Hacker News new | ask | show | jobs
by FatalLogic 2039 days ago
According to a screenshot that the journalist posted on Twitter, it appears like the video conference session is browser-based, and the pin and username are in the browser URL in plaintext.

So then if you can see anyone's screen, or any clear photo of it, you can easily join the conference. Seems like very poor security design if that's so

https://pbs.twimg.com/media/EnRlaFeWMAQzyIS?format=jpg

The software URL format looks similar to that used by Pexip.com
2 comments
justinclift 2039 days ago
Well, the page title in that video says "Consolium Videoconferencing", so it's probably something by this company:

https://consiliuminc.com

Maybe this?

https://consiliuminc.com/product/UniVCX-video-customer-exper...

link
cblconfederate 2039 days ago
this should require something more than a URL, even a skype meeting would be more secure.
link