How To Zoom Securely And Prevent Zoom-bombing Attacks

In these days when the COVID-19 coronavirus is disrupting normal ways of working and social life, video conferencing apps like Zoom are being adopted by individuals and organizations at an alarming rate.

For years, Zoom has been used as an effective video conferencing tool by different companies and organizations. However, in the last few months, there has been a surge in the number of zoom users. With the social distancing rules in place, many organizations have been forced to host meetings virtually.

But lately, Zoom has been drawing more attention from researchers and techies for a number of potential privacy and security issues. One of the biggest security issues facing Zoom is the surge in “Zoombombing,” when uninvited attendees break into and disrupt your meeting.

Similarly, at this crucial time when the stakes are getting higher, rumors of security risks have also been going around other virtual-conferencing services. Thus making the matter a bit more perplexing.

Zoom CEO Eric Yuan responded to concerns, saying Zoom will freeze feature updates to address security issues, aiming to address them in the next 90 days.

For internet trolls and hackers, Zoombombing a meeting can be quite easy. A quick Google search for URLs that contain “Zoom.us” will, in many cases, bring up the insecure links to several meetings in which anyone can join. Similarly, links to public meetings can be found on several organizational sites scattered all over social media.

Although there are no assurances against dedicated trolls, when using Zoom, there are several ways to hedge your bets and boost your overall privacy level. Here are a few tips to get you started.

Zoom App settings you should change

There are some easy settings you can change before your Zoom meeting begins that will allow you to reduce the likelihood of intrusion by uninvited guests, and generally bolster your privacy overall.

  • Don’t use your Personal Meeting ID for the meeting. Instead, use a per-meeting ID, exclusive to a single meeting. Zoom’s support page offers a video walk-through on how to generate a random meeting ID for extra security.
  • Enable the “Waiting Room” feature so that you can see who is attempting to join the meeting before allowing them access. Like many other Privacy functions, a skillful disrupter can sometimes bypass this control, but it helps to put another hurdle in their route to chaos.

Zoom offers a support article here as well. To enable the Waiting Room feature, go to Account Management > Account Settings. Click on Meeting, then click Waiting Room to enable the setting.

  • Disable other options, including the ability for others to Join Before Host (it should be disabled by default, but check to be sure — see below). Then disable screen-sharing for nonhosts, and also the remote control function. Finally, disable all file transferring, annotations and the autosave feature for chats.

To disable most of these features, click on the gear-shaped Settings icon on the upper-right side of the page after you’ve logged in. From there, you’ll see the option to turn off most of the listed features.

Disabling screen-sharing is a bit different, but just as easy. Go to the host controls at the bottom of your screen, and you’ll see an arrow next to Share Screen. Click the arrow, then click Advanced Sharing Options. Go to Who can share? Click Only Host, then close the window.

  • Once the meeting begins and everyone is in, lock the meeting to outsiders (see our tips below) and assign at least two meeting co-hosts. The co-hosts will be able to help control the situation in case anyone bypasses your efforts and gets into the meeting.

To deputize your co-hosts, go to the same Settings icon, then to the Meetings tab. Scroll down to Co-host and make sure it is enabled. If Zoom asks you for verification, click Turn On.

What to do if someone Zoombombs your video chat

It happened. Despite your careful efforts of prevention, some jackal has gotten into the meeting to cause chaos for kicks. Short of ending the meeting entirely, here are a few things you can do to try and get rid of them.

  1. Lock them out. Go to the Participants List in the navigation sidebar, and scroll down to More. Click Lock Meeting to stop further participants from entering the meeting and to be able to remove participants.
  2. Shut them up. Have yourself or one of your co-hosts go to the Participants List, again scrolling down to the bottom, and click Mute All Controls. This makes it so the unwelcome participant can’t use their microphone to disrupt your audio.
Share

Leave a Reply

Your email address will not be published. Required fields are marked *