#324: You Installed a What?

Today we’re talking about Zoom Video Communications and the security fiasco that they recently went through, with special guest Dermot Daly. In particular, we talk about how we should think about security in our products, and how we can avoid similar security (and public relations) disasters in our own businesses. Release Notes 2019 We’re happy to announce that Release Notes 2019, the fourth edition of our conference, will be happening October 3-5, 2019 in Playa Mujeres, Quintana Roo, Mexico. We’re really excited about the move to Mexico and the extra opportunities that the change in venue will provide. Get your ticket today at 2019.releasenotes.tv! Mailing List Every month there are more great articles and content about the business of Mac and iOS development than we have time to discuss on the show. If you’d like to receive our monthly newsletter with the best of these links, be sure to sign up for our mailing list at http://releasenotes.tv/mailinglist. Show Notes and Links @dermdaly – Dermot Daly on Twitter Tapadoo – Dermot’s iOS development business Zoom security flaw could let websites turn on your Mac’s webcam without permission – A very good summary of the Zoom security flaw and its aftermath Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website! – The original public vulnerability report Dermot’s Tweet – The tweet thread that started today’s conversation Correction: In this conversation, Charles erroneously claimed that Zoom’s stock had almost doubled in value since the vulnerability was revealed. It turns out that Charles was looking at the wrong stock. (He was looking at ZOOM instead of ZM.) In fact, the stock price for Zoom Video Communication is only up about 13% since the vulnerability report. But still it’s up. Which is probably sending the wrong message to the company.