Newsletter IconFacebook IconX IconThreads IconInstagram IconYouTube IconPinterest Icon
Giveaway: Win an Ocypus Sigma L36 PRO 360mm AIO and Sigma F36 ARGB Fan

Zoom admits data was 'mistakenly' routed through China

Zoom is in deep doo-doo over its major security issues, CEO admits it 'mistakenly' routed calls and data through China.

Comments
Published
Updated
2 minutes & 15 seconds read time

Zoom is in serious doo-doo right now, with the videop conferencing provider now admitting that users' calls from around the world were routed through China.

Zoom admits data was 'mistakenly' routed through China 08

Zoom CEO Eric Yuan admitted that his company "mistakenly" routed calls through China, he explained: "In our urgency to come to the aid of people around the world during this unprecedented pandemic, we added server capacity and deployed it quickly - starting in China, where the outbreak began".

Yuan continued: "In that process, we failed to fully implement our usual geo-fencing best practices. As a result, it is possible certain meetings were allowed to connect to systems in China, where they should not have been able to connect".

Unfortunately, Yuan didn't say how many people were affected -- but I'm sure it's in the many millions of users.

Zoom is an interesting beast, as the video conferencing service will move traffic to the nearest data center which has the largest available capacity. However, Zoom's data centers in China are not supposed to be used to re-route non-Chinese users' calls. But, they did.

But it's not only that, as researchers at the University of Toronto found that the encryption used on Zoom's keys issued through servers in... China. This happened even when call participants were located outside of China.

The researchers explain: "During a test of a Zoom meeting with two users, one in the United States and one in Canada, we found that the AES-128 key for conference encryption and decryption was sent to one of the participants over TLS from a Zoom server apparently located in Beijing, 52.81.151.250".

They added: "A company primarily catering to North American clients that sometimes distributes encryption keys through servers in China is potentially concerning, given that Zoom may be legally obligated to disclose these keys to authorities in China".

More Reading on COVID-19 coronavirus

Photo of the Logitech HD Pro Webcam C920

Best Deals: Logitech HD Pro Webcam C920

* Prices may be inaccurate. As an Amazon Associate, we earn from qualifying purchases. We earn affiliate commission from any Newegg or PCCG sales.

Comments

Stay Updated

Follow TweakTown for breaking tech news, reviews, and daily updates.

Add TweakTown as a preferred source on GoogleFind TweakTown on Apple News
Newsletter Subscription