Re: [irsg] Meetecho for interims?

[Carsten Bormann <[e-mail]>]

OK, this is getting a bit off-topic…  Apologies.

>>>>> 
>>>>> At least, with Webex, I can be reasonably sure about the absence of criminal intent of the operator.
>>>> 
>>>> That is a very serious allegation that you are making without evidence.
>>>> 
>>>> -Jim
>>>> 
>>> 
>>> I was just thinking the same thing.
>> 
>> Actually, it is a statement of fact: I feel way more secure with software from Cisco than with software from Zoom Video Communications (ZVC), because I have good reason not to be certain about ZVC’s corporate intent.  I didn’t know there would be an expectation that I would embellish this simple fact with formal indictment papers.
> 
> Thats not what you wrote and I think you know the difference (hence the rest of the email)!

Right, I wrote that *with Webex* I can be reasonably sure of the absence of criminal intent of the operator.

> Incompetent sure,  but how does this show criminal intent?

I’m not a lawyer, so I cannot answer that question.

But declaring that intentionally installing malware on my computer (that makes it vulnerable to first and third party attacks) is exactly what this company does, is *something*.
I can report that it (and the time I now had to waste cleaning up my computer) destroyed any trust I might have had in this company to heed basic corporate responsibility — this incident was no longer grossly negligent, this was intentional.  Hence my statement of uncertainty about what they will do in the future.

> Srsly if I had a € for every ass-backwards handling of a vulnerability I’ve come across ... but to each her own , thx for the details!

I continue to see a difference between badly handling a wide open backdoor and a statement that installing such backdoors is just the way the company intends to do business.

We have grown such a deep distrust of software vendors that we may think the behavior we have seen here may be just the way it is.  Not so.  And we have to stop simply ignoring such behavior, or worse, becoming apologetic of it.

Grüße, Carsten