Tag: Viber

Article

A call to action is now taking place regarding the data security and user privacy of video conferencing platforms

Privacy watchdogs urge videoconferencing services to boost privacy protections | We Live Security

From the horse’s mouth

Officer Of The Privacy Commissioner Of Canada

Joint statement on global privacy expectations of Video Teleconferencing companies (English / Français)

Press Release (English, Français)

Office Of The Australian Information Commissioner

Global privacy expectations of video teleconference providers – with open letter

Federal Data Protection And Information Commissioner (Switzerland)

Audio And Video Conferencing Systems – Privacy Resource factsheet (English, Français, Deutsch, Italiano)

Open Letter (PDF)

Information Commissioner’s Office (United Kingdom)

Global privacy expectations of video teleconference providers

Open Letter (PDF)

My Comments

Thanks to the COVID-19 coronavirus plague, we are making increased use of various videoconferencing platforms for our work, education, healthcare, religious and social reasons.

This has been facilitated through the use of applications like Zoom, Skype, Microsoft Teams and HouseParty. It also includes “over-the-top” text-chat and Internet-telephony apps like Apple’s Facetime, Facebook’s Messenger, WhatsApp and Viber for this kind of communication, thanks to them opening up or having established multi-party audio/video conferencing or “party-line” communications facilities.

Security issues have been raised by various experts in the field about these platforms with some finding that there are platforms that aren’t fit for purpose in today’s use cases thanks to gaping holes in the platform’s security and privacy setup. In some cases, the software hasn’t been maintained in a manner as to prevent security risks taking place.

As well, there have been some high-profile “Zoombombing” attacks on video conferences in recent times. This is where inappropriate, usually pornographic, images have been thrown up in to these video conferences to embarrass the participants with one of these occurring during a court hearing and one disrupting an Australian open forum about reenergising tourism.

This has led to the public data-protection and privacy authorities in Australia, Canada, Gibraltar, Hong Kong, Switzerland and the United Kingdom writing an open letter to Microsoft, Cisco, Zoom, HouseParty and Google addressing these issues. I also see this relevant to any company who is running a text-based “chat” or similar service that offers group-chatting or party-line functionality or adapts their IP-based one-to-one audio/video telephony platform for multi-party calls.

Some of these issues are very similar to what has been raised over the last 10 years thanks to an increase in our use of online services and cloud computing in our daily lives.This included data security under a highly-mobile computing environment with a heterogeny of computing devices and online services; along with the issue of data sovereignty in a globalised business world.

One of the key issues is data security. This is about having proper data-security safeguards in place such as end-to-end encryption for communications traffic; improved access control like strong passwords, two-factor authentication or modern device-based authentication approaches like device PINs and biometrics.

There will also be the requirement to factor in handling of sensitive data like telehealth appointments between medical/allied-health specialists and their patients. Similarly data security in the context of videoconferencing will also encompass the management of a platform’s abilities to share files, Weblinks, secondary screens and other media beyond the video-audio feed.

As well, a “secure by design and default” approach should prohibit the ability to share resources including screenviews unless the person managing the videoconference gives the go-ahead for the person offering the resource. If there is a resource-preview mechanism, the previews should only be available to the person in charge of the video conference.

Another key issue is user privacy including business confidentiality. There will be a requirement for a videoconferencing platform to have “privacy by design and default”. It is similar to the core data-security operating principle of least privilege. It encompasses strong default access controls along with features like announcing new participants when they join a multi-party video conference; use of waiting rooms, muting the microphone and camera when you join a video conference with you having to deliberately enable them to have your voice and video part of the conference; an option to blur out backgrounds or use substitute backgrounds; use of substitute still images like account avatars in lieu of a video feed when the camera is muted; and the like.

There will also be a requirement to allow businesses to comply with user-privacy obligations like enabling them to seek users’ express consent before participating. It also includes a requirement for the platform to minimise the capture of data to what is necessary to provide the service. That may include things like limiting unnecessary synchronsing of contact lists for example.

Another issue is for the platforms to to “know their audience” or know what kind of users are using their platform. This is for them to properly provide these services in a privacy-focused way. It applies especially to use of the platform by children and vulnerable user groups; or where the platform is being used in a sensitive use setting like education, health or religion.

As well it encompasses where a videoconferencing platform is used or has its data handled within a jurisdiction that doesn’t respect fundamental human rights and civil liberties. This risk will increase more as countries succumb to populist rule and strongman politics and they forget the idea of these rights. In this case, participants face an increased exposure to various risks associated with these jurisdictions especially if the conversation is about a controversial topic or activity or they are a member of a people group targeted by the oppressive regime.

Another issue being raised is transparency and fairness. Here this is about what data is being collected by the platform, how it is being used, whom it is shared with including the jurisdictions they are based in along with why it is being collected. It doesn’t matter whether it is important or not. The transparency about data use within the platform also affects what happens whenever the platform is evolved and the kind of impact any change would have.

The last point is to provide each of the end-users effective control over their experience with the videoconferencing platforms. Here, an organisation or user group may determine that a particular videoconferencing platform like Zoom or Skype is the order of the day for their needs. But the users need to be able to know whether location data is being collected or whether the videoconference is tracking their engagement, or whether it is being recorded or transcribed.

I would add to this letter the issue of the platform’s user-friendliness from provisioning new users through all stages of establishing and managing a videoconference. This is of concern with videoconference platforms being used by young children or older-generation people who have had limited exposure to newer technologies. It also includes efforts to make the platform accessible to all abilities.

This is relevant to the security and user privacy of a videoconferencing platform due to simplifying the ability for the videoconference hosts and participants to maintain effective control of their experience. Here, if a platform’s user interface is difficult to use safely. videoconference hosts and participants will end up opting for insecure setups this making themselves vulnerable.

For example, consistent and less-confusing function icons or colours would be required for the software’s controls; along with proper standardised  “mapping” of controls on hardware devices to particular functions. Or there could be a user-interface option that always exposes the essential call-management controls at the bottom of the user’s screen during a videocall.

This issue has come to my mind due to regularly participating in a Skype videoconference session with my church’s Bible-study group. Most of the members of that group were of older generations who weren’t necessarily technology-literate. Here, I have had to explain what icons to click or tap on to enable the camera or microphone during the videoconference and even was starting it earlier to “walk” participants through using Skype. Here, it would be about calling out buttons on the screen that have particular icons for particular functions like enabling the camera or microphone or selecting the front or back camera on their device.

At least the public-service efforts have come about to raise the consistent security and privacy problems associated with the increased use of videoconferencing software.

Personal and business Internet users are showing interest in the concept of secure email. This is to assure that confidential emails only end up being viewed by the eyes of their intended recipients.

It is being driven by issues relating to confidential personal and business information being leaked to the Web along with a common personal worry regarding government surveillance in the age of terrorism and extremism. Along with this, activists, journalists and the like are wanting to rely on secure communications to pass through critical information in areas that are hostile to freedom of speech and the press. In some cases, people travelling through countries known to be hostile to freedom of speech like Russia and China have been encouraged to keep their data highly secure due to the espionage taking place in these countries.

More work needs to be done on secure email

There is a slow increasing prevalence of secure email platforms appearing on the Web. These platforms such as the Swiss-based ProtonMail and the secure iteration of Google’s GMail service are dependent on a Web-based user interface. Along with this, most of us are implementing instant-messaging platforms like WhatsApp, Viber and Telegram to send personally-confidential material to each other.

But they offer a series of features intended to assure personal privacy and corporate data security. They offer end-to-end encryption for the emails at rest (while they are on the servers pending delivery) and in transit (while they are being moved between servers). They also offer the ability for users to send seif-destructing emails that don’t stay in the recipient’s or the sender’s storage space after they are read unlike with conventional emails which stay in the user’s storage space after being sent or read. These self-destructing emails cannot even be forwarded to others or printed out (although it could be feasible to take a screenshot of that email and print or forward it). Some of these setups even have the ability to detect screenshots and let the sender know if the recipient took one of a confidential email. As well the metadata about the emails isn’t held on the servers.

But there are current limitations associated with these services. One of these is that the privacy features are only available to users who subscribe to the same email platform. This is because the common standards for secure email such as S/MIME, PGP and GnuPG only support basic key-based encryption and authentication abilities and the common email protocols like IMAP and POP3 don’t support email-handling control at the message level. As well, these services rely on a Webmail interface and require users to click on links sent as part of standard emails to view the secure messages if they aren’t part of that system.

There are certain features that need to be added to IMAP4 to allow for secure email handling. One of these is to permit message-level email control to permit self-destructing emails and to allow the sender to limit how the recipient can handle the messages. But the message-control features may run against legal-archive and similar requirements that will be asked of for business correspondence. In this situation, there may be the ability to indicate to senders or recipients if the emails are being archived as a matter of course and message-level email control can’t be assured.

Of course this may be about a newer feature-level email standard, preferably open-source or managed by many in computing academia and industry, to add this kind of secure email control.

Then there is the requirement to encourage the use of encrypted-email / authenticated-email standards like S/MIME or PGP within email endpoints, both Web-based and client-based. It will also include the ability for users to create asymmetrical key pairs and store their correspondents’ public keys in their contact manager software. There will also have to be the ability to support automated public-key discovery as a new contact is added, something currently feasible with encrypted messaging platforms that maintain their own contact directory.

Other questions that will come up in the course of building a secure email ecosystem is how the encryption keys are stored on the end-user’s system and whether an end-user needs to create new encryption keys when they change devices along with how to store them securely. This can be of concern with most computer users who typically maintain multiple devices, typically a smartphone along with a regular desktop or laptop computer and / or a tablet of the iPad ilk. Similarly there is the fact that one may not have the same computing device for the long haul, typically due to replacing one that has broken down or upgrading to a better-performing device.

There will also have to be the issue of security and portability thanks to issues like users temporarily using different computer devices such as friends’ computers, work / school computers or public computers. Here, it may be a question about where contact-specific encryption keys are held, whether on a server or on removable media along with how email sessions are handled on these temporary setups.

What will need to happen is for email platforms to support various secure-messaging features in a manner that can exist on a level playing field and without the need for correspondents to be on the same provider.

WhatsApp – the pioneer for security-focused online communications for consumers

Some of the popular over-the-top messaging and VoIP platforms are being equipped for personal privacy and security.

This was a feature typically pitched at high-stakes business users but is now being pitched at everyday consumers thanks to the saga occurring in the USA between FBI and Apple where the FBI were wanting the encrypted data held on a suspect’s iPhone.

At the moment, WhatsApp and Viber are offering secure-communications features but this could be rolled out by other messaging/VoIP/videocall platform vendors like Skype, Facebook or Apple. For that matter, WhatsApp have recently made their platform from a subscription-funded platform to a free-to-user platform. They will continue to raise money by offering business-focused WhatsApp communications services.

Platform-wide best-case encryption by default

One of the main features is platform-wide end-to-end encryption which is implemented to “best-case standards” by default.

This means that the data that represents your calls and messages is encrypted by the end devices. Along with that, the user’s public and private keys associated with the encryption algorithm don’t stay on the company’s servers, thus not being at risk of a subpoena or other court order or government mandate. Rather, these are created by the end-user’s device and kept there.

The reference to “best-case” operation in this situation is that if the users are communicating with the latest version of the software that supports newer encryption algorithms, these algorithms are used for the encryption process. This even applies to group conversations where the “best-case” encryption method is implemented if all the correspondents are using the client apps that support that algorithm.

Authentication of contacts and their devices

As part of key exchange between contacts, there is an emphasis on authenticating one’s contacts with some systems like WhatsApp preferring a “face-to-face” method or others like Viber requiring you to read and confirm a password during a call. The former method that WhatsApp implements is for you to scan a QR code

Here, this is about whether you are really talking with the user on their device, in order to circumvent situations like lost or stolen phones, users installing their SIM cards in different devices and “man-in-the-middle” attacks. It was highlighted in Graham Cluley’s blog article about improving your security with WhatsApp.

This will typically be highlighted through the use of an indicator in your contact list that shows if a contact has been authenticated or if they have switched devices.

Concealed text/image conversations

Viber with its ability to conceal a conversation

Viber introduced to their platform the ability for one to conceal a text/image conversation which can come in handy if you are exploiting their functionality to use tablets or regular computers as endpoints for Viber conversations.

Here, you can conceal the conversation so that others cannot see it unless they enter a user-set PIN or password. Situations where this can be necessary could include an innocuous activity like arranging that surprise event through a personal conversation held in a workplace to a traveller who leaves their iPad in their hotel room which can easily be visited by Housekeeping staff.

On the other hand, you could be able to specify whether a text/image chat is to be kept on each other’s devices or to disappear like what has been valued with Snapchat.

Features that could surface in the name of security

As other online-communications platforms jump on to the secure-communications bandwagon, there could be the rise of different features or variations on the above features.

For example, a communications-platform client could implement client-level user authentication where the software can be set up to require the user to log in to the client to start a conversation. Or the primary communications device like the smartphone has to be near a secondary communications client like a laptop before the user can run the software. This feature may be considered of importance with tablets and regular computers likely to be used by other users.

To some extent, an operating system that implements multiple-user operation could allow an online-communications client to switch user profiles and phone numbers so it works totally personally to the user.

There could be the ability for a user to mandate device-level authentication or encryption before a conversation takes place with a contact. This could allow for one to be sure they are talking to the right correspondent.

Other methods of verifying contacts and devices could surface such as the use of NFC “touch-and-go” or Bluetooth data exchange as a way of authenticating users’ devices. The software could also exploit other hardware or software “secure elements” like Trusted Platform Modules as an alternative to SIM cards for Wi-Fi-only tablets or regular computers.

This could even extend to such things as “trusted networks” or “trusted locations” where your caller can know that you are talking privately, based on factors like wireless-network parameters or proximity to particular Bluetooth devices.

Conclusion

What is now happening is that secure online conversations, once a feature that was enjoyed by big business and government, is now becoming available to every individual in the street for free. This allows them to have online conversations without being eavesdropped upon.

Facebook Messenger – native to the Android platform

Increasingly, the iOS, Android and Windows 10 Mobile / Windows Phone app stores are being inundated with over-the-top messaging apps like Facebook Messenger and WhatsApp. These work well and provide a better experience for handheld text and voice messaging but they don’t offer a native option for access to these platforms using a regular Windows, Mac or Linux computer.

The Internet-based instant-messaging services started off with the regular Windows, Mac and Linux computers as the main endpoints and it was the arrival of the iPhone that shifted the direction of consumer-focused instant messaging towards mobile devices.

Some of the mobile messaging platforms including social networks with mobile messaging

But the best examples to see of messaging platforms that offer a native client for a regular computer are both the Skype and Viber platforms. Skype has offered a desktop client for their over-the-top communications platform ever since it started and I have seen many laptops run with this program. As well, Viber recently put a strong effort towards creating native desktop clients for their VoIP / messaging service which was initially targeted at mobile users. Viber even added videocalling to their desktop clients before they rolled it out to the mobile clients.

How do you gain access to these services on a regular computer if you don’t have a native client?

These computers are being used for mobile messaging and social networking

Most of these messaging platforms provide a Web front which allows you to use the platform to communicate using your preferred desktop Web browser but this is fraught with problems. In some cases where there isn’t a Web front for the platform, you may have to use an Android mobile-platform emulator along with the Android mobile client to run the messaging-platform app.

This is how we are using Facebook Messenger on the regular computer

These options don’t provide the same kind of experience that a native client would provide for a messaging platform. For example, you would have to keep a browser session alive and dedicated to your messaging platform and all of the user interface would be focused within that session. Or you would have to face performance and reliability issues with the emulator software.

What can a native client offer for the regular computer?

Reduced computing overheads yet taking full advantage of the computer’s abilities

The native client program yields a great benefit in the form of reduced computing overheads required for it to run. This is because there isn’t the need to run a full browser program to use the messaging program. Rather the developer can tune the program to run as smoothly as a regular piece of software for that computing platform.

The main benefit you gain from this is the fact that you can multi-task easily on your regular computer including having your chat with your correspondent without the system underperforming or failing. The more-powerful regular-computer processors can even make light work of the tasks needed to support the messaging platform’s multimedia-communications or encryption capabilities which could lead to a reduced time penalty for encrypting messages or to allow smooth videocalling.

For PC gamers, they can set up a chat session amongst their gaming clan without having to deal with the resident trolls and foul-mouthed miscreants that inhabit the game’s text-chat or voice-chat “party-line” and without taxing their gaming rig’s system resources. With the native desktop messaging clients, the process is similar to what I have described previously for Skype.

Tight integration with the operating system

Most of these messaging programs offer a “store-and-forward” messaging functionality along with a presence indicator. These functions, along with call notification abilities, can benefit from being integrated with the operating system’s interface.

For example, the operating system’s notification area can be used to show new messages and the latest message can appear as a “pop-up” notification. Operating systems that implement task-bars, also known as “docks” in MacOS X, could take these interface elements further by, for example, showing conversation tickers emanating from the icons or representing each conversation as its own icon.

Similarly, you can use these messaging platforms to transfer photos or videos during a conversation with the photos and videos that you send or receive being available through the operating system’s file system.

This appeals to those of us who place value on soliciting video messages as a way to create “vox-pop” video content; or can appeal to those of us who want to print out pictures that we have received. In these situations, the video-editing and photo-editing software that is available for the regular computer is more capable that what is offered for the mobile platforms due to the fact that regular computers offer more processing power than their mobile cousins.

The prevalence of ultraportable computers running regular-computer operating systems

Lenovo ThinkPad X1 Yoga convertible notebook – the way to use mobile messaging and social networking

Another factor that concerns the Windows 10 platform is that there is an increasing number of tablets and 2-in-1 computers being designed for that platform and running the common desktop variant of that operating system, the best example being the Microsoft Surface family. These computers, especially the ones with a screen size less than 11”, are being considered as a viable alternative to an iPad or Android tablet.

Similarly, the ultraportable laptops of the Macbook Air and the Ultrabook variety can show their appeal as a mobile communications endpoint especially if you are wanting to dabble with text messaging while you work on that document or want to engage in a videocall.

Users who use regular computers to create content

There is still a large number of users who use a desktop or laptop computer that runs a regular operating system rather than a mobile-platform tablet for most of their computing tasks. This happens both in the workplace and the home and appeals to those of us who spend a long time at the computer, whether to write and answer emails or create content.

It is because of such facilities as keyboards that are conducive to typing, especially touch-typing, and screens large enough for content creation. Similarly, some users even optimise a regular computer for longer working sessions like equipping it with a highly-ergonomic keyboard or one or more large screens to obtain an increased visual workspace.

Being able to manage a mobile-messaging platform on these computers could allow for the ability to start or continue a conversation hosted on these platforms using the larger screen area or improved keyboard. It can be conducive to multi-tasking especially if the goal is to copy data from a conversation in to a document or application; or share information from a document or Web page to a conversation.

Companies and their employees could see this of benefit when they want to establish or maintain a presence on a mobile-messaging platform. Similarly, a mobile-messaging app for a regular computer does have some appeal to PC gamers who want to chat with a small group of team-members while playing an online game.

How is this being made feasible

Apple and Microsoft, who have had strong presence in regular-computer platforms and have presence in mobile-computing platforms, are making it easier to target software for both mobile and regular computing hardware classes. The best example is Microsoft offering the Universal Windows Platform that came with Windows 10. This allowed a software developer to target a program for both the desktop (regular-computer) and mobile versions of Windows 10 with reduced effort and there have been some efforts to make it easy to port iOS apps to the Windows 10 platform.

This could encourage the software developers behind these over-the-top mobile-messaging platforms to support the regular-computer users with very little effort, allowing them to concentrate on making the necessary software play tightly with the operating system.

Conclusion

Providing native support for a mobile-messaging platform on a regular computer can:

• allow improved performance on a regular computer thanks to reduced software overheads
• provide tight integration with the host computer’s operating system that leads to use of the operating system’s user-interface and file-management assets
• take advantage of ultraportable computers that are, in some cases, a viable alternative to a tablet
• tightly integrate with one’s use of a regular computer whether for work or pleasure

As these mobile-messaging platforms of the WhatsApp, Snapchat and Facebook Messenger ilk are being developed, it could be time to work on native clients that work with the regular computer.

We could see Box.com and OneDrive appear on these printers alongside Dropbox

Viber and WhatsApp are showing themselves as capable over-the-top communications systems while OneDrive and Box.com are coming up as valid cloud-hosted storage services. But there is something very common with most of these companies where they aren’t being as proactive as Skype or Dropbox.

This is more so in the concept of licensing the front-end software for their services to device manufacturers to integrate the functionality in to their devices’ software. Skype have made strong headway with integrating their software in to a large range of smart TVs and video peripherals so that people can purchase a camera kit for these devices to convert them in to group videophones. Similarly, they helped someone else pitch an IP videophone and integrated add-on universal video camera kit in order to extend this function to additional devices. Dropbox has gained extra foothold with recent Brother printers as a “print-from-Dropbox” function while allowing owners of certain WD NAS units to make these devices serve as an on-ramp to Dropbox and Olympus integrating Dropbox upload functionality in to their latest Wi-Fi-capable voice recorder.

A smart TV enabled for Skype could also be enabled for Viber or WhatsApp

Ways this could happen for Viber, Skype and WhatsApp could be in the form of IP phones that integrate functionality for these services or IP-based business phone systems that allow the creation of voice / video trunks, tie-lines or messaging trunks offered by these services. Here, Skype, Viber and WhatsApp could monetise their services better by offering business telephony services with high reliability at an appropriate premium.

OneDrive,  Dropbox, Box.com and other cloud-storage services could work with device manufacturers to provide network upload functionality or a NAS vendor could offer “on-ramp” functionality or “store-and-forward” synchronisation functionality for their devices to cater for multiple NAS devices installed at different locations.

What really has to happen is for Viber, OneDrive and co to work with device manufacturers to build up interest in integrating their functionality in to the devices rather than leaving it to Skype and Dropbox to dominate the scene.

A few weeks ago, I had visited my barber to help him out with this home IT needs as part of a “quid pro quo” arrangement. He had a few issues with Skype underperforming because with him being an Italian migrant, he relies on this videoconferencing tool to communicate with his family back in Italy.

A test I had done as part of troubleshooting Skype was to run an Internet-based videocall. This was done using my smartphone running the Android version of Skype and connected directly to the Telstra 4G network while his laptop was connected to the home network via Wi-Fi and the network was serviced by a cable-modem broadband Internet service. Here, I had started the Skype videocall further away from the laptop so as to avoid acoustic feedback or unnecessary echo while using my headphones to hear my barber on my smartphone when he was speaking in to his laptop.

Here, I hadn’t noticed any problems with the Skype conversation when the Internet connection was used, with the call not sounding stuttery or the video not being choppy. But an international VoIP connection can show up problems at different times of the day such as during peak Internet times like daytime for one of the countries.

This is similar to a Skype “dry-run” I suggested to someone else whose daughter was heading off to the UK as part of an exchange-student programme. Infact, doing a test call where both devices are on a separate Internet connection can be used to determine whether Skype, Viber or similar VoIP applications are behaving properly. In the case of Viber, there is a desktop softphone client available for this VoIP service.

Separate Internet connection

The requirement is that one device is connected to a wireless-broadband modem or another network serviced by a separate Internet connection. This can be easy for a smartphone or tablet that is associated with a wireless-broadband service, but you would have to disable the Wi-Fi network functionality so that the mobile device doesn’t associate with the home network. In the case of a laptop, you may have to connect via a wireless-broadband modem, “Mi-Fi” router or another network service by a separate Internet service. This could be your work’s network, a neighbour’s home network or a wireless hotspot at a library or café.

Acoustic isolation between the devices

Similarly, headphones or a handset like one of the “trendy old-look” handsets that you connect to a smartphone can come in handy here to avoid echo and acoustic feedback if you are in the same house. Here you would need to use this with one of the devices or use one device well away from the other device such as in another room, preferably behind a closed door.

These arrangements can he useful for either practising the use of Skype or similar VoIP software on a new device or interface; or troubleshooting a balky VoIP connection,