<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Gadugi;
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Vorformatiert Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.HTMLVorformatiertZchn
{mso-style-name:"HTML Vorformatiert Zchn";
mso-style-priority:99;
mso-style-link:"HTML Vorformatiert";
font-family:Consolas;}
span.E-MailFormatvorlage21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>Correct. Zoom is currently actively examined, other applications are still unknown. We all remember the security record of Adobe Flash (base of Connect). Yes, zoom is in bad standing right now, but they react in a senseful ways. Yes zoom did a bad job in updating their software, we do not know anything about alternatives.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'>So I’m currently prefer to stick with Zoom for our purposes.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>Von:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> ttf <ttf-bounces@atlarge-lists.icann.org> <b>Im Auftrag von </b>Olivier MJ Crépin-Leblond<br><b>Gesendet:</b> Sonntag, 19. April 2020 00:54<br><b>An:</b> DANIEL NANGHAKA <dndannang@gmail.com>; Alfredo Calderon-Serrano <acalderon1@me.com><br><b>Cc:</b> Technology Taskforce WG <ttf@atlarge-lists.icann.org><br><b>Betreff:</b> [SPAM:1.4] Re: [technology taskforce] ZOOM 90-Day Security Plan Progress Report: April 15<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>Dear Daniel,<br><br>in one week I have seen more security and feature updates in Zoom than in 3 years of prior utilisation. There are alternatives to Zoom, but most of them have the same faults and can be equally as easy to hack. Some alternatives might be better on security but are feature poor and bandwidth hungry. Some are worse than Zoom on security and have done nothing to address these points, and some alternatives are downright awful to use... or "work" only on a single platform.<br>Kindest regards,<br><br>Olivier<o:p></o:p></p><div><p class=MsoNormal>On 18/04/2020 23:33, DANIEL NANGHAKA wrote:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Are we still safe with zoom amidst all the flaws that have been identified? <o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>There was a time when a simple flaw was discover during an ICANN meeting, and Adobe Connect was shutdown. Is there an analysis of the effects. <o:p></o:p></p></div><div><p class=MsoNormal>What is the security guarantee that we have on zoom?<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Daniel KN<o:p></o:p></p></div></div><div><p class=MsoNormal><span style='border:solid windowtext 1.0pt;padding:0cm'><img width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1025" src="cid:~WRD000.jpg" alt="Das Bild wurde vom Absender entfernt."></span><span style='font-size:7.5pt;font-family:"Gadugi",sans-serif;color:white'>ᐧ</span><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Sat, 18 Apr 2020 at 17:17, Alfredo Calderon-Serrano via ttf <<a href="mailto:ttf@atlarge-lists.icann.org">ttf@atlarge-lists.icann.org</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><div><p class=MsoNormal><a href="https://blog.zoom.us/wordpress/2020/04/15/90-day-security-plan-progress-report-april-15/" target="_blank">https://blog.zoom.us/wordpress/2020/04/15/90-day-security-plan-progress-report-april-15/</a><br><br><img border=0 width=646 height=687 style='width:6.7291in;height:7.1562in' id="_x0000_i1026" src="cid:image001.png@01D61702.CE2DA680"><o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><img border=0 width=633 height=673 style='width:6.5937in;height:7.0104in' id="_x0000_i1027" src="cid:image002.png@01D61702.CE2DA680"><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>The newly released </span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><a href="https://blog.zoom.us/wordpress/2020/04/08/zoom-product-updates-new-security-toolbar-icon-for-hosts-meeting-id-hidden/" target="_blank"><span style='color:#FD7822;border:none windowtext 1.0pt;padding:0cm;text-decoration:none'>Security icon</span></a><span style='border:none windowtext 1.0pt;padding:0cm'> in the toolbar provides Zoom Meetings hosts and co-hosts with one-click access to a number of existing Zoom security features, including Lock Meeting and Enable the Waiting Room.</span><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Changes to Zoom’s default settings</span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>We’ve made changes to Zoom’s default meeting settings to improve security before a meeting starts. Both meeting passwords and Waiting Rooms are enabled by default for our free Basic users and single Pro users, while those in our K-12 education program need a password to join a meeting. Waiting Rooms also are on by default for those K-12 users. </span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Enhanced meeting password complexity</span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Account owners and admins can now configure minimum meeting password requirements to include numbers, letters, and special characters, or allow only numeric passwords. Free Basic account users will now use alphanumeric passwords by default instead of numeric passwords. </span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Changes to data center routing </span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Starting April 18, account admins will have the ability to choose whether or not their data is routed through specific data center regions, giving users more control of their interactions with Zoom’s global network. Learn more about the process in our </span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><a href="https://blog.zoom.us/wordpress/2020/04/13/coming-april-18-control-your-zoom-data-routing/" target="_blank"><span style='color:#FD7822;border:none windowtext 1.0pt;padding:0cm;text-decoration:none'>blog post</span></a><span style='border:none windowtext 1.0pt;padding:0cm'>.</span><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Bug bounty program with Katie Moussouris of Luta Security </span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt;vertical-align:baseline;box-sizing:border-box'><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329;border:none windowtext 1.0pt;padding:0cm'>Zoom will be working with Luta Security to reboot our bug bounty program. Luta Security was founded by Katie Moussouris, who created some of the most important vulnerability programs still running today. She started Microsoft Vulnerability Research and Symantec Vulnerability Research, and also started Microsoft’s and the Pentagon’s bug bounty programs. Luta Security will be assessing Zoom’s program holistically with a 90-day “get well” plan, which will cover all internal vulnerability handling processes. Read more in Katie’s <a href="https://www.lutasecurity.com/post/luta-security-and-zoom" target="_blank"><span style='color:#FD7822;text-decoration:none'>blog post</span></a>.</span><span style='font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#132329'><o:p></o:p></span></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Alfredo Calderón <o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Sent from my iPad<o:p></o:p></p></div></div></div></div><p class=MsoNormal>_______________________________________________<br>ttf mailing list<br><a href="mailto:ttf@atlarge-lists.icann.org" target="_blank">ttf@atlarge-lists.icann.org</a><br><a href="https://mm.icann.org/mailman/listinfo/ttf" target="_blank">https://mm.icann.org/mailman/listinfo/ttf</a><br><br>_______________________________________________<br>By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy" target="_blank">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos" target="_blank">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></p></blockquote></div><p class=MsoNormal><br><br><o:p></o:p></p><pre>_______________________________________________<o:p></o:p></pre><pre>ttf mailing list<o:p></o:p></pre><pre><a href="mailto:ttf@atlarge-lists.icann.org">ttf@atlarge-lists.icann.org</a><o:p></o:p></pre><pre><a href="https://mm.icann.org/mailman/listinfo/ttf">https://mm.icann.org/mailman/listinfo/ttf</a><o:p></o:p></pre><pre><o:p> </o:p></pre><pre>_______________________________________________<o:p></o:p></pre><pre>By submitting your personal data, you consent to the processing of your personal data for purposes of subscribing to this mailing list accordance with the ICANN Privacy Policy (<a href="https://www.icann.org/privacy/policy">https://www.icann.org/privacy/policy</a>) and the website Terms of Service (<a href="https://www.icann.org/privacy/tos">https://www.icann.org/privacy/tos</a>). You can visit the Mailman link above to change your membership status or configuration, including unsubscribing, setting digest-style delivery or disabling delivery altogether (e.g., for a vacation), and so on.<o:p></o:p></pre></blockquote><p class=MsoNormal><br><br><o:p></o:p></p><pre>-- <o:p></o:p></pre><pre>Olivier MJ Crépin-Leblond, PhD<o:p></o:p></pre><pre><a href="http://www.gih.com/ocl.html">http://www.gih.com/ocl.html</a><o:p></o:p></pre></div></div></body></html>