RIP zoom?

[Anonymous]

DCPS banning zoom, along with NYC and other school districts, due to zoom-bombing and privacy concerns. MCPS next? What will they use instead?

[Anonymous]

DCPS has been using Microsoft Teams for videoconferencing since they banned zoom.

[Anonymous]

MCPS has implemented it differently. Has to be used from a student google account, which already is walled off from general internet.

[Anonymous]

Anonymous wrote:MCPS has implemented it differently. Has to be used from a student google account, which already is walled off from general internet.

Are you positive because I saw students using cell phone numbers on Friday.

[Anonymous]

FWIW, the following is a summary of an investigative report released by Citizen’s Lab on Friday, Citizen's Lab being a well-respected cybersecurity institution (part of the University of Toronto). They are well known in the field as objective researchers looking into exploitable weaknesses that pose a risk to a sector, or holistically (https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/):

1. Zoom misrepresents the encryption it uses, calling it “end-to-end” encryption. In April 2020 Zoom released a blog post clarifying that their encryption is between an individual’s device and the Zoom server, NOT the entire communication. IOW, not "end-to-end" encryption as industry uses the term

2. Zoom uses custom encryption which does a poor job of masking everything (in the report, you can still make out the outlines of an encrypted picture encrypted using Zoom's algorithm), and is predictable. And Zoom's keys are weak; AES-128 vice traditional AES-256

3. In making Zoom idiot-proof (called "low friction") Zoom created a number of vulnerabilities, some of which have been discussed in the press the past few days

4. Even with all parties to a call in the US, encryption keys come from China, creating the risk that Chinese govt can force Zoom to share keys and gain access

5. Nation states are now well aware of Zoom’s vulnerabilities and likely targeting users

6. Zoom provides 0 transparency about what it shares when served with legal process

7. Zoom's Waiting Room has a vulnerability (not publicly disclosed b/c they want Zoom to fix before ppl take advantage)

[Anonymous]

Anonymous wrote:

Anonymous wrote:MCPS has implemented it differently. Has to be used from a student google account, which already is walled off from general internet.

Are you positive because I saw students using cell phone numbers on Friday.

Extra layer of security at mcps - you have to use your mcps account to log in to the meeting before entering the meeting id and password. Teachers are also using the wait room feature.

[Anonymous]

Somebody wants to eavesdrop on remote instruction?

[Anonymous]

I had a kid try to enter with a made up name “balls on fire 001” so I blocked his entry. I laughed and told the other kids that someone was blocked because of a silly name.

[Anonymous]

Anonymous wrote:Somebody wants to eavesdrop on remote instruction?

Google Zoombombing

[Anonymous]

Anonymous wrote:Somebody wants to eavesdrop on remote instruction?

+1 do not even get this.

Work meetings are all pass. Protected now, but it was verrrry easy to keep an eye on everyone in there (I have small meetings I guess)

[Anonymous]

As others have said, you can't join MCPS Zoom without logging in with a MyMCPS student/teacher username. So any kid who does something inappropriate is easily traceable and accountable.

The Zoom issues are:
1. random people being able to join meetings, which can't happen with MCPS's setup
2. Non end-to-end encryption, which only occurs if you are calling in from a phone, because the telephone network isn't encrypted (this is not specific to Zoom).. but MCPS requires connecting by computer, which is encrypted.

[Anonymous]

Anonymous wrote:

Anonymous wrote:Somebody wants to eavesdrop on remote instruction?

Google Zoombombing

Not only that there's a huge security flaw. Thousands of zoom meetings were released publicly along with personally identifying information. Therapy sessions, private business meetings, elementary children etc. I wish MCPS would also ban it.

[Anonymous]

Anonymous wrote:

Anonymous wrote:

Anonymous wrote:Somebody wants to eavesdrop on remote instruction?

Google Zoombombing

Not only that there's a huge security flaw. Thousands of zoom meetings were released publicly along with personally identifying information. Therapy sessions, private business meetings, elementary children etc. I wish MCPS would also ban it.

By next Friday they probably will.

[Anonymous]

Anonymous wrote:As others have said, you can't join MCPS Zoom without logging in with a MyMCPS student/teacher username. So any kid who does something inappropriate is easily traceable and accountable.

The Zoom issues are:
1. random people being able to join meetings, which can't happen with MCPS's setup
2. Non end-to-end encryption, which only occurs if you are calling in from a phone, because the telephone network isn't encrypted (this is not specific to Zoom).. but MCPS requires connecting by computer, which is encrypted.

What about students who only have a smartphone? Or teachers who only have a smartphone because they need to leave the family computer for a spouse or children?

[Anonymous]

Anonymous wrote:

Anonymous wrote:As others have said, you can't join MCPS Zoom without logging in with a MyMCPS student/teacher username. So any kid who does something inappropriate is easily traceable and accountable.

The Zoom issues are:
1. random people being able to join meetings, which can't happen with MCPS's setup
2. Non end-to-end encryption, which only occurs if you are calling in from a phone, because the telephone network isn't encrypted (this is not specific to Zoom).. but MCPS requires connecting by computer, which is encrypted.

What about students who only have a smartphone? Or teachers who only have a smartphone because they need to leave the family computer for a spouse or children?

Well, then they should have picked up the chromebooks that was offered by mcps. How many messages does one need before they can go pick up a chromebook. They can still talk to their principal and get one.