Illegal zoom bombing is out of control

Zoombombing

This is part of the endless story of zoom, a story which is true as it happened to me and about 100+ other people.

The open rights group run an event every Friday afternoon related data privacy and ethics. Its been hosted on zoom for the last few weeks and the guests have been good. When I heard Lilian Edwards and Rachel Coldicutt were going to talk about a possible way forward for the debate around covid-19 contact tracing. I was onboard to watch again.

It centers around this proposed legal document which Lilian spearheaded with Rachel and others.

The Coronavirus (Safeguards) Bill 2020: Proposed protections for digital interventions and in relation to immunity certificates

I highly recommend you have a read…especially since some promises seem to be broken.

Back to the incident on the zoom call…

I joined a bit late but setup my chromebook casting to my TV via the chromecast. Settled in to watch while working on my Dell XPS laptop. As Lilian finished her presentation, someone drew a cock and balls on top of her final slide. Lilian laughed it off while the hosts the open rights group went about blocking, booting and changing the permissions of the zoom call.

As things moved forward, someone was attempting to draw a swastika on the video. Someone was using the zoom overlay feature or something but it was removed before it was fully drawn. It was about then when we moved to Rachel and before she could really get going someone hijacked the video and showed child abuse/porn. It was shocking and I couldn’t believe it. I looked at the chat room and people were equally upset. It lasted about 10-15 secs but it was just vile/horrible.

Someone pleaded that the hosts take control, and they replied they are ending the whole thing now. Then it was all gone. The lasting effect was felt and although I felt truly shaken by what I had seen, I also knew I had to reach out to others.

Since then, I called my partner for support, line manager to report what happened and check he wasn’t on the call too. I also wanted to check other BBC staff wasn’t on the call I knew. I had previously shared the link around our internal slack and with others interested in contact tracing. I’m lucky the BBC has a employee assistance programme, where I was able to talk to a trained professional who suggested I might feel some comfort in blogging about it (hence this blog)

I noticed while blogging, theres a twitter thread about the whole thing now. No ones blaming the openrightsgroup but this guide written by Michael J. Oghia. But there is a good list of all the things to lock down and change on zoom for anyone before it happens again. Its likely the people behind this illegal act were going zoom to zoom.

I recently noticed that a few organisations are using youtube for broadcasts and discussions, with another system for feedback and questions. It certainly cuts down on abuse compared to zoom and you can easily share the public link out. The idea of switching to jitsu or skype may not necessarily help solve this type of problem. But changing the way its done completely could.

18th April 2020 – 1am

I got a email from the Open Rights Group…

This afternoon an unknown actor severely disrupted our public online discussion about Covid-19 and we were forced to immediately end the call.

We were horrified by what occurred and would like to apologise for having exposed viewers to such horrific imagery. We are deeply sorry that this occurred on ORG’s watch.

If you would like to speak with us directly I am personally available to speak to anyone and everyone that was on the call.

We have reported the incident to the Police and are taking necessary steps to secure our systems. We will be reviewing the way we conduct meetings to ensure this is never possible again.

If you would like to speak to a counselling or advice service, the Police recommend contacting Samaritans. They accept calls from anyone on any emotional issue at this number 116 123.

Sincere apologies.
Jim
_______________

Jim Killock
Executive Director
Open Rights Group

Airbnb illegal audio monitoring?

Airbnb monitoring warning

Me and my partner decided on Airbnb for our trip to Barcelona. We found one  and booked it. Generally the flat was ok,

However there was a warning on the kitchen door, stating they are listening for noise 24 hours a day and will cancel bookings if there is loud noise. Looking around I think the device is this thing…?

Airbnb monitoring warning

It certainly put a terrible taste in our mouth and made us feel uncomfortable. Although we didn’t complain straight away and by the time we thought about it, the internet connection was down and if its really connected and not a poor joke; it was no longer going to work. Didn’t cause the host(s) to come and find out what was wrong, even with us complaining about the lack of internet (I debugged it as much as I could, but ultimately we had European roaming data and wasn’t in the flat that much)

This has to be a breach of privacy and I’ve finally complained to Airbnb. Especially after rethinking and re-reading things like this.

Update – Thursday 13th Sept

Since my tweets/toots and this blog post. I had quite a lot of people and journalists get in touch… But I still have seen nothing from Airbnb or the host. So I decided to take one of the journalists up on their offer in a form of social justice. No idea how what I wrote will come across or be edited but as I was seeking out the legal ramifications of what the host had done, I saw this on the Airbnb help site…

Rules for hosts
If you’re a host and you have any type of surveillance device in or around a listing, even if it’s not turned on or hooked up, we require that you indicate its presence in your House Rules. We also require you to disclose if an active recording is taking place. If a host discloses the device after booking, Airbnb will allow the guest to cancel the reservation and receive a refund. Host cancellation penalties may apply.

With that I rewrote to Airbnb and Airbnbhelp to demand a refund on top of everything else I previously complained about.

Sure to update everyone once I hear something….

Update – Friday 15th Sept

I was contacted by Airbnb by phone, the woman ran through a few questions and we talked about what happened again. She agreed this was clearly a breach of the Airbnb terms and could see the listening device and the warning in a few of the photos (as like me, knew what to look for). She said they would block/ban that listing which they have done. They also issued a refund to me and my partner, which is great news as our un-comfortableness certainly had a slight affect on the holiday in Barcelona.

Personally I’m glad I found the Airbnb term above, as that drove things along much quicker. Previous to that, it seemed not a lot was being done?

In our conversation, it was worth noting an Alexa, Google Home, Baby monitors, etc would count as listening devices which must be declared upfront before the guest books.

From Airbnb…

To summarize, we will follow up and investigate the host’s account following your report of a surveillance device in the listing. We take these reports very seriously, once again, thank you for bringing this issue to our attention. Your participation helps keep Airbnb a safe and trusted community.

Airbnb: What should be declared upfront and is simply illegal

https://twitter.com/textfiles/status/935305053258125312

Shocking tweet about a Airbnb host which setup a IP camera in the visitor bedroom. It very much reminds me of the camera in Simple which was ultimately the downfall of the Manchester restaurant.

The whole thing is just wrong but to make things worst is Airbnb’s customer service (they call it customer experience) which seems to want to keep it all under-wraps. This is surely a criminal offence and suspended isn’t nearly enough!

Of course this isn’t the only case, heres another one.

Shocking stuff! Of course my Airbnb has no cameras, no listening devices and I don’t even have a Philips Hue light in the spare room. I was going to install the Google Home mini for the purpose of controlling the lights but decided it wasn’t going to work, as it refuses to stay local.

It does raise the question of what should be declared upfront on the site before the guest books.