Sick of sharing those generic Zoom video call invites that all look the same? Wish your Zoom link preview’s headline and image actually described your meeting? Want to protect your Zoom calls from trolls by making attendees RSVP to get your link? ZmURL.com has you covered.

Launching today, ZmURL is a free tool that lets you customize your Zoom video call invite URL with a title, explanation and image that will show up when you share the link on Twitter, Facebook or elsewhere. ZmURL also lets you require that attendees RSVP by entering their email address so you can decide who to approve and provide with the actual entry link. That could stop Zoombombers from harassing your call with offensive screenshared imagery, profanity or worse.

“We built zmurl.com to make it easier for people to stay physically distant but socially close,” co-founder Victor Pontis tells me. “We’re hoping to give event organizers the tools to preserve in-person communities while we are all under quarantine.”

Zoom wasn’t built for open public discussions. But with people trapped inside by coronavirus, its daily user count has spiked from 10 million to 200 million. That’s led to new use cases, from cocktail parties to roundtable discussions to AA meetings to school classes.

That’s unfortunately spawned new problems, like “Zoombombing,” a term I coined two weeks ago to describe malicious actors tracking down public Zoom calls and bombarding them with abuse. Since then, the FBI has issued a warning about Zoombombing, The New York Times has written multiple articles about the issue and Zoom’s CEO Eric Yuan has apologized.

Yet Zoom has been slow to adapt it features as it struggles not to buckle under its sudden scale. While it has turned on waiting rooms and host-only screensharing by default for usage in schools, most people are still vulnerable due to Zoom’s permissive settings and reused URLs that were designed for only trusted enterprise meetings. Only today did Zoom concede to shifting the balance further from convenience to safety, turning on waiting rooms by default and requiring passwords for entry by Meeting ID.

Meanwhile, social networks have become a sea of indistinguishable Zoom links that all show the same blue and white logo in the preview, with no information on what the call is about. That makes it a lot tougher to promote calls, which many musicians, fitness instructors and event producers are relying on to drive donations or payments while their work is disrupted by quarantines.

ZmURL’s founders during their only in-person meeting ever

Luckily, Pontis and his co-founder Danqing Liu are here to help with ZmURL. The two software engineers fittingly met over Zoom a year ago and have only met once in person. Pontis, now in San Francisco, had started bike and scooter rental software companies Spring and Scooter Map. Liu, from Beijing but now holed up in New York, had spent five years at Google, Uber and PlanGrid before selling his machine learning tool TinyMind.

The idea for ZmURL stemmed from Liu missing multiple Zoom events he’d wanted to attend. Then a friend of Pontis’ was laid off from their yoga instructor job, and they and their colleagues were scrambling to market and earn money from hosting their own classes over Zoom. The duo quickly built a beta, with zero money raised, and tested it with some yoga gurus who found it simplified promoting events and gathering RSVPs. “We’re all going through a tough time right now. We see ZmURL as our opportunity to help,” Pontis tells me.

To use the tool, you generate a generic meeting link from Zoom like zoom.us/ji/1231231232 and then punch it into ZmURL. You can upload an image or choose from stock photos and color gradients. Then you name your event, give it a description and set the time and date. You’ll get a shorter URL like https://zmurl.com/smy5m or you can give it a custom one like zmurl.com/quidditch.

When you share that URL, it’ll show your image, headline and description in the link preview on chat apps, social networks and more. Attendees who click will be shown a nicely rendered event page with the link to enter the Zoom call and the option to add it to their calendar. You can try it out here, zmurl.com/aloha, as the startup is hosting a happy hour today at 6pm Pacific.

Optionally, you can set your ZmURL calls to require an RSVP. In that case, people who click your link have to submit their email address. The host can then sift through the RSVPs and choose who to email back the link to join the call. If you see an RSVP from someone you don’t recognize, just ignore it to keep Zoombombers from slipping inside.

Surprisingly, there doesn’t seem to be any other tools for customizing Zoom call links. Zoom paid enterprise customers can only set up a image and logo-equipped landing page for their whole company’s Zoom account, not for specific calls. For now, ZmURL is completely free. But the co-founders are building out an option for hosting paid events that collect entry fees on the RSVP site while ZmURL takes a 5% cut.

Next, ZmURL wants to add the ability to link your Zoom account to its site so you can spawn call links without leaving. It’s also building out always-on call rooms, recurring events, organizer home pages for promoting all their calls, an option to add events to a public directory, email marketing tools and integrations with other video call platforms like Hangouts, Skype and FaceTime.

( function() {
var func = function() {
var iframe = document.getElementById(‘wpcom-iframe-3b532f031b283c0fd460c7db67455eba’)
if ( iframe ) {
iframe.onload = function() {
iframe.contentWindow.postMessage( {
‘msg_type’: ‘poll_size’,
‘frame_id’: ‘wpcom-iframe-3b532f031b283c0fd460c7db67455eba’
}, “https://tcprotectedembed.com” );
}
}

// Autosize iframe
var funcSizeResponse = function( e ) {

var origin = document.createElement( ‘a’ );
origin.href = e.origin;

// Verify message origin
if ( ‘tcprotectedembed.com’ !== origin.host )
return;

// Verify message is in a format we expect
if ( ‘object’ !== typeof e.data || undefined === e.data.msg_type )
return;

switch ( e.data.msg_type ) {
case ‘poll_size:response’:
var iframe = document.getElementById( e.data._request.frame_id );

if ( iframe && ” === iframe.width )
iframe.width = ‘100%’;
if ( iframe && ” === iframe.height )
iframe.height = parseInt( e.data.height );

return;
default:
return;
}
}

if ( ‘function’ === typeof window.addEventListener ) {
window.addEventListener( ‘message’, funcSizeResponse, false );
} else if ( ‘function’ === typeof window.attachEvent ) {
window.attachEvent( ‘onmessage’, funcSizeResponse );
}
}
if (document.readyState === ‘complete’) { func.apply(); /* compat for infinite scroll */ }
else if ( document.addEventListener ) { document.addEventListener( ‘DOMContentLoaded’, func, false ); }
else if ( document.attachEvent ) { document.attachEvent( ‘onreadystatechange’, func ); }
} )();

Pontis says the biggest challenge will be learning to translate more of the magic and business potential off offline events into the world of video calling. There’s also the risk that Zoom will try to intercede and force ZmURL to desist. But it shouldn’t, at least until Zoom builds all these features itself. Or it should just acquire ZmURL.

We’re dealing with an unprecedented behavior shift due to shelter-in-place orders that threaten to cripple the world economy and drive many of us crazy. Whether for fostering human connection or keeping event businesses afloat, Zoom has become a critical utility. It should accept all the help it can get.

Source: Tech Crunch Mobiles | ZmURL customizes Zoom link previews with images & event sites

Zoom is making some drastic changes to prevent rampant abuse as trolls attack publicly shared video calls. Starting April 5th, it will require passwords to enter calls via Meeting ID, as these may be guessed or reused. Meanwhile, it will change virtual waiting rooms to be on by default so hosts have to manually admit attendees.

The changes could prevent “Zoombombing,” a term I coined two weeks ago to describe malicious actors entering Zoom calls and disrupting them by screensharing offensive imagery. New Zoombombing tactics have since emerged, like spamming the chat thread with terrible GIFs, using virtual backgrounds to spread hateful messages or just screaming profanities and slurs. Anonymous forums have now become breeding grounds for organized trolling efforts to raid calls.

Just imagine the most frightened look on all these people’s faces. That’s what happened when Zoombombers attacked the call.

The FBI has issued a warning about the Zoombombing problem after children’s online classes, Alcoholics Anonymous meetings and private business calls were invaded by trolls. Security researchers have revealed many ways that attackers can infiltrate a call.

The problems stem from Zoom being designed for trusted enterprise use cases rather than cocktail hours, yoga classes, roundtable discussions and classes. But with Zoom struggling to scale its infrastructure as its daily user count has shot up from 10 million to 200 million over the past month due to coronavirus shelter-in-place orders, it’s found itself caught off guard.

Zoom CEO Eric Yuan apologized for the security failures this week and vowed changes. But at the time, the company merely said it would default to making screensharing host-only and keeping waiting rooms on for its K-12 education users. Clearly it determined that wasn’t sufficient, so now waiting rooms are on by default for everyone.

Zoom communicated the changes to users via an email sent this afternoon that explains “we’ve chosen to enable passwords on your meetings and turn on Waiting Rooms by default as additional security enhancements to protect your privacy.”

The company also explained that “For meetings scheduled moving forward, the meeting password can be found in the invitation. For instant meetings, the password will be displayed in the Zoom client. The password can also be found in the meeting join URL.” Some other precautions users can take include disabling file transfer, screensharing or rejoining by removed attendees.

NEW YORK, NY – APRIL 18: Zoom founder Eric Yuan reacts at the Nasdaq opening bell ceremony on April 18, 2019 in New York City. The video-conferencing software company announced it’s IPO priced at $36 per share, at an estimated value of $9.2 billion. (Photo by Kena Betancur/Getty Images)

The shift could cause some hassle for users. Hosts will be distracted by having to approve attendees out of the waiting room while they’re trying to lead calls. Zoom recommends users resend invites with passwords attached for Meeting ID-based calls scheduled for after April 5th. Scrambling to find passwords could make people late to calls.

But that’s a reasonable price to pay to keep people from being scarred by Zoombombing attacks. The rash of trolling threatened to sour many people’s early experiences with the video chat platform just as it’s been having its breakout moment. A single call marred by disturbing pornography can leave a stronger impression than 100 peaceful ones with friends and colleagues. The old settings made sense when it was merely an enterprise product, but it needed to embrace its own change of identity as it becomes a fundamental utility for everyone.

Technologists will need to grow better at anticipating worst-case scenarios as their products go mainstream and are adapted to new use cases. Assuming everyone will have the best intentions ignores the reality of human nature. There’s always someone looking to generate a profit, score power or cause chaos from even the smallest opportunity. Building development teams that include skeptics and realists, rather than just visionary idealists, could keep ensure products get safeguarded from abuse before rather than after a scandal occurs.

Source: Tech Crunch Mobiles | Zoom will enable waiting rooms by default to stop Zoombombing