Help - AI Notetaking Bots Overtaking Recording

[AnnieFran]

I can't seem to flag this to Zoom but here's what's happening. Please help or report if you can!

1. AI Notetakers seem to be able to AUTOMATICALLY BYPASS my waiting room in Zoom calls hosted in my Zoom room. This has happened with Otter and other platforms!!!! This is a HUGE BUG.
2. Today, I had started a cloud recording, but then the AI Notetaker of a participant shows up and overtakes the ongoing recording without my permission or consent. This has happened multiple times.
3. - As a result, I do NOT have the recording of my session today, even though this is my account!!!!
4. - I even asked my assistant during the call to confirm it was recording and she said it still appeared as the recording was happening, but when the call ended, she saw that it did not record for us - it must have only gone to the person with the AI Notetaker (who is just a student of the course!) 

Please help or advise! This is a HUGE problem if AI Notetakers can bypass waiting rooms and supercede recordings without permission and without it being clear that the recording has been taken over. Is this a setting i need to change? We need more protections against this, Zoom!

[Weasy]

You can boot the AI from the meeting 

[AnnieFran]

Hi Weasy. Please note the context - Firstly, my VA didn't know to remove the notetaker so that created problems here - however, I have serious problems with the following that made this situation even possible which has to do with BUGS or VULNERABILITIES on Zoom's end with these third-party tools:

1) AI Notetakers being able to bypass the waiting room (participants can't enter without being admitted, but these notetakers CAN, so they are harder to catch)

2) AI Notetakers superceding my recording and essentially stealing it - and that not being clear on our end or notified on Zoom to catch this. Even if you boot the notetaker, you then need to restart the recording.

Neither 1 or 2 should be possible without the ACCOUNT HOLDER empowering it. And right now, it's happening without control or consent. Huge bug.

[km77]

The exact same thing happened to me in a meeting yesterday.  AI took over without my permission, and now I don't have a recording of the meeting.  I couldn't even stop the recording when I tried. 

[AnnieFran]

This exactly this! We shouldn't have to take random additional steps to block this - Zoom should be doing this. It's a major vulnerability!

[MW347-8]

Has this bug been fixed? Where is the response from Zoom?

[meriment]

If they are bypassing the meeting try requiring authentication. Make sure to file a ticket with Zoom support requesting bots be blocked. You can also try enabling CAPTCHA. There are also a few apps like Salepager and Meetinguard that can verify whether attendees are human before joining your Zoom meetings.

[MW347-8]

I don't see any response from Zoom, has the bug been fixed?

[meriment]

You can block the specific IP addresses associated with the specific bots form joining your Zoom meetings. You will need to ensure the list of IP addresses is comprehensive. Alternatively there is an app, Salepager, that can verify whether attendees are human before they join your Zoom meetings. 

[marafinom]

Check out my reply on this here: Re: Disallow bots to enter meetings - Zoom Community

Note: I didn't know that some can get around waiting rooms, so definitely prioritize banning the SDK Key!

I know this is old, but I wanted to shed some light for anyone else who may need help. Here's the issue: a lot of these bots can just accept a Zoom link and join as a guest, meaning that it can bypass passwords, domain bans, Marketplace approval, CAPTCHA and Outlook blocks. 

While waiting rooms have caught a few bots, the best way to prevent this going forward is by having Zoom Support delete the SDK Key of the apps going forward, something that cannot be done by a standard account admin. Support has gone back and forth on whether or not they need a specific example instance of the bot, but here is the info I usually provide when blocking: 

Bot Company, Website, Display Name(s), Client, Meeting ID, Date, Join Time

With these new technologies, this is always going to be a game of whack-a-mole, but I hope these tips help.

[hintonce]

This happened to me in the last two virtual events we held. In the first one, it appeared as if one of the attendees was recording to their computer but it was an AI bot and it booted my recording (the entire event is now gone). This week, we ran another virtual meeting and the same thing happened, but I was able to deny the Bot request and save my cloud recording. Zoom needs to do something!!!