us" style="color: purple; text-decoration: underline;" class=""><span style="text-decoration: none;" class=""><img border="0" width="400" id="_x0000_i1033" src="https://smart.zoom.us/v2/a/zoomtopia19/5d2503c401ca44fa0d942282-OjqXg/logo.png" alt="zoomtopia19" class=""></span></a><o:p class=""></o:p></div></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">On Tue, Jul 9, 2019 at 12:20 PM Vaibhav Aggarwal <<a href="mailto:va@thevaibhav.com" style="color: purple; text-decoration: underline;" class="">va@thevaibhav.com</a>> wrote:<o:p class=""></o:p></div></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0cm 0cm 0cm 6pt; margin-left: 4.8pt; margin-right: 0cm;" class="" type="cite"><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Dear Eric,<o:p class=""></o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">I am in receipt of this following email content : <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Hey - remember when ICANN switched everyone from Adobe over to Zoom as a way of enhancing information security and data privacy?<o:p class=""></o:p></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">"A vulnerability in the Mac Zoom Client allows any malicious website to enable your camera without your permission... This vulnerability allows any website to forcibly join a user to a Zoom call, with their video camera activated, without the user's permission. On top of this, this vulnerability would have allowed any webpage to DOS (Denial of Service) a Mac by repeatedly joining a user to an invalid call. Additionally, if you’ve ever installed the Zoom client and then uninstalled it, you still have a localhost web server on your machine that will happily re-install the Zoom client for you, without requiring any user interaction on your behalf besides visiting a webpage. This re-install ‘feature’ continues to work to this day."<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Read more here: <a href="https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5" target="_blank" style="color: purple; text-decoration: underline;" class="">https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5</a><o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Please Clarify if my privacy at risk. And the steps taken to protect my privacy.<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Regards,<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">Vaibhav Aggarwal<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">New Delhi, India<o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><a href="http://vaibhavaggarwal.com/" target="_blank" style="color: purple; text-decoration: underline;" class="">vaibhavaggarwal.com</a> <o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><a href="http://twitter.com/thevaibhag" target="_blank" style="color: purple; text-decoration: underline;" class="">twitter.com/thevaibhag</a><o:p class=""></o:p></div></div><div class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><a href="http://youtube.com/+vaibhavaggarwalindia" target="_blank" style="color: purple; text-decoration: underline;" class="">youtube.com/+vaibhavaggarwalindia</a><span class="Apple-converted-space"> </span> <o:p class=""></o:p></div></div></div></blockquote></div></div></blockquote></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class="">_______________________________________________<br class="">Gnso-newgtld-wg mailing list<br class=""><a href="mailto:Gnso-newgtld-wg@icann.org" style="color: purple; text-decoration: underline;" class="">Gnso-newgtld-wg@icann.org</a><br class=""><a href="https://mm.icann.org/mailman/listinfo/gnso-newgtld-wg" style="color: purple; text-decoration: underline;" class="">https://mm.icann.org/mailman/listinfo/gnso-newgtld-wg</a><br class="">_______________________________________________<br class="">By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" style="color: purple; text-decoration: underline;" class="">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" style="color: purple; text-decoration: underline;" class="">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<o:p class=""></o:p></div></div></blockquote></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: "Times New Roman", serif;" class=""><o:p class=""> </o:p></div></div></div><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Gnso-newgtld-wg mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="mailto:Gnso-newgtld-wg@icann.org" class="">Gnso-newgtld-wg@icann.org</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="https://mm.icann.org/mailman/listinfo/gnso-newgtld-wg" class="">https://mm.icann.org/mailman/listinfo/gnso-newgtld-wg</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" class="">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" class="">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.</span></div></blockquote></div><br class=""></div></div></div></body></html>