diff options
Diffstat (limited to 'content/entry/the-tipping-point-rejecting-windows-zoom-lockdown-browser-and-the-lockdown-monitor.md')
| -rw-r--r-- | content/entry/the-tipping-point-rejecting-windows-zoom-lockdown-browser-and-the-lockdown-monitor.md | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/content/entry/the-tipping-point-rejecting-windows-zoom-lockdown-browser-and-the-lockdown-monitor.md b/content/entry/the-tipping-point-rejecting-windows-zoom-lockdown-browser-and-the-lockdown-monitor.md index d8e5afb..0a54a84 100644 --- a/content/entry/the-tipping-point-rejecting-windows-zoom-lockdown-browser-and-the-lockdown-monitor.md +++ b/content/entry/the-tipping-point-rejecting-windows-zoom-lockdown-browser-and-the-lockdown-monitor.md @@ -9,16 +9,16 @@ This semester I took networking at [SIUe](https://www.siue.edu). Networking is a # Story ## Windows -The first software freedom issue I had in this class had to do with the Wiresharks labs. [Wireshark](https://www.wireshark.org/) is free software that can be used to capture and analyze network traffic. So there was no issue with Wireshark. Actually, the issue was with the assignment instructions. The instructions were written so that some tasks had to be performed outside of Wireshark and screenshotted. If I remember correctly Professor X said he did not make any changes to the assignment before giving us the assignment. The assignments were actually obtained from the [University of Massachusetts, Amherst](https://gaia.cs.umass.edu/kurose_ross/wireshark.htm). The DHCP Wireshark lab contained instructions that only work on Windows. +The first software freedom issue I had in this class had to do with the Wiresharks labs. [Wireshark](https://www.wireshark.org/) is free software that can be used to capture and analyze network traffic. So there was no issue with Wireshark. Actually, the issue was with the assignment instructions. The instructions were written so that some tasks had to be performed outside of Wireshark and screenshotted. If I remember correctly Professor X said he did not make any changes to the assignment before giving us the assignment. The assignments were actually obtained from the [University of Massachusetts, Amherst](https://gaia.cs.umass.edu/kurose_ross/wireshark.php). The DHCP Wireshark lab contained instructions that only work on Windows. It wouldn't have been hard for me to find the equivalent commands on GNU/Linux, but by this point I realized that me doing all the legwork to get things working on GNU/Linux ultimately doesn't do much good. It gets me by but it doesn't help other students or have any effect moving coursework toward using free software. So instead, I decided I wasn't going to do the extra work myself, and instead included a note in my completed assignment submission stating that I don't own a Windows machine and wouldn't use it. So I downloaded the Wireshark trace from the University of Massachusetts (the assignment said we could do this if we couldn't get Wireshark to capture). I imported it into Wireshark and used it for the duration of the assignment. -Back in class after the assignment was graded, Professor X announced that students would no longer be permitted to download the trace from the University of Massachusetts. It would have to be captured manually by following the Windows-only instructions. This swiftly closed the loophole I used to bypass using Windows. Therefore, it is no longer possible to take networking with Professor X without using Windows unless you want to do extra work. And by the way, this is one of, if not the most ardent GNU/Linux professors at SIUe based on my experience. He said in class that he uses [Arch](https://www.archlinux.org/) and is comfortable doing things in the terminal. The point I'm trying to get across is that if you want to only use free software, do not study at SIUe. It is not a free software friendly university and you will struggle trying to work around that. +Back in class after the assignment was graded, Professor X announced that students would no longer be permitted to download the trace from the University of Massachusetts. It would have to be captured manually by following the Windows-only instructions. This swiftly closed the loophole I used to bypass using Windows. Therefore, it is no longer possible to take networking with Professor X without using Windows unless you want to do extra work. And by the way, this is one of, if not the most ardent GNU/Linux professors at SIUe based on my experience. He said in class that he uses [Arch](https://archlinux.org/) and is comfortable doing things in the terminal. The point I'm trying to get across is that if you want to only use free software, do not study at SIUe. It is not a free software friendly university and you will struggle trying to work around that. ## Zoom -After the corona virus lockdown was declared in Illinois and the university shut down all classes on campus, the lectures needed a way to continue. Professor X went for [Zoom](https://zoom.us/). Zoom is proprietary crapware. You can download Zoom on your computer or use it through the browser which probably requires proprietary JavaScript and camera and microphone access. I emailed Professor X if there was another way I could watch the lectures. To accommodate me, he began recording the meetings and emailing them to everyone. However, he said he was still taking attendance with Zoom unfortunately. So I found out it's possible to use [SIP](https://www.wikipedia.org/wiki/Session_Initiation_Protocol). I attempted to set up an SIP account so I could use Zoom, but then I quickly gave up on that and decided on just using the recordings. I felt that I shouldn't have to do extra legwork to avoid using proprietary software. If professors are going to suggest proprietary software to students, which they shouldn't, then they should at least offer a free software alternative that works equally well. Of course, Zoom in the long run is turning out to be a disaster as proprietary software often does. +After the corona virus lockdown was declared in Illinois and the university shut down all classes on campus, the lectures needed a way to continue. Professor X went for [Zoom](https://zoom.us/). Zoom is proprietary crapware. You can download Zoom on your computer or use it through the browser which probably requires proprietary JavaScript and camera and microphone access. I emailed Professor X if there was another way I could watch the lectures. To accommodate me, he began recording the meetings and emailing them to everyone. However, he said he was still taking attendance with Zoom unfortunately. So I found out it's possible to use [SIP](https://en.wikipedia.org/wiki/Session_Initiation_Protocol). I attempted to set up an SIP account so I could use Zoom, but then I quickly gave up on that and decided on just using the recordings. I felt that I shouldn't have to do extra legwork to avoid using proprietary software. If professors are going to suggest proprietary software to students, which they shouldn't, then they should at least offer a free software alternative that works equally well. Of course, Zoom in the long run is turning out to be a disaster as proprietary software often does. -I want to elaborate a bit on how Zoom is turning out to be a disaster. Zoom is a privacy nightmare. It actually has an attention tracking feature documented in the [knowledge base](https://web.archive.org/web/20200310192605/https://support.zoom.us/hc/en-us/articles/115000538083-Attendee-attention-tracking) which creepily allowed hosts of a Zoom meeting to track if the participants were paying attention or not. The CEO addressed [multiple issues](https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/). One issue was uninvited participants joining and crashing conferences. Another was that the iOS client contained the Facebook SDK. Facebook is a surveillance monster, so of course that was an absolute privacy disaster and it had to be removed. Zoom video and audio doesn't even have end-to-end encryption according to [this article](https://theintercept.com/2020/03/31/zoom-meeting-encryption/). Hackers quickly found a way to exploit Zoom to expose Windows passwords and showed a screenshot of it on [Twitter](https://nitter.net/hackerfantastic/status/1245133371262619654). Some Zoom calls may have been routed through China, where geofencing should have prevented this. [The CEO didn't say how many users could have been effected](https://www.businessinsider.com/china-zoom-data-2020-4). China does not enforce laws about personal data privacy so who knows if the calls got collected, stored, or analyzed. +I want to elaborate a bit on how Zoom is turning out to be a disaster. Zoom is a privacy nightmare. It actually has an attention tracking feature documented in the [knowledge base](https://web.archive.org/web/20200310192605if_/https://support.zoom.us/hc/en-us/articles/115000538083-Attendee-attention-tracking) which creepily allowed hosts of a Zoom meeting to track if the participants were paying attention or not. The CEO addressed [multiple issues](https://web.archive.org/web/20200404225143if_/https://blog.zoom.us/wordpress/2020/04/01/a-message-to-our-users/). One issue was uninvited participants joining and crashing conferences. Another was that the iOS client contained the Facebook SDK. Facebook is a surveillance monster, so of course that was an absolute privacy disaster and it had to be removed. Zoom video and audio doesn't even have end-to-end encryption according to [this article](https://theintercept.com/2020/03/31/zoom-meeting-encryption/). Hackers quickly found a way to exploit Zoom to expose Windows passwords and showed a screenshot of it on [Twitter](https://x.com/hackerfantastic/status/1245133371262619654). Some Zoom calls may have been routed through China, where geofencing should have prevented this. [The CEO didn't say how many users could have been effected](https://www.businessinsider.com/china-zoom-data-2020-4). China does not enforce laws about personal data privacy so who knows if the calls got collected, stored, or analyzed. So now some universities are rushing over to Microsoft Teams, which will also be a privacy and security disaster forced upon students yet again. They are just going from one proprietary privacy disaster to the next when the best solution is to just use free software. Teams is proprietary and the Teams website requires proprietary JavaScript and perhaps worse a Microsoft account where you must agree to their insane terms of service. So at this point you may be wondering, what free software is out there that would be reasonable for schools to use that would be better? [Jitsi](https://jitsi.org/jitsi-meet/) seems like a very viable alternative. It allows video calling, voice calling, meetings between an unlimited number of participants, and no sign up or account required. I'm not sure about the encryption and data privacy it has, but at least you know it doesn't come with the Facebook SDK. Besides, there is also [Matrix](https://matrix.org/) which is cross-platform and has multiple clients. There are free software options available that universities should be looking into rather than all jumping onboard the Zoom train, then jumping onto the Teams train after Zoom derailed. |