Asked to run a script to join a meeting

[zzztt]

I was asked to run a script to connect to a session, is this normal?

I am afraid of malware, etc.

Photo of the code 

[storyhub]

Your photo says it is from an unknown developer via Google chrome.

1. I do not recommend using Chrome browser because of its violation of privacy (class action court case)

2. Untrusted plugins, scripts, extensions, etc. are high risk.

[zzztt]

hi storyhub, 

thanks for the reply!

the guy who sent me the link is legit as he's confirmed his identity through X direct message, and mentioned that it is a privacy measure for their company. 

yet, is this still risky as normally it is not required to run a script to join meetings? Or is this a way to increase privacy for companies also.

Thanks!

[storyhub]

Developers can create their own version of Zoom and can conceal the meeting ID and passcode. If once you are in you can see the meeting ID and passcode by opening meeting info then the script really didn't add any security. If the script registers you with the Zoom account that would add a level of security, but a script is not needed to register with Zoom.

[zzztt]

I was given this link to join the session:

https://us05web.zoom.us/j/8655690929?pwd=mqGWNHF4zQ6uNgzhhgOHkYbNWXdLpLwk

the link looked normal with zoom's domain etc.  I would like to know if people can use zoom SDK to implement scripts which has to be run before joining any session?

[storyhub]

That link is normal and it contains the meeting id and the hashed version of the passcode. The info in it can also be used to create a shortcut in Windows or Apple devices to launch the meeting again if it is a recurring meeting.

[zzztt]

https://us05web.zoom.us/j/8655690929?pwd=mqGWNHF4zQ6uNgzhhgOHkYbNWXdLpLwk

this was the link the guy sent me to join the meeting, is this normal?