ICANN blog : ICANN suspends use of Adobe Connect at. ICANN61 due to security issue
From https://www.icann.org/news/blog/issues-with-adobe-connect-at-icann61 “....*"Yesterday we were notified by a member of the Security and Stability Advisory Committee of what appears to be a potentially serious security issue affecting our use of Adobe Connect.* *In order to protect the members of the multistakeholder community, and out of an abundance of caution, we have suspended our Adobe Connect services. This means that Adobe Connect services will not be available for the rest of ICANN61.”* Livestream and streaming audio will be available. The security issue regarding Adobe Connect is likely the one posted by Adobe on “patch Tuesday” https://helpx.adobe.com/security/products/connect/apsb18-06.html “Adobe has released a security update for Adobe Connect. This update resolves an unrestricted SWF file upload vulnerability (CVE-2018-4921), which could be exploited to conduct cross-site scripting attacks. This update also resolves an OS command injection vulnerability in the Adobe Connect URI handler on Windows (CVE-2018-4923) that could result in unintended arbitrary local file removal or forced uninstall of the application. ” Dev Anand
Hi Dev Due to this problem. which is still recurrent within the adobe platform due to the use of the swf format. I think it would be an opportunity to change the platform since similar services such as zoom, whose cost is 50% lower in relation to the cost of adobe. https://zoom.us/pricing https://www.adobe.com/products/adobeconnect/buying-guide.html Besides the advantage in the case of zoom to work with the webrtc protocol (developed in the ietf), which allows to be light and multiplatform, besides working with any type of connection to the internet and the valuable function in the case of corporate plans to create a recording immediately of an mp4 file, which can be placed within the ICANN youtube channel. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaig...> Libre de virus.www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaig...> <#m_-4870086568832205972_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> Raitme Citterio 4FE7 B994 C1CF 2815@pgp 2018-03-14 6:52 GMT-04:00 Dev Anand Teelucksingh <devtee@gmail.com>:
From
https://www.icann.org/news/blog/issues-with-adobe-connect-at-icann61
“....*"Yesterday we were notified by a member of the Security and Stability Advisory Committee of what appears to be a potentially serious security issue affecting our use of Adobe Connect.*
*In order to protect the members of the multistakeholder community, and out of an abundance of caution, we have suspended our Adobe Connect services. This means that Adobe Connect services will not be available for the rest of ICANN61.”*
Livestream and streaming audio will be available.
The security issue regarding Adobe Connect is likely the one posted by Adobe on “patch Tuesday”
https://helpx.adobe.com/security/products/connect/apsb18-06.html
“Adobe has released a security update for Adobe Connect. This update resolves an unrestricted SWF file upload vulnerability (CVE-2018-4921), which could be exploited to conduct cross-site scripting attacks. This update also resolves an OS command injection vulnerability in the Adobe Connect URI handler on Windows (CVE-2018-4923) that could result in unintended arbitrary local file removal or forced uninstall of the application. ”
Dev Anand
_______________________________________________ ttf mailing list ttf@atlarge-lists.icann.org https://mm.icann.org/mailman/listinfo/ttf
Plus, the adobe connect is not very accessible for persons with disabilities. An issue that I have faced while attending the online meetings. Therefore, if the change of platform is under discussion and any software other than zoom is being considered, my suggestion would be to test its accessibility also, before adopting it at ICANN. Best, Muhammad Shabbir. From: ttf [mailto:ttf-bounces@atlarge-lists.icann.org] On Behalf Of Raitme Citterio Sent: Wednesday, March 14, 2018 5:45 PM To: Dev Anand Teelucksingh Cc: Technology Taskforce WG Subject: Re: [technology taskforce] ICANN blog : ICANN suspends use of Adobe Connect at. ICANN61 due to security issue Hi Dev Due to this problem. which is still recurrent within the adobe platform due to the use of the swf format. I think it would be an opportunity to change the platform since similar services such as zoom, whose cost is 50% lower in relation to the cost of adobe. https://zoom.us/pricing https://www.adobe.com/products/adobeconnect/buying-guide.html Besides the advantage in the case of zoom to work with the webrtc protocol (developed in the ietf), which allows to be light and multiplatform, besides working with any type of connection to the internet and the valuable function in the case of corporate plans to create a recording immediately of an mp4 file, which can be placed within the ICANN youtube channel. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaig...> Libre de virus. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaig...> www.avast.com Raitme Citterio 4FE7 B994 C1CF 2815@pgp 2018-03-14 6:52 GMT-04:00 Dev Anand Teelucksingh <devtee@gmail.com <mailto:devtee@gmail.com> >: From https://www.icann.org/news/blog/issues-with-adobe-connect-at-icann61 “...."Yesterday we were notified by a member of the Security and Stability Advisory Committee of what appears to be a potentially serious security issue affecting our use of Adobe Connect. In order to protect the members of the multistakeholder community, and out of an abundance of caution, we have suspended our Adobe Connect services. This means that Adobe Connect services will not be available for the rest of ICANN61.” Livestream and streaming audio will be available. The security issue regarding Adobe Connect is likely the one posted by Adobe on “patch Tuesday” https://helpx.adobe.com/security/products/connect/apsb18-06.html “Adobe has released a security update for Adobe Connect. This update resolves an unrestricted SWF file upload vulnerability (CVE-2018-4921), which could be exploited to conduct cross-site scripting attacks. This update also resolves an OS command injection vulnerability in the Adobe Connect URI handler on Windows (CVE-2018-4923) that could result in unintended arbitrary local file removal or forced uninstall of the application. ” Dev Anand _______________________________________________ ttf mailing list ttf@atlarge-lists.icann.org <mailto:ttf@atlarge-lists.icann.org> https://mm.icann.org/mailman/listinfo/ttf
participants (3)
-
Dev Anand Teelucksingh -
Muhammad Shabbir -
Raitme Citterio