Following the advisory, Taiwan’s education ministry told local schools to also stop using Zoom. The agency is now encouraging educators to consider Microsoft Teams, Google Hangouts, and Cisco Webex.
Taiwan has told all government agencies to stop using Zoom, citing security and privacy concerns with the video-conferencing service.
On Tuesday, Taiwan’s executive branch issued the advisory, which is also directed to “specific non-government agencies.” In response, Taiwan’s education ministry has banned local schools from using Zoom.
The advisory doesn’t spell out the security and privacy concerns it has with Zoom. But in the US, the product has faced a wave of hijacking attempts from pranksters, online trolls, and racists out to infiltrate people’s video sessions. At the same time, security researchers have been uncovering vulnerabilities in the product, which could be abused to hack a user.
Last Friday, watchdog group Citizen Lab also published a report that says Zoom will sometimes store the encryption keys to video sessions in servers based in China, which is trying to reunify with Taiwan. Ideally, the encryption keys should be stored on your smartphone or laptop, which can prevent the provider or law enforcement from decrypting your messages. But in Zoom’s case, the company is not only holding on to the keys, but also exposing them to potential control from the Chinese government, which has the power to seize the servers in Beijing.
In Zoom’s defense, the San Jose-based company says it mistakenly sent the encryption keys for North American users to the Beijing servers. The recent flood of user traffic due to the coronavirus pandemic prompted Zoom to add more network capacity, starting in China.
“In that process, we failed to fully implement our usual geo-fencing best practices,” Zoom CEO Eric Yuan said last Friday. “As a result, it is possible certain meetings were allowed to connect to systems in China, where they should not have been able to connect. We have since corrected this.”
Whether Taiwanese users are getting their encryption keys sent to China remains unclear. Zoom did not immediately respond to a request for comment. But it’s certainly possible, given the island’s proximity to the mainland.
