Brian Fung | @[email protected]

Brian Fung | @[email protected] @b_fung

Apple and Google have spent years studying how to get users to fall in love with their products — making them easy and appealing to use. Now they’re trying to apply those strengths to fight COVID-19. But they’ve never faced a challenge quite like this. https://t.co/ZS0DWjqGDa — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

@UcheOfforjebe I’m so tired — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Oh, and for anyone out there who needs it: It is Wednesday. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Second week in a row where I’ve lost track of what day of the week it is. Suddenly, all those “It is ____day” memes on here aren’t looking so silly now. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

@joshpetri "In pursuit of life, liberty and authentic tacos" — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

The future is the past, but now. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

We’ve finally entered the 20th century! — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

@AlexJamesFitz Can’t wait to see your name in the credits for “Matrix 4” — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

C-SPAN callers are the best callers — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

RT @ashk4n: While the privacy of @Apple/@Google contact tracing system look robust (user-controlled rolling ephemeral subkeys) -- the archi… — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Apple and Google say they’re workinig on new contact tracing tech to fight the pandemic. First will come an app-based solution, followed by a deeper, OS-level implementation that relies on Bluetooth LE. https://t.co/JSGni39trP https://t.co/pINezihwV5 https://t.co/WAfo6mpfgC — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Zoom says these were the vulnerabilities fixed on April 1. Full statement: https://t.co/KvNeYp4zmp — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Particularly now, Amazon has revealed itself to be an essential service to so many people, not just in e-commerce but in a range of other areas. That says a lot about the value it provides! But also a lot about the enormous hold it has on many of us. https://t.co/NhFKapILJ3 — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

All that time at home means more curling up with your Kindle e-reader, or talking to your Amazon Echo, or watching Amazon Originals on Prime Video. All these activities, by the way, are creating valuable data for Amazon services. Its reach knows no bounds. https://t.co/NhFKapILJ3 — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Before the pandemic, Amazon’s Twitch was already one of the top 10 video streaming sites on the entire internet. Now it’s become a place where you can find pro athletes streaming themselves gaming. https://t.co/NhFKapILJ3 — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Amazon owns Audible, which told me that since it launched a special site with free audiobooks as a response to COVID-19, the site has gotten “millions of daily visitors.” https://t.co/NhFKaq0mAB — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

We all know demand for packages from Amazon is booming. But Amazon’s reach is vast. It makes most of its profit from Amazon Web Services, whose customers include Zoom and Netflix. A boost in usage for them means more revenue for Amazon. https://t.co/NhFKapILJ3 — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

I took a look at how, amid the pandemic, our growing reliance on Amazon could further entrench its dominance. As James Bailey, a GWU business school professor, put it: "Every crisis creates a void. And whatever force fills that void, inherits power.” https://t.co/NhFKapILJ3 — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

RT @oliverdarcy: In an attempt to pressure CNN into airing the White House task force briefings in full, Vice President Mike Pence's office… — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

I’ve asked Zoom for a response to the advisory and will update if I hear back. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

The third flaw enables social engineering attacks. Per SAA, Zoom automatically converts URLs into clickable hyperlinks, which makes it easier to conduct phishing attempts. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

That flaw depends on an attacker running malware within Zoom’s process space that “inherits” all of Zoom’s access privileges, according to the SAA. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

A second flaw, per SAA, could allow attackers to remotely activate a device’s microphone and webcam without the owner’s consent. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

The SAA advisory said that as of April 2, Zoom had only patched one of the vulnerabilities, which were described as 0-days. The first flaw hinges on physical access of the device and takes advantage of Zoom’s “AuthorizationExecuteWithPrivileges” function to gain system access. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

@josephfcox I’ll add ‘em to the thread. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

@SunlenSerfaty Whoops, typo earlier — I meant to say the alert highlights *three* flaws and not two. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Meanwhile, House officials are reevaluating the FedRAMP version of Zoom, an aide told @SunlenSerfaty. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

AFAIK this may be the highest-level government advisory yet highlighting Zoom security. "Users are reminded and encouraged to use SAA provided devices and resources, such as email, SharePoint and other provided applications,” per the alert, a copy of which I’ve seen and read. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

The Senate sergeant at arms has warned lawmakers' offices to avoid using Zoom over security concerns. The advisory, dated April 2 and reviewed by CNN, cited two flaws in Zoom and urged Senate staff to use "preferred and supported” software such as Skype for Business. — PolitiTweet.org

Brian Fung | @[email protected] @b_fung

Awful: A Michigan nursing home resident with COVID-19 pleaded with her Amazon smart speaker for days — asking for pain relief and how to reach the police — before she ultimately died in the emergency room: https://t.co/tV4APCgH82 — PolitiTweet.org