...
This has been reported as happening to several meetings now, and has been reported online significantly. Zoom have now changed the default option for all new meetings so people joining the meeting are now put into a "Waiting Lobby" and have to be admitted by the host. Please be cautious when posting meeting links on public websites, though people can no longer immediately join the meeting directly, having to deal with unwanted people trying to join can be disruptive. We would also urge you to consider if Zoom is the best option, or if the meeting can be done in Microsoft Teams instead.
Zoom Security Tips
- Don't use your Personal Meeting ID for meetings - instead let Zoom allocate a random meeting ID (this is now the default for new meetings).
- Always password protect your meetings (this is now the default for new meetings).
- Use the Waiting Room to control access (this is now the default for new meetings).
- Restrict what participants can do - you can:
- Disable Screen sharing by participants
- Disable private chat between participants
- Don't let people rename themselves
- Disable annotation of shared screens by participants
The UIS also have a page with tips on using Zoom securely: https://help.uis.cam.ac.uk/service/security/cyber-security-awareness/wfh-security/zoom-security
| Warning | ||
|---|---|---|
| ||
Warning: The meeting URL created by Zoom allows someone to join the meeting without having to enter a password or the Meeting ID. We recommend this is only shared for private meetings, and only directly sent to participants. We suggest that if you are planning on posting the information publicly, or if there is a risk it may be shared, that you instead share the Meeting ID (the 9-digit number for the meeting) and then, separately and privately share the Meeting Password. |
...
| Warning | ||
|---|---|---|
| ||
Zoom offers the option to Record meetings. With a free account you can only record to your local PC - and by default it will record to your "Documents\Zoom" folder, with a new folder being created per meeting. Please be careful when recording meetings, if you are using a shared account on a PC (e.g. one of the Seminar Room logins) then the recording will be visible to anyone else who logs in with that account, unless you move or delete it. The video is not encrypted or password protected. With a paid account you are offered the option of saving the recording online - either to the Zoom Cloud Servers, or to another server of your choice. Please be extremely careful when using this, as the video is not encrypted or password protected, and as various news & security organisations have found people have been uploading confidential recordings to public or unsecured websites. Please also note that aside from these technical steps, there are the usual concerns about data and privacy - no Patient Identifiable Data should be used or discussed in the meeting, and the participants should consent to & be informed of the recording before the meeting is recorded, copyright for eventual published recordings and retention policy of recordings:
|