Zoom Apk – One Platform to Connect

Work from anywhere with a single app that combines team chat, phone, whiteboard, meetings, and more.

COMMUNICATE EASILY WITH ANYONE
– Chat with internal and external contacts
– Place and accept calls or send SMS text messages
– Schedule a video meeting and join with a single click

KEEP PROJECTS MOVING
– Chats and channels for messaging, file sharing, and more
– Share and annotate content during meetings
– Brainstorm on virtual whiteboards, share them in chat, and access them later

WORK SAFELY ON THE GO
– Stay focused on the road with Android Auto support
– “Hey Google” Voice Access commands for hands-free control
– SSO support and Okta integration

BOUNCE BETWEEN LOCATIONS
– Move a call or meeting between devices with a single click without interruption
– Use the mobile app to start a Zoom Rooms meeting and share content
– Multi-task on your Android phone with Picture in Picture or tablet with Split Screen

USAGE INFORMATION
– Any free or paid license can be used with the mobile app
– A paid Zoom One subscription or add-on license is required to use certain product features.
– Works over Wi-Fi, 5G, 4G/LTE, and 3G networks
– Support for Android phones and tablets

Follow us on social @zoom.

Terms of Service: https://explore.zoom.us/terms/
Privacy Statement: https://explore.zoom.us/privacy/

Have a question? Contact us at http://support.zoom.us

Zoom Video Communications, Inc. (commonly shortened to Zoom, and stylized as zoom) is a communications technology company primarily known for the videoconferencing application Zoom. The company is headquartered in San Jose, California, United States. The company was founded in 2011 by Eric Yuan, a former Cisco engineer and executive. It launched its software in 2013.^[2] Its software products have faced public and media scrutiny related to security and privacy issues, though the company has taken measures to address these issues.^[3][4][5]

History

[edit]

Early years

[edit]

Zoom was founded by Eric Yuan, a former corporate vice president for Cisco Webex.^[6] He left Cisco in April 2011 with 40 engineers to start a new company,^[2] originally named Saasbee, Inc.^[7] The company had trouble finding investors because many people thought the videotelephony market was already saturated.^[7] In June 2011, the company raised $3 million of seed money from WebEx founder Subrah Iyar, former Cisco SVP and General Counsel Dan Scheinman, and venture capitalists Matt Ocko, TSVC, and Bill Tai.^[7]

In May 2012, the company changed its name to Zoom, influenced by Thacher Hurd‘s children’s book Zoom City.^[7] In September 2012, Zoom launched a beta version that could host conferences with up to 15 video participants.^[8] In November 2012, the company signed Stanford University as its first customer.^[7] The service was launched in January 2013 after the company raised a $6 million Series A round from Qualcomm Ventures, Yahoo! founder Jerry Yang, WebEx founder Subrah Iyar, and former Cisco SVP and General Counsel Dan Scheinman.^[9] Zoom launched version 1.0 of the program allowing the maximum number of participants per conference to be 25.^[10] By the end of its first month, Zoom had 400,000 users and by May 2013 it had 1 million users.^[11][12]

Growth

[edit]

In July 2013, Zoom established partnerships with B2B collaboration software providers, such as Redbooth (then Teambox),^[13] and also created a program named Works with Zoom, which established partnerships with Logitech, Vaddio,^[14] and InFocus.^[15][16][17] In September 2013, the company raised $6.5 million in a Series B round from Horizon Ventures, and existing investors. At that time, it had 3 million daily meeting participants.^[11]

On February 4, 2015, the company received US$30 million in Series C funding from investors including Emergence Capital, Horizons Ventures (Li Ka-shing), Qualcomm Ventures, Jerry Yang, and Patrick Soon-Shiong.^[18] At that time, Zoom had 40 million users, with 65,000 organizations subscribed and a total of 1 billion meeting minutes since it was established.^[19] Over the course of 2015 and 2016, the company integrated its software with Slack, Salesforce, and Skype for Business.^[20][21][22] With version 2.5 in October 2015, Zoom increased the maximum number of participants allowed per conference to 50^[23] and later to 1,000 for business customers.^[24][25] In November 2015, former president of RingCentral David Berman was named president of the company, and Peter Gassner, the founder and CEO of Veeva Systems, joined Zoom’s board of directors.^[26]

In January 2017, the company raised US$100 million in Series D funding from Sequoia Capital at a US$1 billion valuation,^[27] making it a unicorn.^[28][29] In April 2017, Zoom launched a scalable telehealth product allowing doctors to host remote consultations with patients.^[30][31] In May, Zoom announced integration with Polycom‘s conferencing systems, enabling features such as multiple screen and device meetings, HD and wireless screen sharing, and calendar integration with Microsoft Outlook, Google Calendar, and iCal.^[32] From September 25–27, 2017, Zoom hosted Zoomtopia 2017, its first annual user conference. At this conference, Zoom announced a partnership with Meta Platforms to integrate Zoom with augmented reality, integration with Slack and Workplace by Facebook, and first steps towards an artificial intelligence (AI) speech recognition program.^[33][34]

IPO and onward

[edit]

On April 18, 2019, the company became a public company via an initial public offering; since then, it has been listed on NASDAQ under the ticker symbol ZM. After pricing at US$36 per share, the share price increased over 72% on the first day of trading.^[35][36] Prior to the IPO, Dropbox invested $5 million in Zoom.^[37] The company first became profitable in 2019.^[38][39][36]

In 2019, the company ranked second in Glassdoor‘s “Best Places to Work” survey.^[40][41]

Due to the increase in remote work, distance education, and remote social relations during the COVID-19 pandemic, usage increased substantially and the Zoom mobile app was the 5th most downloaded mobile app in 2020, behind TikTok, WhatsApp, Facebook, and Instagram.^[42]

The company offered its services free to K–12 schools in many countries.^[43][44]

The company joined the NASDAQ-100 stock index on April 30, 2020.^[45]

In May 2020, Zoom acquired Keybase, a company specializing in end-to-end encryption.^[46] In June 2020, the company hired its first chief diversity officer, Damien Hooper-Campbell.^[47]

Also in May 2020, Zoom announced plans to open new research and development centers in Pittsburgh and Phoenix, with plans to hire up to 500 engineers between the two cities over the next few years.^[48]

In July 2020, Zoom announced the opening of a technology center in Bangalore, India, to host engineering, IT, and business operations roles.^[49]

Also in July 2020, Zoom announced its first hardware as a service products, bundling its videoconferencing software with third-party hardware by DTEN, Neat, Poly, and Yealink, and running on the ServiceNow platform. It began with Zoom Rooms and Zoom Phone offerings, with those services available to US customers, who can acquire hardware from Zoom for a fixed monthly cost.^[50][51] On July 15, 2020, the company announced Zoom for Home, a line of products for home use, designed for remote workers. The first product, Zoom for Home – DTEN ME, includes software by Zoom and hardware by DTEN. It consists of a 27-inch screen with three wide-angle cameras and eight microphones, with Zoom software preloaded on the device. It became available in August 2020.^[52][53]

In August 2020, Zoom opened a data center in Singapore.^[54]

In June 2021, Zoom acquired Kites (Karlsruhe Information Technology Solutions), an artificial intelligence-based language translation company with an aim to reduce language barriers in video calls.^[55]

In September 2021, Zoom’s attempt to acquire contact center company Five9 for $14.7 billion was turned down by Five9’s shareholders.^[56][57]

In February 2023, Zoom announced that it would cut its workforce by 15 percent, or about 1,300 employees, citing the unsustainable growth following the rapid scaling to manage the demand of the pandemic.^[58]

On December 18, 2023, Zoom dropped out of the NASDAQ-100.

Privacy and security issues

[edit]

Further information: Zoom (software) § Reception

Zoom has been criticized for “security lapses and poor design choices” that have resulted in heightened scrutiny of its software.^[59][5] The company has also been criticized for its privacy and corporate data sharing policies.^[60][61][62] Security researchers and reporters have criticized the company for its lack of transparency and poor encryption practices. Zoom initially claimed to use “end-to-end encryption” in its marketing materials,^[63] but later clarified it meant “from Zoom end point to Zoom end point” (meaning effectively between Zoom servers and Zoom clients), which The Intercept described as misleading and “dishonest”.^[64]

In March 2020, New York State Attorney General Letitia James launched an inquiry into Zoom’s privacy and security practices;^[65] the inquiry was closed on May 7, 2020, with Zoom not admitting wrongdoing, but agreeing to take added security measures.^[66] In the same month, a class-action lawsuit against Zoom was filed in the United States District Court for the Northern District of California. According to the lawsuit, Zoom violated the privacy of its users by sharing personal data with Facebook, Google, and LinkedIn, did not prevent hackers from disrupting Zoom sessions, and erroneously claimed to offer end-to-end encryption on Zoom sessions. Zoom settled this lawsuit for $86 million.^[67]

On April 1, 2020, Zoom announced a 90-day freeze on releasing new features, to focus on fixing privacy and security issues on Zoom. On July 1, 2020, Yuan wrote a blog post detailing efforts taken by the company to address security and privacy concerns, stating that they released 100 new safety features over the 90-day period. Those efforts include end-to-end encryption for all users, turning on meeting passwords by default, giving users the ability to choose which data centers calls are routed from, consulting with security experts, forming a CISO council, an improved bug bounty program, and working with third parties to help test security. Yuan also stated that Zoom would be releasing a transparency report later in 2020.^[68][69]

In May 2020, the Federal Trade Commission (FTC) announced that it was looking into Zoom’s privacy practices.^[70] The FTC alleged that since at least 2016, “Zoom maintained the cryptographic keys that could allow Zoom to access the content of its customers’ meetings, and secured its Zoom Meetings, in part, with a lower level of encryption than promised.”^[71] On November 9, 2020, a settlement was reached, requiring the company to implement additional security measures.^[72]

In December 2020, Zoom announced that it was under investigation by the U.S. Securities and Exchange Commission (SEC) and the United States Attorney for the Northern District of California and that it had received a subpoena in June 2020 from the United States Attorney for the Eastern District of New York requesting information on the company’s interactions with foreign governments and political parties. Both federal prosecutors also sought information and documentation about security and privacy matters regarding Zoom’s practices.^[73]

On December 19, 2020, a former Zoom executive was charged by the U.S. Department of Justice with conspiracy to commit interstate harassment and unlawful conspiracy to transfer a means of identification. The charges are related to the alleged disruptions to video meetings commemorating the 1989 Tiananmen Square protests and massacre.^[74] Federal prosecutors in Brooklyn, New York, said that Xinjiang “Julien” Jin, then 39, was a San Jose, California–based company’s main liaison with intelligence and law enforcement agencies of China. Zoom later acknowledged it was the company in question. It said in a statement that it had terminated Jin’s employment for violating company policies and was cooperating with the prosecutors. Jin is not in custody because he is based in China.^[75][76]

In February 2021, Zoom announced a new feature called Kiosk Mode, which will allow people visiting offices to check in with a receptionist virtually on a kiosk, without any physical contact.^[77]

In March 2021, Zoom announced that from August 23, 2021, Zoom will stop selling new and upgraded products directly to customers in mainland China.^[78][79]

In 2021, Zoom agreed to pay $85 million dollars to settle a class action lawsuit over the company’s alleged sharing of data with Facebook, Linkedin, and Google.

Censorship

[edit]

In April 2020, Citizen Lab warned that having much of Zoom’s research and development in China could “open up Zoom to pressure from Chinese authorities.”^[80] In June 2020, Zoom was criticized for closing multiple accounts of U.S. and Hong Kong–based groups, including that of Zhou Fengsuo and two other human rights activists, who were commemorating the 1989 Tiananmen Square protests and massacre. The accounts were later re-opened, with the company stating that in the future it “will have a new process for handling similar situations.”^[47] Zoom responded that it has to “comply with local laws,” even “the laws of governments opposed to free speech.”^[81][82][83] Zoom subsequently admitted to shutting down activist accounts at the request of the Chinese government.^[84] In response, a bi-partisan group of U.S. senators requested clarification of the incident from the company.^[85] Partially in response to criticisms of its blocking of the activists accounts as well as expressions of concern by the United States Justice Department, Zoom moved to cease direct sale of its product in mainland China in late August 2020.^[86]

In September 2020, following protests and legal concerns raised by the Jewish coalition group #EndJewHatred, Zoom prevented San Francisco State University from using its video conferencing software to host former Palestinian militant and hijacker Leila Khaled, a member of the Popular Front for the Liberation of Palestine (PFLP). In justifying its decision, Zoom cited the PFLP’s designation as a terrorist organization by the United States Government and its efforts to comply with U.S. export control, sanctions, and anti-terrorism laws. Facebook and YouTube also joined Zoom in denying their platforms to the conference organizers. Professor Rabab Ibrahim Abdulhadi, one of the conference organizers, criticized Zoom, Google’s YouTube and Facebook for censoring Palestinian voices.^{[87][88][89][90]}

Zoom (stylized as all lowercase) is a proprietary videotelephony software program developed by Zoom Video Communications. The free plan allows up to 100 concurrent participants, with a 40-minute time restriction. Users have the option to upgrade by subscribing to a paid plan, the highest of which supports up to 1,000 concurrent participants for meetings lasting up to 30 hours.^[4]

History

[edit]

Further information: Zoom Video Communications

A beta version of Zoom that could host conferences with only up to 15 video participants was launched on August 21, 2012.^[5] On January 25, 2013, version 1.0 of the program was released with an increase in the number of participants per conference to 25.^[6] By the end of its first month, Zoom had 400,000 users. By 2013, Zoom had more than one million users.^[7] After the start of the COVID-19 pandemic, by February 2020, Zoom had gained 2.22 million users in 2020 – more users than it amassed in the entirety of 2019.^[8][9] In March 2020, the Zoom app was downloaded 2.13 million times.^[10][11]

During the COVID-19 pandemic, there was a major increase in the use of Zoom for remote work, distance education,^[12] and online social relations.^[13] Zoom was one of the most downloaded mobile apps worldwide in 2020 with over 500 million downloads.^[14]

As of April 2020, Zoom had more than 300 million daily meeting participants (calculated as the number of times someone joins a meeting, which can happen multiple times per day).^[15][16]

Features

[edit]

Zoom One has six tiers: Basic, Pro, Business, Business Plus, Enterprise, and Enterprise Plus.^[17][18] Zoom is compatible with Windows, macOS, iOS, Android, ChromeOS, and Linux. It is noted for its simple interface and usability, regardless of technological expertise.^[19][20] Features include one-on-one meetings, group video conferences, screen sharing, plugins, browser extensions, and the ability to record meetings and have them automatically transcribed.^[21] On some computers and operating systems, users are able to select a virtual background, which can be downloaded from different sites, to use as a backdrop behind themselves.^[22]

Use of the platform is free for video conferences of up to 100 participants at once, with a 40-minute time limit. There is a 10-minute timeout period between free 40-minute meetings. For longer or larger conferences with more features, paid subscriptions are available. Features geared towards business conferences, such as Zoom Rooms, are also available.^[19][22][23] Up to 49 people can be seen on a desktop or laptop screen at once,^[24] up to 4 people per screen in iPhone and Android mobile phones and tablet computers, and up to 16 people per screen on iPad.

Zoom security features include password-protected meetings, user authentication, waiting rooms, locked meetings, disabling participant screen sharing, randomly generated IDs, and the ability for the host to remove disruptive attendees.^[25] As of June 2020, Zoom began offering end-to-end encryption to business and enterprise users, with AES 256 GCM encryption enabled for all users.^[26] In October 2020, Zoom added end-to-end encryption for free and paid users. It is available on all platforms, except for the official Zoom web client.^[27][28]

Zoom also offers a transcription service using Otter.ai software that allows businesses to store transcriptions of the Zoom meetings online and search them, including separating and labeling different speakers.^[29]

In July 2020, Zoom Rooms and Zoom Phone became available as hardware as a service products.^[30] As of July 2022, Zoom Phone is available for domestic telephone service in 47 countries, and the company has sold 3 million seats for the service.^[31] Zoom for Home, a category of products designed for home use, became available in August 2020.^[32] Zoom Phone Provider Exchange, which gives customers options for voice services, reaches more than 70 countries.^[31] In July 2022, an option was added on Zoom Phone to turn on end-to-end encryption during one-on-one calls between users on the same company account.^[33]

In September 2020, Zoom added new accessibility features to make the app easier to use for those who are deaf, hard of hearing, or visually impaired. New features include the ability to move around video windows in gallery view, pin video windows to be spotlighted; improved keyboard shortcuts; new tools to adjust the size of closed captioning text; and sign language interpreters’ windows can now sit directly next to the speaker.^[34]

In October 2020 at Zoomtopia, Zoom’s annual user conference, the company unveiled OnZoom, a virtual event marketplace with an integrated payment system where users can host and promote free or paid live events.^[35][36] With OnZoom, users will be able to schedule and host one-time events or event series for up to 1,000 attendees and sell tickets online.^[37] The company also announced Zoom Apps, a feature integrating third-party apps so they can be used within the Zoom interface during meetings. The first such apps were expected to be available around the end of 2020, from companies including Slack, Salesforce, Dropbox,^[35][37] and Qatalog. In October 2020, Zoom gave its users better security with an upgrade to end-to-end encryption for its online meetings network.^[38]

Also in October 2020, Zoom signed a carrier agreement with Global BT Business^[39] to offer a fully managed Zoom Meetings service featuring a choice of connectivity and integration with its global voice network.^[40]

In February 2021, Zoom added a “virtual receptionist” feature in the Kiosk Mode for Zoom Rooms. Created for in-person visitors to a business to interact in the lobby without physical contact.^[41]

On March 22, 2021, Zoom announced that it would start selling its videoconferencing technology as a white-label product, so other companies can embed it in their own products, with the calls running over Zoom but not carrying the company’s brand name.^[42]

In July 2021, Zoom released Zoom Apps which integrated a marketplace of third-party applications such as Dropbox Spaces, Asana, and SurveyMonkey.^[43]

In August 2021, Zoom launched Focus Mode, designed for use in educational settings.^[44][45] When active, the mode will hide participants’ screens from each other (though they can see each other’s names) while the host retains the ability to see everyone’s camera stream or screen share.^[46] The feature is available across all Zoom accounts, including free ones.^[47][48]

In September 2021 at Zoomtopia, the company announced that end-to-end encryption would now be available as an upgrade for Zoom Phone users. The company also announced Bring Your Own Key (BYOK) (for users to manage their own encryption keys that Zoom cannot access or see), Verified Identity (a multi-factor authentication feature working through Okta that allows users to confirm the identity of meeting participants), and Video Engagement Center (for businesses to digitally interact with customers).^[49][50] Other updates include revamped virtual whiteboard features, including touchscreen whiteboards that can be digitized for remote participants, and improved collaboration between Zoom Meetings and Zoom Chat.^[51]

In October 2021, the option to automatically generate closed captions in English for Zoom meetings was expanded to all accounts, including free ones. The feature had previously only been available for Premium users.^[52]

In April 2022, Zoom added features including gesture recognition, a virtual whiteboard, and Zoom IQ for sales.^[53][54] In February 2022, the company launched Zoom Contact Center, a cloud contact center optimized for video calls and integrated directly into Zoom.^[55]

In June 2022, Zoom One, which brings together chat, phone, whiteboard, and video conferencing capabilities into a single offering, was launched.^[18][56] Also in June 2022, Zoom opened its Zoom Apps developer program to all developers, via Zoom Apps SDK.^[18] With the release of Zoom One, the company offers video conferencing translation and captioning for 11 languages: English, simplified Chinese, Dutch, French, German, Italian, Japanese, Korean, Russian, Spanish, and Ukrainian. This feature is available with the Business Plus and Enterprise Plus plans.^[56]

Usage

[edit]

Zoom is used by a variety of individuals and private and public organizations, including banks, schools,^[57] universities, healthcare providers, and government agencies,^{[58][59][60][61]} and for ceremonies such as birthday parties,^[62] funeral services,^[63] and bar and bat mitzvah services.^[64][65] In 2020, Zoom formed a partnership with Formula One to create a virtual club where fans can go behind the scenes and take part in virtual activities through Zoom, beginning with the Hungarian Grand Prix.^[66][67] An article published in July 2020 in the San Francisco Chronicle noted a new real estate trend in San Francisco and Oakland where some listings include “Zoom rooms” with backdrops for Zoom calls.^[68]

Richard Nelson‘s play What Do We Need to Talk About? takes place on Zoom, with its main characters congregating online during the COVID-19 pandemic using the platform. Written and directed by Nelson, it was commissioned by The Public Theater and premiered on YouTube on April 29, 2020, as a benefit performance. The New Yorker called it “the first great original play of quarantine”.^[69] Oprah’s Your Life in Focus: A Vision Forward was a live virtual experience hosted by Oprah Winfrey on Zoom from May 16 through June 6, 2020.^[70] In Source Material’s 2020 play, In These Uncertain Times, directed by Samantha Shay, characters communicate on Zoom.^[71] The British found-footage horror film Host, directed by Rob Savage, features a group of young people attempting to contact spirits through a remote séance on Zoom, and premiered on Shudder in July 2020.^[72][73] A live reading of Kristoffer Diaz‘s 2009 play The Elaborate Entrance of Chad Deity over Zoom streamed on Play-PerView from August 15t to August 20, 2020.^[74][75] In the 2021 film Locked Down, directed by Doug Liman and starring Anne Hathaway and Chiwetel Ejiofor, characters communicate through Zoom conferences.^[76]

From July 3 to 4, 2020, the International Association of Constitutional Law and Alma Mater Europaea used Zoom Webinar to conduct the first “round-the-clock and round-the-globe” event, featuring 52 speakers from 28 countries and several time zones.^[77][78] Soon after, a format of conferences that “virtually travel the globe with the sun from East to West”,^[79] became common, some of them running for several days.^{[80][81][82][83]}

On September 17, 2020, a live table read of the script for the 1982 film Fast Times at Ridgemont High was hosted by Dane Cook, with performers including Brad Pitt, Jennifer Aniston, Julia Roberts, original cast member Sean Penn, Matthew McConaughey, Shia LaBeouf, Morgan Freeman (who served as the narrator), Jimmy Kimmel, Ray Liotta, and John Legend, to raise money for the charity CORE.^[84][85] The broadcast of the 72nd Primetime Emmy Awards on September 20, 2020, hosted by Jimmy Kimmel, featured nominees participating through Zoom.^[86] On an alternate music video for the 2020 single “Ice Cream” by Blackpink featuring Selena Gomez, the artists appeared via Zoom from their homes.^[87] The series Zoom Where It Happens, airing on Zoom as a partnership between Zoom and Black female artists, launched in September 2020 with a virtual table read of an episode of The Golden Girls, reimagined with an all-Black cast. The second episode featured an all-Black cast in a table read of an episode of Friends, hosted by Gabrielle Union and featuring Sterling K. Brown and Uzo Aduba.^[88][89] Familiarity with Zoom meetings in nation-state diplomatic and bureaucratic circles, partially due to the global COVID-19 pandemic, substantially contributed to the efficacy of the Western response to the 2022 Russian invasion of Ukraine^[90]

Reception

[edit]

Zoom has been criticized for “security lapses and poor design choices” that have resulted in heightened scrutiny of its software.^[91][92] Many of Zoom’s issues “surround deliberate features designed to reduce friction in meetings”, which Citizen Lab found to “also, by design, reduce privacy or security”.^[93][94] In March 2020, New York State Attorney General Letitia James launched an inquiry into Zoom’s privacy and security practices.^[95] The inquiry was closed on May 7, 2020, with Zoom not admitting wrongdoing, but agreeing to take added security measures.^[96] In April 2020, CEO Yuan apologized for the security issues, stating that some of the issues were a result of Zoom’s having been designed for “large institutions with full IT support”.^[97] He noted that in December 2019, Zoom had a maximum of 10 million daily meeting participants, and in March 2020 the software had more than 200 million daily meeting participants, bringing the company increased challenges.^[98] Zoom agreed to focus on data privacy and issue a transparency report.^{[99][100][101][102]} In April 2020, the company released Zoom version 5.0, which addressed a number of the security and privacy concerns. It includes passwords by default, improved encryption, and a new security icon for meetings.^[103] In September 2020, Zoom added support for two-factor authentication to its desktop and mobile apps; the security feature was previously Web-only.^[104]

As of April 2020, businesses, schools, and government entities who have restricted or prohibited the use of Zoom on their networks include Google,^[105] Siemens,^[106] the Australian Defence Force, the German Ministry of Foreign Affairs, the Indian Ministry of Home Affairs, SpaceX, and the New York City Department of Education.^[107][108] In May 2020, the New York City Department of Education lifted their ban on Zoom after the company addressed security and privacy concerns.^[109]

Privacy

[edit]

Zoom has been criticized for its privacy and corporate data sharing policies, as well as for enabling video hosts to potentially violate the privacy of those participating in their calls.^{[110][111][112]}

In March 2020, a Motherboard article found that the company’s iOS app was sending device analytics data to Facebook on startup, regardless of whether a Facebook account was being used with the service, and without disclosing it to the user.^[113] Zoom responded that it had been made aware of the issue and patched the app to remove the SDK after learning that it was collecting unnecessary device data. The company stated that the SDK was only collecting information on the user’s device specifications (such as model names and operating system versions) in order to optimize its service and that it was not collecting personal information.^{[22][114][115]} In the same month, Zoom was sued by a user in U.S. Federal Court for illegally and secretly disclosing personal data to third parties, including Facebook.^[116] Zoom responded that it “has never sold user data in the past and has no intention of selling users’ data going forward”.^[117]

In April 2020, a Zoom information gathering feature was found that automatically sent user names and email addresses to LinkedIn, allowing some participants to surreptitiously access LinkedIn profile data about other users without their express consent.^[118] Soon after, the companies disabled their integration.^[119] In May 2020, the Federal Trade Commission announced that it was looking into Zoom’s privacy practices.^[120] The FTC alleged in a complaint^[121] that since at least 2016, “Zoom maintained the cryptographic keys that could allow Zoom to access the content of its customers’ meetings, did not provide advertised end-to-end encryption, falsely claimed HIPAA compliance, installed the ZoomOpener webserver without adequate consent, did not uninstall the web server after uninstalling the Zoom App, and secured its Zoom Meetings with a lower level of encryption than promised.”^[122] On November 9, 2020, a settlement was reached, requiring the company to stop misrepresenting security features, create an information security program, obtain biannual assessments by a third party, and implement additional security measures.^[123]

Security

[edit]

Vulnerabilities

[edit]

In November 2018, a security vulnerability was discovered that allowed a remote unauthenticated attacker to spoof UDP messages that allowed the attacker to remove attendees from meetings, spoof messages from users, or hijack shared screens.^[124][125] The company released fixes shortly after the vulnerability was discovered.^[126] In July 2019, security researcher Jonathan Leitschuh disclosed a zero-day vulnerability allowing any website to force a macOS user to join a Zoom call, with their video camera activated, without the user’s permission.^[127] Attempts to uninstall the Zoom client on macOS would prompt the software to re-install automatically in the background using a hidden web server that was set up on the machine during the first installation so that it remains active even after attempting to remove the client. After receiving public criticism, Zoom removed the vulnerability and the hidden webserver to allow complete uninstallation.^[128] In April 2020, security researchers found vulnerabilities where Windows users’ credentials could be exposed.^[129][130] Another vulnerability allowing unprompted access to cameras and microphones was made public.^[131][132] Zoom issued a fix in April 2020.^[133]

Motherboard reported that there were two Zoom zero-days for macOS and Windows respectively, selling for $500,000, on April 15, 2020.^[134] Security bug brokers were selling access to Zoom security flaws that could allow remote access into users’ computers.^[20] Hackers also put up over 500,000 Zoom user names and passwords for sale on the dark web.^[20] In response to the multitude of security and privacy issues found, Zoom began a comprehensive security plan, which included consulting with Luta Security, Trail of Bits, former Facebook CSO Alex Stamos, former Google global lead of privacy technology Lea Kissner, BishopFox, the NCC Group, and Johns Hopkins University cryptographer Matthew D. Green.^[135]

On April 20, 2020, the New York Times reported that Dropbox engineers had traced Zoom’s security vulnerabilities back over two years, pushing Zoom to address such issues more quickly, and paying top hackers to find problems with Zoom’s software. In the same article, the New York Times noted that security researchers have praised Zoom for improving its response times, and for quickly patching recent bugs and removing features that could have privacy risks.^[20][22] In a blog post on April 1, 2020, CEO Yuan announced a 90-day freeze on releasing new features, to focus on fixing privacy and security issues within the platform.^[136] On July 1, 2020, at the end of the freeze, the company stated it had released 100 new safety features over the 90-day period. Those efforts include end-to-end encryption for all users, turning on meeting passwords by default, giving users the ability to choose which data centers calls are routed from, consulting with security experts, forming a CISO council, an improved bug bounty program, and working with third parties to help test security. Yuan also stated that Zoom would be sharing a transparency report later in 2020.^[137][138]

On November 16, 2020, Zoom announced a new security feature to combat disruptions during a session. The new feature was said to be a default for all free and paid users and made available on the Zoom clients for Mac, PC, and Linux, as well as Zoom mobile apps.^[139]

On August 12, 2022, Wired magazine reported on three separate security vulnerabilities discovered by security researcher Patrick Wardle affecting the Zoom Mac OS desktop app. The vulnerabilities allowed an attacker who already had access to the Mac device to perform a privilege escalation attack by installing malicious code using the app’s auto-update feature, thereby giving them full control over the victim’s device.^[140]

Zoombombing

[edit]

Further information: Zoombombing

“Zoombombing” is a phenomenon where uninvited participants join a meeting to cause disruption.^{[141][142][143]} In July 2019, security researcher Sam Jadali uncovered the DataSpii leak.^[144][145] This catastrophic leak was facilitated by a marketing intelligence company known as Nacho Analytics (NA), which provided its members access to the URLs of real-time Zoom meetings of firms such as Oracle, Dell, Walmart, Uber, UCLA and Capital One.^[146][147] NA’s dissemination of meeting URLs enabled its members to Zoombomb these meetings. In April 2020, Zoom increased its default security settings to mitigate Zoombombing.^[19] The company also created a new “report a user to Zoom” button, intended to catch those behind Zoombombing attacks.^[148]

Encryption practices

[edit]

Zoom encrypts its public data streams, using TLS 1.2 with AES-256 (Advanced Encryption Standard) to protect signaling, and AES-128 to protect streaming media.^[149] Security researchers and reporters have criticized the company for its lack of transparency and poor encryption practices. Zoom initially claimed to use “end-to-end encryption” in its marketing materials,^[150] but later clarified it meant “from Zoom end point to Zoom end point” (meaning effectively between Zoom servers and Zoom clients), which The Intercept described as misleading and “dishonest”.^[151] Alex Stamos, a Zoom advisor who was formerly security chief at Facebook, noted that a lack of end-to-end encryption is common in such products, as it is also true of Google Hangouts, Microsoft Teams, and Cisco Webex.^[152] On May 7, 2020, Zoom announced that it had acquired Keybase, a company specializing in end-to-end encryption, as part of an effort to strengthen its security practices moving forward.^[153][154] Later that month, Zoom published a document for peer review, detailing its plans to ultimately bring end-to-end encryption to the software.^[155]

In April 2020, Citizen Lab researchers discovered that a single, server-generated AES-128 key is being shared between all participants in ECB mode, which is deprecated due to its pattern-preserving characteristics of the ciphertext.^[156] During test calls between participants in Canada and United States, the key was provisioned from servers located in mainland China where they are subject to the China Internet Security Law.^[93]

On June 3, 2020, Zoom announced that users on their free tier will not have access to end-to-end encryption so that they could cooperate with the FBI and law enforcement.^[157] Later, they said that they do not “proactively monitor meeting content”.^[158] On June 17, 2020, the company reversed course and announced that free users would have access to end-to-end encryption after all.^[159]

On September 7, 2020, cryptography researcher Nadim Kobeissi accused Zoom’s security team of failing to credit his open-source protocol analysis research software, Verifpal, with being instrumental during the design phase of Zoom’s new encryption protocol, as described in their whitepaper published in June 2020.^[160] Kobeissi published a week’s worth of conversations with Zoom’s security leadership in support of his claim, including Max Krohn, which included eight Verifpal models that Zoom’s team asked for feedback on, promises of a citation to credit Kobeissi for his contributions and an admission that the Verifpal citation was pulled from the whitepaper at the last moment for unspecified reasons. Kobeissi also linked to a tweet by Zoom security consultant Lea Kissner which he described as a public character assassination attempt issued in response to his repeated requests to have his work cited in the research paper published by Zoom.^[161]

Data routing

[edit]

Zoom admitted that some calls in early April 2020 and prior were mistakenly routed through servers in mainland China, prompting some governments and businesses to cease their usage of Zoom.^[162] The company later announced that data of free users outside of China would “never be routed through China” and that paid subscribers will be able to customize which data center regions they want to use. The company has data centers in Europe, Asia, North America, and Latin America.^[163][164]

Regulatory issues

[edit]

In August 2021, the Data Protection regulatory body in Hamburg, Germany, ruled that Zoom was operating in the European Union in breach of the General Data Protection Regulation (GDPR). This is due to the fact that, as per the Schrems II ruling, data that is being transferred out of the EU must be given the same protections that provided by the GDPR. The data gathered by Zoom was being sent to the United States.^[165]

See also

[edit]

• List of video telecommunication services and product brands
• Impact of the COVID-19 pandemic on science and technology
• Zoom fatigue
• Zoom town

Signal Private Messenger

WhatsApp Business APK v2.24.3.14

Discord Apk: Talk, Chat & Hang Out 206.16 – Stable