For sale on the dark web: +500,000 Zoom accounts, some at less than a penny each

[xeni]

Originally published at: https://boingboing.net/2020/04/13/for-sale-on-the-dark-web-500.html

‘The purchased accounts include a victim’s email address, password, personal meeting URL, and their HostKey’

[DiveGirl]

[insert surprised face here]

[Senorwences]

If I give them my account can they just go to my meetings for me?

[politeruin]

Zoom is a dumpster fire of privacy and security violations and why i will not use it. Trying to convince others not to is like screaming into the void… ‘But you can change your background to the bridge of the enterprise! ’

[PsiPhiGrrrl]

@politeruin

‘But you can change your background to the bridge of the enterprise! ’

Well, they should’ve led with that if they really wanted me to install it! All I got was an invitation to a virtual meeting designed to reduce the sense of isolation I never had in the first place.

[politeruin]

I get it, i really do. An organisation i’m involved with has moved over to zoom from slack for video conf because of slack’s limit to how many users can join a call but zoom is just rotten garbage with a privacy policy full of weasel wording.

https://www.schneier.com/blog/archives/2020/04/security_and_pr_1.html

[Rita_Lynn]

Yeah, and the same amount of bank accounts, credit cards, debit cards, and anything else someone might want in anyway for any reason is on the dark web, too. Nothing is safe on the internet. Sometimes pictures of kitties and doggos are though. Here’s my kitty sleeping today

[RickMycroft]

In this case, they seem to be using passwords gathered from previous dumpster fires.

Sad that it works with so many people, but here we are.

[YankInNewZealand]

you need to have a really, really good password; like, say…

“Box350BostonMass02134”