"ZOOM’S ENCRYPTION IS “NOT SUITED FOR SECRETS” AND HAS SURPRISING LINKS TO CHINA, RESEARCHES DISCOVER" https://theintercept.com/2020/04/03/zooms-encryption-is-not-suited-for-secr… (Tons or more articles online about Zoom as well.) On Sat, Apr 4, 2020 at 1:34 PM danarauz(a)gmail.com <danarauz(a)gmail.com> wrote:

Jitsi? On Sat, Apr 4, 2020, 1:58 PM Tony Godshall <togo(a)of.net> wrote:

Hey Steve, thank you for taking your time reading and replying to my email. I can only imagine the frustration they may have felt, circa 2015, that made them to put their privacy in the corporate's privacy grinder. I hope that the participants for tomorrow's Crypto Party were notified that by installing Zoom, it would be like installing malware in their own devices. I wish that those NoiseBridge folks that care less for Privacy would rethink their position, because, IMHO, NoiseBridge is giving a bad example. And I agree with you. We, even folks like myself that are not coders, should do more supporting the open source community. Because, *Privacy is dying, a*nd we all have the moral responsibility to do our part to keep it alive. And last but not least, thank you (and james) for spinning up that RocketChat, and the other platforms that I am aware you have running. I appreciate your work. Thanks, Daniel On Sat, Apr 4, 2020 at 6:13 PM Steve Phillips <steve(a)tryingtobeawesome.com> wrote:

Hey, I agree with the issues @danarauz is bringing up. My ideal communication stack is: riot.im for chat, jitsi <https://jitsi.org/> for conferences, etherpad <https://etherpad.org/> for note-taking. In practice, I use all the things ¯\_(ツ)_/¯ My desire is to help increase adoption of FOSS tools used across society, from our medical devices (like OpenBCI, OpenEIT, etc), our security devices (SoloKeys and OpenSK), our communication tools, etc. So all the words that follow are coming from within that 'context' Due to an increased presence in 'virtual meetings', I've been wanting to create my own jitsi server (following the docs here: https://github.com/jitsi/jitsi-meet/blob/master/doc/quick-install.md ) and integrating it with etherpad to help the SF NeurotechX meetups migrate from Zoom (the group also uses Slack, but it will be much harder to migrate them off of that platform, due to social + historical reasons). It was actually fairly easy to setup, and I have it running here: https://meet.dendritictech.com/ If anyone wants access to it, and has a reason like wanting a more secure platform to host meetings on, feel free to reach out. As well as if you want technical advice on how to set this up. It should be easy if you have a credit card or a raspberry pi (or old laptop..etc). Noisebridge could have a meet.noisebridge.info jitsi service. I encourage "*going the opensource + self-hosted route*" when possible for these kinds of organizational tools--especially if it can be conceived of as an educational and supportive activity. The opensource model also has advantages of lower operational cost in the long run. And supporting an opensource project is just a really great thing in general, whether it's through code/bug/document contributions, hosting, educating, financially supporting, etc. It's always great to be a part of a cool community. And just a little message about the sponsors: Slack runs out of messages in the free plan, which is *information* loss for the user (but not for slack). And *privacy* has a cost, Google and Facebook do not profit on scraps--they feast on the juicy morsels that are us mortals. Zoom seems to be something else entirely with regards to how they've built such an oddly persistent insecure service, there are two specific examples that are etched in recent memory: - July 2019, APPLE FORCED TO REMOVE INSECURE ZOOM APP -- techcrunch article <https://techcrunch.com/2019/07/10/apple-silent-update-zoom-app/>, initial post of vulnerability + timeline <https://medium.com/bugbountywriteup/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5> - April 2020, ZOOM NOT SECURE -- citizenlab report <https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick-look-at-the-confidentiality-of-zoom-meetings/> You can never fully trust a closed source company, no The citizenlab report would actually be a great topic probably for the cryptoparty being held tomorrow on Zoom. Best, John On Sat, Apr 4, 2020 at 10:10 PM Steve Phillips &lt;steve(a)tryingtobeawesome.com&gt; wrote: