Zoom Security Recommendations

[tcassidy]

Several colleges are using Zoom for library instruction and 'virtual service desk' hours during the COVID-19 interruption. Avoid uninvited guests accessing sessions and making inappropriate comments or hacking into files on the host’s computer.

Beware Zoombombing: https://techcrunch.com/2020/03/17/zoombombing/ 

You can prevent this! (Tips from NVCC)

1. Be careful how you share the meeting link invitation.
   
2. Disable “Join Before Host” so people can’t cause trouble before you arrive.
   
3. Enable “Co-Host” so you can assign others to help moderate.
   
4. Disable “File Transfer” so there’s no digital virus sharing.
   
5. Disable “Allow Removed Participants to Rejoin” so booted attendees can’t slip back in.
   

         The above are our system defaults, but may be changed by an individual user.

Additionally, for instruction sessions, you may:

• Enable "Waiting Room" so that you specifically allow users in
  
• Enable the option to only allow authenticated users to join
  
• Enable "Mute Participants on entry" (also a system default) 
  

Many thanks to NVCC and JTCC for sharing their college materials on this topic (attached) after discussion in our Wednesday Drop-in.
-Tara

[tcassidy]

Hi everyone,
Unfortunately, the security exploits via Zoom continue. Please exercise caution creating and sharing Zoom links. VITA recommends the following general precautions for remote conferencing sessions (bold emphasis is mine):
 

1. Do not make meetings or classrooms public. Require a meeting password or use the waiting room feature and control the admittance of guests.
   
2. Do not share a link to a teleconference or classroom on an unrestricted, publicly available social media post. Provide the link directly to specific people.
   
3. Manage your screen sharing options. Change screen sharing to “Host Only.”
   
4. Ensure users are using the updated version of remote access/meeting applications.
   
5. Reference your agency’s telework policy addressing requirements for physical and information security.
   
6. Use encrypted connections.
   
7. Ensure your software is up-to-date.
   

-Tara

[mfein]

Thank you!!!!