Re: [DNG] Zoom?

2020-08-05 Thread Lars Noodén via Dng
On 8/4/20 3:58 PM, Hendrik Boom wrote:
[...]> Normally, I use the Zoom app on my Android tablet, where I keep no
> critical information.

If video is not needed, then consider using Mumble [1].  It is
exceptionally easy to set up, both from the client perspective and the
user perspective.  There are a lot of optional server-side configuration
extras to consider and those can take some reading [2] but it works out
of the box for the basics.

The sound quality is nice and the system requirements are quite low.
For privacy and availability, it is Free and Open Source Software and
uses open standards along with respectable encryption.

/Lars

[1] https://wiki.mumble.info/wiki/FAQ

[2] https://wiki.mumble.info/wiki/ACL_and_Groups#Examples
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom?

2020-08-05 Thread Simon Hobson
Steve Litt  wrote:
> 
> On Wed, 5 Aug 2020 08:28:12 +1000
> Ozi Traveller via Dng  wrote:
> 
>> Yes that is the reason for teams.
>  
> 
> What do  you mean by "that"?

He'd be referring to my comment :
>>> That's fine if anyone you want to chat with also uses Teams.

Presumably he's switching to Teams because the people he needs to deal with 
have switched to it. That's the problem - just because you or I don't want to 
use a particular option, doesn't mean we can avoid doing so if we have a need 
to deal with people and they have made that decision.
At the day job we are starting to use Teams. I can see a lot going for it, but 
it also looks like more of the same slow, clumsy, eye candy we've come to 
expect from MS.

Simon

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom?

2020-08-05 Thread Haines Brown
On Tue, Aug 04, 2020 at 01:34:59PM +0100, ael wrote:
> On Mon, Aug 03, 2020 at 07:58:26PM -0400, Haines Brown wrote:
> > I've been relying on zoom on a laptop runnding debian. But there's a 
> > problem with it and I want to install zoom on beowulf 3. 
> > 
> > But there's no zoom in the beowulf repository. Do I have to download 
> > debian's zoom .deb? 

I've enjoyed and benefitted from this discussion, and I thank one and 
all. 

I've installed the .deb file on my bewowulf 3 deskotop. It seems like 
it would work. I'll give it try next time ther is a zoom meeting. 

Incidenttally is there a public site that one can use to test zoom?

I gave up trying to install zoom in on an old ASCII machine 
because all the dependencies. 

I understand the security advantages of using zoom on a laptop not 
much used for anything else. I suppose the sercurity conern is files 
being accessible to intruders. Someone made the interesting suggestion 
of settin up a new account just for zoom. What is wrong with this? 
Could zoom be used to access files not owned by user?

I should mention the the problem running zoom on my laptop (Thknkpad 
X250). After a short shile (a few minutes) I loose outgoing sound. I 
have video and sound in, but sound out out stops. I do nothing to the 
machine during the sesison. This happens each time I run zoom. Anyone 
have any ideas?

-- 
Haines Brown  
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom?

2020-08-05 Thread Hendrik Boom
On Wed, Aug 05, 2020 at 03:39:53PM -0400, Haines Brown wrote:
> 
> I should mention the the problem running zoom on my laptop (Thknkpad 
> X250). After a short shile (a few minutes) I loose outgoing sound. I 
> have video and sound in, but sound out out stops. I do nothing to the 
> machine during the sesison. This happens each time I run zoom. Anyone 
> have any ideas?

Might the moderator perhaps be muting you or everybody?

-- hendrik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom?

2020-08-05 Thread ael
On Wed, Aug 05, 2020 at 03:39:53PM -0400, Haines Brown wrote:
> On Tue, Aug 04, 2020 at 01:34:59PM +0100, ael wrote:
> > On Mon, Aug 03, 2020 at 07:58:26PM -0400, Haines Brown wrote:
> > > I've been relying on zoom on a laptop runnding debian. But there's a 
> > > problem with it and I want to install zoom on beowulf 3. 
> > > 
> > > But there's no zoom in the beowulf repository. Do I have to download 
> > > debian's zoom .deb? 
> 
> Incidenttally is there a public site that one can use to test zoom?

There is an automated test session on the zoom site. Good plac to check
out audio and video setting. It does *not* require pulseaudio: it works
with simple alsa.

ael

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom?

2020-08-05 Thread Haines Brown
On Wed, Aug 05, 2020 at 10:17:26PM +0100, ael wrote:
> On Wed, Aug 05, 2020 at 03:39:53PM -0400, Haines Brown wrote:
> > On Tue, Aug 04, 2020 at 01:34:59PM +0100, ael wrote:
> > > On Mon, Aug 03, 2020 at 07:58:26PM -0400, Haines Brown wrote:
> > > > I've been relying on zoom on a laptop runnding debian. But there's a 
> > > > problem with it and I want to install zoom on beowulf 3. 
> > > > 
> > > > But there's no zoom in the beowulf repository. Do I have to download 
> > > > debian's zoom .deb? 
> > 
> > Incidenttally is there a public site that one can use to test zoom?
> 
> There is an automated test session on the zoom site. Good plac to check
> out audio and video setting. It does *not* require pulseaudio: it works
> with simple alsa.

Thank you. Now I see the link to the test site. Interestingly, my 
laptop from whih I've been running zoom fails to open the test 
site (the Open link dialog hangs). My desktop does just fine. me?

To what extent would I achieve some security if I were to create a new 
account, say named zoom, and run zoom in it?

-- 
Haines Brown  
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom? Rather not...

2020-08-05 Thread marcxdv
> I understand the security advantages of using zoom on a laptop not 
> much used for anything else. I suppose the sercurity conern is files 
> being accessible to intruders. Someone made the interesting suggestion 
> of settin up a new account just for zoom.

The concern about using any gratis commercial videoconferencing
service is that quite a bit of biometric information can be
collected from you - in particular your voice and your face. 
Your personal files are just a bonus. 

Recall a while ago some company called clearview.ai made the
news - given a picture of a person it finds all the other
photos of that person online, and does a good job of it too.

Any videoconferencing service is remarkably well positioned to
generate an excellent facial model of you - given that there
is a bit of motion and much data of you staring at the camera,
a high-quality 3D model of your face can be constructed easily.

This biometric information can be abused in so many ways, most
of which are still to be invented. But recall the cambridge
analytica scandal. It was supposed to have used rubbish online
personality quizzes to generate custom ads to fix elections and
referenda - with some success. Reportedly it is the reason brexit 
actually happened ...

Now instead of having to rely on "do you like cats or dogs",
the propaganda developers get to actually check out your
microexpressions and changes in voice pitch... while A/B
testing their evil on you.

Anyway, if you value your free will then not using closed 
source video conferencing systems is a must.

Similarly if you value your ability enter a store without 
hostile marketing logic giving you digital patdown... Remember 
the occasional news article showing off the big chinese control
centres monitoring the cameras in some far away city, with
a neat little onscreen name following every person walking down 
the street ? Odds are quite good that your video conferencing use 
will make it possible to add your name to that list.

Some people are going to say "not possible, the call is
end-to-end encrypted". Actually no. Illustrative example: The
intercept reported that zoom claimed end-to-end encryption,
but instead had one shared key, and used ECB (a really poor
way of using a cypher). That is why it works so well, as a
single lost packet doesn't garble the rest of the stream. More
importantly, unlike Balsamic Vinegar or Zero Percent Fat,
there is little enforcement of what these terms mean, and
governments are keen to weaken encryption further. So if you
ever hear "end-to-end video encryption" it is wise to
assume "encrypted from your end to their data centre end". It is 
fashionable to use zoom as an example, given their strong 
connections to mainland china, but odds are excellent that 
this is happening on services too, where it is probably done 
better and more discretely.  

It is probably also the reason why tiktok is in the news

regards

marc
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


[DNG] Free faces?

2020-08-05 Thread Hendrik Boom
On Thu, Aug 06, 2020 at 01:00:02AM +0200, marc...@welz.org.za wrote:
> 
> Recall a while ago some company called clearview.ai made the
> news - given a picture of a person it finds all the other
> photos of that person online, and does a good job of it too.

Is there any free/libre software that can look at two photos and provide a 
reasonable guess as to whether the two are photos of the same person?

-- hendrik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng


Re: [DNG] Zoom? Rather not...

2020-08-05 Thread golinux

On 2020-08-05 18:00, marc...@welz.org.za wrote:

I understand the security advantages of using zoom on a laptop not
much used for anything else. I suppose the sercurity conern is files
being accessible to intruders. Someone made the interesting suggestion
of settin up a new account just for zoom.


The concern about using any gratis commercial videoconferencing
service is that quite a bit of biometric information can be
collected from you - in particular your voice and your face.
Your personal files are just a bonus.

Recall a while ago some company called clearview.ai made the
news - given a picture of a person it finds all the other
photos of that person online, and does a good job of it too.

Any videoconferencing service is remarkably well positioned to
generate an excellent facial model of you - given that there
is a bit of motion and much data of you staring at the camera,
a high-quality 3D model of your face can be constructed easily.

This biometric information can be abused in so many ways, most
of which are still to be invented. But recall the cambridge
analytica scandal. It was supposed to have used rubbish online
personality quizzes to generate custom ads to fix elections and
referenda - with some success. Reportedly it is the reason brexit
actually happened ...

Now instead of having to rely on "do you like cats or dogs",
the propaganda developers get to actually check out your
microexpressions and changes in voice pitch... while A/B
testing their evil on you.

Anyway, if you value your free will then not using closed
source video conferencing systems is a must.

Similarly if you value your ability enter a store without
hostile marketing logic giving you digital patdown... Remember
the occasional news article showing off the big chinese control
centres monitoring the cameras in some far away city, with
a neat little onscreen name following every person walking down
the street ? Odds are quite good that your video conferencing use
will make it possible to add your name to that list.

Some people are going to say "not possible, the call is
end-to-end encrypted". Actually no. Illustrative example: The
intercept reported that zoom claimed end-to-end encryption,
but instead had one shared key, and used ECB (a really poor
way of using a cypher). That is why it works so well, as a
single lost packet doesn't garble the rest of the stream. More
importantly, unlike Balsamic Vinegar or Zero Percent Fat,
there is little enforcement of what these terms mean, and
governments are keen to weaken encryption further. So if you
ever hear "end-to-end video encryption" it is wise to
assume "encrypted from your end to their data centre end". It is
fashionable to use zoom as an example, given their strong
connections to mainland china, but odds are excellent that
this is happening on services too, where it is probably done
better and more discretely.

It is probably also the reason why tiktok is in the news

regards

marc



Here's another reason tiktok is in the news

https://news.antiwar.com/2020/08/02/tiktok-ban-for-national-security-or-us-tech-companies/

golinux


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng