Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
This means that Zoom was dishonest and had a backdoor open for spying to Facebook which they let slide until they got caught. Not an app I will download and use. Not trustworthy any more

The affected users were logging in using their Facebook accounts. That’s opening the front door for Zuck, and getting him a beer while he rifles through your drawers. Everybody should know this by now. Don’t do it, anywhere.
 
As an iOS developer, I will never use anything Facebook-related ever again in my apps. No SDKs, no libraries made by them, and certainly no integrations with any of their products unless it's a simple "share this content with Instagram/Whatsapp" prompt.

Privacy is key, customers are paying more and more attention to their rights, and they will reject apps that don't offer alternative services to log in.

same here
No Facebook login, nothing else.
Sharing content has been possible for years, I remember adding the Facebook SDK back in 2013 to allow sharing, then I switched to native share sheet only.
 
divorcing react.js?
I agree, this should’ve never EVER been done. Facebook is sneaky, and a snake IMO. I deleted mine years ago. Yes, I realize they have data on me.

It would be interesting to audit react to see what it may be "accidentally" sending to Facebook. Also even if it isn't sending anything now, once it is used in all web based apps, I'm sure Facebook will consider adding some "QoS" beacons into it. If you think about that most devs are just doing `npm install react-js`without considering what they actually get, having Facebook add bad things would be very easy to do. Or they could just start providing a minimised version "for end user convenience"
 
“Zoom takes its users' privacy extremely seriously.”

Every time a developer gets caught sharing data they shouldn’t, they always lead off their apology with this. To which I say, well, no you don’t or else we wouldn’t be having this conversation.

In this case I think it's sincere. An honest apology and quick correction go a long way in demonstrating their intent. They owned the mistake, explained it, and fixed it right away.
 
  • Like
  • Disagree
Reactions: mw360 and Basic75
In this case I think it's sincere. An honest apology and quick correction go a long way in demonstrating their intent. They owned the mistake, explained it, and fixed it right away.

I dunno. Given the way they thought installing a custom web server to subvert Safari's protections was hunky-dory, I'm not inclined to give them the benefit of the doubt on security and privacy issues.

 
Facebook has gotten way to big, and is sucking way too much data from too many sources. They claim it's 'helpful', but it's obvious that the user is their product, and I'm glad I dumped them, but am concerned that my data is still being inhaled by them. There is no reason for Facebook to vacuum up that data. None at all...

BOYCOTT FACEBOOK!!!
 
whatever happened to privacy

I think it's when the courts decided there was 'no right to privacy' in the Constitution, or the Bill of Rights. Sane people would assume that there is at least an implied right to privacy but a court deciding that's not the case opened the floodgates to those seeking to monetize their users and their data. It's sad, but Europe and the EU take privacy a whole lot more seriously. In the EU, you have the right to disappear all of your data. I manage a few websites, and have had those requests. *POOF* They are gone... No record they were ever there. Here, I can't get FB to take down my dead mother's page.
 
Last edited:
  • Like
Reactions: dabotsonline
I dunno. Given the way they thought installing a custom web server to subvert Safari's protections was hunky-dory, I'm not inclined to give them the benefit of the doubt on security and privacy issues.


Even though they addressed the issue a while ago I decided to remove Zoom from my Mac after I read that a few days ago.
 
  • Like
Reactions: stylinexpat
Wow, glad I was sitting down when I read this story. :rolleyes:

Facebook must pay their people really, really well - otherwise no one could stomach working for them.

When a Facebook app comes preinstalled on a smartphone with no uninstall option with a stupid disable only option you know for a fact that it is working 24/7 as a spy tool on you in the background.
 
It would be interesting to audit react to see what it may be "accidentally" sending to Facebook. Also even if it isn't sending anything now, once it is used in all web based apps, I'm sure Facebook will consider adding some "QoS" beacons into it. If you think about that most devs are just doing `npm install react-js`without considering what they actually get, having Facebook add bad things would be very easy to do. Or they could just start providing a minimised version "for end user convenience"

Just hook up Charles / wireshark and sniff. Anyone can do this whether the JS code is minified or not
[automerge]1585415622[/automerge]
"Zoom takes its users' privacy extremely seriously."

Why are we still letting companies get away with this lie?

Apple got caught too. Double edged sword. Best way to stop companies in getting away with it is to work for said companies and be involved in the product. Chances are you will learn that it’s easier said then done.
 
  • Like
Reactions: dabotsonline
Honestly, this is the type of data I understand a Technology company wanting to grab. Everything relates to their primary service. It is the personal information that I can't stand.
 
I just logged into MR forums with Facebook and I find no problem with MR knowing my non-personally identifiable info (if they collect it). It’s a convenient way to reduce passwords and apply 2FA on sites that don’t build their own MFA. Nice.

Set a quarterly reminder to review all your OAuth providers and remove unnecessary accounts.

Security is different than privacy but they go hand in hand.
 
I dunno. Given the way they thought installing a custom web server to subvert Safari's protections was hunky-dory, I'm not inclined to give them the benefit of the doubt on security and privacy issues.

Exactly, Zoom is definitely not a security-first product. It's fairly clear they've prioritized getting features rolled out and making it work right. Privacy is a different matter, and this FB login button is forgivable, especially now that they removed it.
[automerge]1585420284[/automerge]
BTW I like the release notes for this update - “Improvements to Facebook login”. ;)
LOL
 
Last edited:
In this case I think it's sincere. An honest apology and quick correction go a long way in demonstrating their intent. They owned the mistake, explained it, and fixed it right away.
They are just sorry to be caught, how do you accidentally invade your users privacy? Don't you ever test your software? Don't you look into the components that you use?
 
This means that Zoom was dishonest and had a backdoor open for spying to Facebook which they let slide until they got caught. Not an app I will download and use. Not trustworthy any more

I don't like Zoom, but you should assume incompetence over malice (and, in truth, apathy over incompetence).

Between this and the handling of their July 2019 vulnerability they're on my **** list, but that's much more so due to the July 2019 problems.
 
  • Like
Reactions: dabotsonline
I tried logging into Zoom iOS with my saved desktop credentials via 1Password, where I had signed into zoom.us. On my iPhone at the enter username and password page I encountered this: "No Logins Found: zoom.com.cn" China??? Alarm bells went off. Later, the same error showed up but instead it was zoomgov.com.

At this point I have no confidence in Zoom's safe handling of my login credentials. My request for answers from Zoom tech support has not been answered.

IMG_5199.jpeg
 
I dunno. Given the way they thought installing a custom web server to subvert Safari's protections was hunky-dory, I'm not inclined to give them the benefit of the doubt on security and privacy issues.

I'm not intending this to be an argument against your statement - but I would argue that people should never give any company the benefit of the doubt on security and privacy issues. Even Apple.

Some companies have repeatedly demonstrated that they're evil - like Facebook and, to a lesser degree, Google. But I think the bigger issue is that many tech companies nowadays prioritize quick software release (so they can start making money) and don't put a whole lot of thought into security. Additionally, some companies simply don't have competent staff. And, finally, "to err is human" - even top tier coders will make mistakes or not notice bugs ("goto FAIL").

Which is why (with regard specifically to cameras), I like these devices. Doesn't solve the microphone issue though.

 
As an Amazon Associate, MacRumors earns a commission from qualifying purchases made through links in this post.
  • Like
Reactions: dabotsonline
...
I unplug my web camera and headphones when not in use.
 
As an Amazon Associate, MacRumors earns a commission from qualifying purchases made through links in this post.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.