News: 1600117385

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Court hearing on election security is zoombombed on 9/11 anniversary with porn, swastikas, pics of WTC attacks

(2020/09/14)


A court hearing on election security in America failed in its own security efforts – when it was zoombombed with porn, swastikas and images of the World Trade Center attacks.

The public hearing in an Atlanta federal district court on Friday had approximately 100 people on a Zoom conference call before it was taken over by a participant named Osama who shared his screen and showed offensive images complete with music. At least one other person did the same. The images were particularly offensive as the hearing itself was being held on the anniversary of the September 11, 2001 attacks.

The court ended the Zoom session, and restarted it an hour later with additional security measures, including a virtual waiting room. Instead of sharing exhibits themselves, attorneys emailed them to the court and a staff member shared them.

Court clerk James Hatten told The Register the problem arose when the Zoom call was opened up to share exhibits, and the software enabled any participant to do the same.

Now that's a somewhat unexpected insider threat: Zoombombings mostly blamed on rogue participants, unique solution offered [1]READ MORE

Under a different license, it is possible for a Zoom host – in this case, the court – to designate specific participants as “panelists” and give them additional sharing rights, rather than open it to everyone. Hatten explained the court will shortly be moving to that license. “It’s been a little bit of a learning curve,” he confessed.

Courts have been increasingly using video conferencing as a way to continue processing cases during the COVID-19 pandemic; Zoom’s defaults and a lack of experience continues to cause problems. The link to this hearing was made public and the court did not vet participants.

The court has a record of the participants, and Hatten said it has already contacted law enforcement and would leave it up to them to determine whether a crime has been committed. The interruption would almost certainly be viewed as contempt of court but pragmatically, a judge is not in a position to do anything about a pseudonymous person on an online conference call.

A crime?

Federal prosecutors have made it plain in the past that they consider Zoombombing to be a crime that they are willing to charge people over. Back in March, Michigan’s top law officials put out a statement [2]warning that “anyone who hacks into a teleconference can be charged with state or federal crimes. Charges may include, to name just a few, disrupting a public meeting, computer intrusion, using a computer to commit a crime, hate crimes, fraud, or transmitting threatening communications.”

The statement also noted that “all of these charges are punishable by fines and imprisonment.”

Just this month there was what may be the first case of someone [3]charged with zoombombing : 19-year-old Ibraheem Ahmed al Bayati is accused of interrupting classes by threatening, during an online Zoom lecture, to bomb the University of Houston.

But less egregious examples of zoombombing have been dealt with differently. Last month, the small town of Sylva in North Carolina decided that no crime had been committed when its town board meeting in June, taking place over Zoom, was disrupted by participants shouting racist abuse.

We asked Zoom for details over how it deals with zoombombing, particularly when it comes to requests and complaints from law enforcement. The biz sidestepped those questions, with a spokesperson telling us: "We have been deeply upset to hear about these types of incidents, and Zoom strongly condemns such behavior. We have recently updated a number of default settings and added features to help hosts more easily access [4]in-meeting security controls , including controlling screen sharing, removing and reporting participants, and locking meetings, among other actions.

"We encourage users to report any incidents of this kind to Zoom and law enforcement authorities so the appropriate action can be taken against offenders." ®

Get our [5]Tech Resources



[1] https://www.theregister.com/2020/09/10/zoombombing_attacks_texas/

[2] https://www.justice.gov/usao-edmi/pr/federal-state-and-local-law-enforcement-warn-against-teleconferencing-hacking-during

[3] https://www.justice.gov/usao-sdtx/pr/local-man-charged-making-threat-during-university-zoom-lecture

[4] https://support.zoom.us/hc/en-us/articles/360034675592-Advanced-security-settings

[5] https://whitepapers.theregister.com/

Sparkus

Zoom-bombing a crime? Maybe.

Less-than-fully-competent public employees in charge of mission-essential services? Well, probably......

beep54

""Less-than-fully-competent public employees in charge of mission-essential services? Well, probably......"

Dunno 'bout that. You would probably just be packing the jails with incompetent people.

EO exam

Danny 2

I took the civil service EO (Executive Officer) exam when I was a teen, because my smarter older sister had taken it and got 91%.

I didn't want a job in the civil service, but I enjoyed tests and interviews and wanted to beat my sis. I got 97%, although they still didn't offer me a job because, well, my awful personality.

"Why are you here today?"

"Because I wanted to beat my sister on the test."

It was a standard intelligence test, councils used to use them to to sift applicants. You couldn't rise to middle management without passing it. I think it should be brought back. My eldest sister is a soulless moron who has risen to the top of the civil service and yet she would never have passed the EO exam, the only exam she passed was her Home Economics O Grade.

The idea of a meritocracy is meaningless unless you test the merit of the employees.

They'll only prosecute

Anonymous Coward

The ones they disagree with, who don't push the narrative. This is especially obvious with partisan issues - two systems, and some are quite obviously above the law.

Doctor Syntax

I think it's what they call a learning opportunity for the court.

cornetman

The problem with this kind of thing is that zoom bombing is "easy", in terms of you can do it from the comfort of your home.

One way to judge the seriousness might be to ask what might the ramifications be if the "interruption" was done in person at the traditional venue.

In this case, if someone did indeed do this deed in a court, they would almost certainly have been dragged down to one of the cells to consider their actions for a few days.

Would it be reasonable to do the same if someone zoombombed an actual court proceeding? Most people would be awed into good behaviour were they to be at the building itself, whereas we can see that idle teenagers can get away with this kind of behaviour because their apprehension is less likely.

HEY KIDS! ANN LANDERS SAYS:
Be sure it's true, when you say "I love you". It's a sin to
tell a lie. Millions of hearts have been broken, just because
these words were spoken.