Skip to content

Pākuʻi-Kaʻana Kaʻana Leak o ka ʻikepili huna a i ʻole ka hanana Hot-Mic ma ke kelepona wikiō

Ke kaomi ʻana i "Kaʻana like i ka pale" ma kahi o "Share Window" ma kahi Zoom, Microsoft Teams, Google Meet, a i ʻole Webex kelepona a ʻike koke ʻia ʻo **50 mau mea kūʻai aku, mea hoʻokūkū, a i ʻole nā ​​hoa hana i ʻike i kāu luna password wehe, .env ʻO nā kī API, ka pāpaʻi uku M&A kūloko, nā moʻolelo olakino, a i ʻole kahi leka Slack pilikino e hōʻino ana i kekahi ma ke kelepona ** he pilikia koʻikoʻi ka hana mamao. ʻO ka pōʻino wale nō ka "hot-mic" a i ʻole ka hanana kamera ola, kahi āu e ʻōlelo leo nui ai a haʻalele paha me ka manaʻo ua pio kāu microphone a i ʻole webcam, e ʻike wale ana i ka mālamalama o kāu palena ʻōmaʻomaʻo i ka wā e hāmau ai ka lumi.

I loko o nā 60 kekona mua ma hope o ka lele ʻana o ka hoʻolaha ola, ** hoʻomaka ka makaʻu i ka poʻe e hana i ʻelua hewa nui**: hoʻolei koke lākou i ke kelepona me ka ʻole o ka hoʻōki ʻana i ka hoʻopaʻa ʻana o ke ao (e waiho ana i ka pahu hui AI automated o ka mea hoʻokipa e kākau, kuhikuhi, a leka uila i ke kiʻi ʻoniʻoni a me ka transcript leo i 100 poʻe i ka wā i ʻike ʻole ʻia ai ka poʻe i ʻike ʻole ʻia), a i ʻole" Noho ʻo URL ma ka pahu hoʻopaʻa wikiō e kali ana e hoʻokani hou ʻia. Hāʻawi kēia alakaʻi i ka **1-kekona kīwī kīwī ponoʻī **, nā ʻanuʻu ʻenehana e hoʻomaʻemaʻe i ka Zoom, Microsoft Teams (SharePoint/OneDrive), a me Google Meet cloud recordings a me AI transcripts ma mua o ka hāʻawi ʻana ʻana, ka hōʻoia pono a me ka hoʻopaʻa ʻana i ka GDPR/HIPAA, a me nā palapala hoʻōla waha huaʻōlelo no nā manawa wela-mic.

E hana i kēia i kēia manawa

  1. Pepe i ka kaʻana like ʻana a i ʻole ka leo ʻana i kāu mikropono i ka 1 kekona me ka hoʻohana ʻana i ka ʻaoʻao pōkole pilikia (mai hoʻonele i 5 kekona i ka ʻimi ʻana i ka pahu hana hui lana me kāu ʻiole).
    • E hooki i ka kaʻana like ʻana me ka pale koke: E kaomi Alt + S (Windows) a i ʻole Cmd + Shift + S (macOS) ma Zoom; kaomi Ctrl + Shift + E (Windows) a i ʻole Cmd + Shift + E (macOS) ma Microsoft Teams; a i ʻole ** wehe i kāu kelepona nānā waho / kaomi Win + L (Ctrl + Cmd + Q ma Mac) e laka koke i ka pale OS i ka pale laka paʻa**.
    • E hoʻohenehene koke i ka leo: E kaomi Alt + A (Cmd + Shift + A ma Mac) ma Zoom, Ctrl + Shift + M (Cmd + Shift + M ma Mac) ma Nā Hui, a i ʻole Ctrl + D (Cmd + D ma Mac) ma Google Meet.
  2. **Inā hoʻopaʻa ʻia ka hālāwai (Recording... a i ʻole he bot lawe leka AI e like me Otter.ai, Fireflies.ai, Fathom, Gong, a i ʻole Read.ai i loko o ka papa inoa o nā mea komo), HOʻOPI i ka hoʻopaʻa ʻana a kiki i nā bots AI ʻaoʻao ʻekolu MAMUA o ka hoʻopau ʻana i ka hālāwai. .mp4 wikiō a leka uila i ka loulou hōʻuluʻulu i kēlā me kēia mea kono. Inā ʻo ʻoe ka mea hoʻokipa, kaomi Stop Recording (Alt + R / Cmd + Shift + R ma Zoom) a ** wehe i nā bots hoʻopaʻa palapala AI ʻaoʻao ʻekolu mai ka papa inoa o nā mea komo ** i hiki iā ʻoe ke holoi i ka palapala hoʻopaʻa moʻolelo ma kāu puka puka ma mua o ka hoʻolaha ʻana.
  3. Inā he ʻōlelo huna, hōʻailona API, kī SSH, .env file, cookie session, a i ʻole URL admin kūloko ma ka ʻaoʻao no 0.5 kekona, REVOKE a ROTATE iā ia koke. Holo nā kahawai kelepona wikiō ma 15 a 30 mau kiʻi i kēlā me kēia kekona: hoʻokahi kiʻi i paʻa ʻia e ka mea hoʻopaʻa leo kūloko o ka mea nānā, kahi hiʻohiʻona ʻakomi "Slide/Screen Snapshot" a ke kōkua hui AI, a i ʻole ka hoʻopaʻa ʻana i ke ao. .mp4 hōʻike i ke kaula kikokikona piha ke hoʻomaha. E hahai i kā mākou alakaʻi hoʻokaʻawale ʻana i ka leak huna e hoʻopau i nā hōʻoia i hōʻike ʻia i loko o 5 mau minuke.
  4. E hoʻoholo inā loaʻa ka ʻikepili pilikino a i ʻole ka ʻikepili olakino i hoʻoponopono ʻia (PII, PHI / HIPAA, GDPR, PCI-DSS, a i ʻole MNPI kālā). Inā ʻike nā poʻe o waho i kahi pālahalaha a i ʻole ka waihona i loaʻa i ka mea kūʻai aku Social Security Numbers, nā moʻolelo olakino maʻi, nā helu kāleka hōʻaiʻē, a i ʻole ka loaʻa ʻole i hoʻolaha ʻia, e hoʻolaha i kāu hui ʻoihana ʻOihana Hoʻonaʻauao (SODPO.) Ma lalo o GDPR (Pauku 33), loaʻa i nā hui he 72-hola uaki no ka loiloi a hōʻike ʻana i nā haʻihaʻi ʻikepili pilikino ponoʻī, a me ka wikiwiki o ka hōʻike kūloko e hiki ai i nā luna IT ke hoʻomaʻemaʻe i ka hoʻopaʻa ʻana mai ka mālama ʻana i ke ao o ka ʻoihana ma mua o ka hoʻoiho ʻana mai waho.
  5. **Inā loaʻa iā ʻoe kahi pepa "hot-mic" ʻino a koʻikoʻi paha a kamaʻilio pilikino-ma ka pale, e hoʻopuka me ka mālie i loko o 10 kekona a i ʻole e leka uila i ka mea i hoʻopilikia ʻia ma hope pono o ke kelepona ʻana.

Danger

E makaʻala i nā Bots Hui Pūʻulu AI ʻEkolu ("Shadow Recording"): ʻOiai ua OFF ka hōʻailona hoʻopaʻa leo Zoom, Teams, a i ʻole Google Meet, e nānā i ka papa inoa o nā mea komo no nā bots hālāwai automated e like me Otter.ai, Fireflies.ai, Fathom, Read.ai, Sembly, Grain, a i ʻole Gong. Lawe ka nui o kēia mau bots i wikiō hoʻonā kiʻekiʻe mau a i ʻole nā ​​kiʻi ʻoniʻoni manawaleʻa o kēlā me kēia pale i kaʻana like me ka leo, a leka uila ʻakomi i ka loulou hoʻoiho wikiō i kēlā me kēia kanaka ma ka alemanaka kono 5 mau minuke ma hope o ka pau ʻana o ke kelepona. Inā hū ka pale huna i ka wā e noho ana ka bot AI o waho i loko o ka lumi, pono ʻoe e hoʻokaʻaʻike koke i ka mea nona ka bot no ka holoi ʻana i ka hālāwai mai kā lākou bot dashboard a hoʻopau i ka loulou kaʻana like.

Laau Hoʻoholo: Leak ʻIkepili Pāʻani Kūʻē Kūʻē Kūʻē Hot-Mic / Live-Camera

E kuhikuhi i kāu pane koke e pili ana i ka mea i hōʻike ʻia a me ka mea ma ke kelepona.

flowchart TD
    A["ʻO ka hanana wikiō wikiō e hōʻike ana (Zoom, nā hui, hui, Webex)"] --> B{"He aha ka mea i hoʻolaha wale ʻia?"}
    B -->|"ʻŌlelo huna, Kī API, Kōnae .env, Kī SSH, a i ʻole Admin Session Token"| C["KA HOʻOPIʻI O KA HOʻOPIʻI LOA: E manaʻo ʻia he 100% ʻae ʻia (1 kiʻi wikiō = kikokikona piha)"]
    C --> D["Hoʻihoʻi a hoʻololi koke i ka palapala hōʻoia -> hoʻomaʻemaʻe i ka hoʻopaʻa ʻana o Cloud/AI Bot -> Loko Loaʻa Hoʻopono"]
    B -->|"Palapala Hoʻopalekana: PII/HIPAA mea kūʻai aku, M&A/Kālā, Pepa Uku, a i ʻole ʻIkepili NDA Client"| E{"Ua kāhea ʻia nā poʻe o waho (nā mea kūʻai aku, nā mea kūʻai aku, lehulehu)?"}
    E -->|"ʻAe: Aia nā mea nānā waho"| F["NĀ KĀNĀWAI KAHIKO: Hoʻopau / Holoi i ka hoʻopaʻa ʻana i ke ao + Kick AI Bots -> Hoʻomaopopo koke iā InfoSec/Legal/DPO"]
    E -->|"ʻAʻole: Nā limahana kūloko wale nō"| G["LEAK MAKEMAKE I loko: Holoi i ka hoʻopaʻa ʻana / kope mai SharePoint/Zoom Cloud -> Hoʻomaopopo i ka Luna Hoʻokele / HR inā ʻike HR / Salary."]
    B -->|"Kūkākūkā pilikino Slack/Teams, Tab Huli Hana, a i ʻole Hot-Mic Verbal Slip"| H{"Ua komo anei kekahi hoa hana/mea kūʻai ma ke kelepona?"}
    H -->|"ʻAe: Hoʻohewa a haʻi ʻia paha kekahi i hele mai"| I["INTERPERSONAL TRIAGE: ʻO ka pivot kūʻokoʻa pōkole ma ke kelepona -> Hoʻouna i ka leo leo 1-a-1 i ke kanaka i loko o 15 mau minuke (Mai haʻalele iā ia)"]
    H -->|"ʻAʻole: ʻO ka walaʻau hoʻohilahila, nā ʻaʻahu, a i ʻole ka pā pilikino"| J["10-SECOND RESET: Mute/Stop Video -> Pōkole 1-sentence acknowledgment -> Resume agenda"]

Mahele 1: ʻO ka 1-Second Kill-Switch Matrix (ʻO kēlā me kēia kahua)

Ke ʻike nei ʻoe i ka hoʻolaha ʻana o ka monitor hewa a i ʻole ka leka uila, e hoʻāʻo ana e ʻimi i ka pahu "Stop Share" liʻiliʻi i hūnā ʻia ma ʻekolu mau mea nānā. Hoʻopaʻanaʻau a hana paha ma luna o kēia mea hoʻohana koke a me ke kīpē kīpē:

Papahana ʻO ka pōkole kaʻana like ʻana o ka pale koke Pōkole Mic Mute Hikiwawe Paʻi kiʻi kiʻi koke i ka pōkole Hoʻopau ʻia ʻo 0.5-Second Hardware Override (Hana ma nā polokalamu a pau)
Pono Papapihi Hoʻonui Windows/Linux: Alt + S
macOS: Cmd + Shift + S
(Hoʻomaha Kaʻana wale: Alt + T / Cmd + Shift + T)
Windows: Alt + A
macOS: Cmd + Shift + A
Windows: Alt + V
macOS: Cmd + Shift + V
Laka i ka pale OS: E kaomi Win + L (Windows) a i ʻole Ctrl + Cmd + Q (macOS) -> Huli koke ka pale i kahi pale paʻa paʻa paʻa i ka wā e mālama ana iā ʻoe ma ke kelepona leo.
A i ʻole: Huki i ke kelepona nānā waho DisplayPort/USB-C mai ke kamepiula.
Microsoft Teams Windows: Ctrl + Shift + E
macOS: Cmd + Shift + E
Windows: Ctrl + Shift + M
macOS: Cmd + Shift + M
Windows: Ctrl + Shift + O
macOS: Cmd + Shift + O
Laka i ka pale OS (Win + L / Ctrl + Cmd + Q) aiʻole kaomi Alt + F4 (Cmd + Q ma Mac) e pepehi koke i ka puka makani Teams.
Google Meet (Browser) Kaomi "Stop presenting" ma ka pā, a i ʻole kaomi Ctrl + W (Cmd + W ma Mac) ma ka ʻaoʻao polokalamu kele pūnaewele Windows: Ctrl + D
macOS: Cmd + D
Windows: Ctrl + E
macOS: Cmd + E
** Pani i ka Pūnaewele Pūnaewele (Ctrl + W / Cmd + W)** a i ʻole Laka OS Screen (Win + L / Ctrl + Cmd + Q).
Cisco Webex / Slack Huddle Webex: Ctrl + Shift + S (Cmd + Shift + S ma Mac)
Slack Huddle: Kaomi kaʻana ikona a i ʻole Ctrl + Shift + H e haalele i ka huddle
Webex: Ctrl + M (Cmd + Shift + M ma Mac)
Slack: Ctrl + Shift + Space
Webex: Ctrl + Shift + V (Cmd + Shift + V ma Mac) Hoʻopaʻa i ka poʻi Clamshell Laptop a i ʻole Lock OS Screen (Win + L / Ctrl + Cmd + Q).

Mahele 2: Pehea e hoʻomaʻemaʻe ai i nā hoʻopaʻa leo ao, nā kope, a me nā hōʻuluʻulu AI ma mua o ka hāʻawi ʻana

ʻO ka hooki ʻana i kāu kaʻana like ʻana i ka pale ola a i ʻole ke kani ʻana i kāu microphone he ** hapalua wale nō o ke kaua** inā e hoʻopaʻa ʻia a paʻi ʻia ke kelepona. Hoʻopuka ʻakomi nā hui hui ʻoihana hou i ** ʻehā mau mea hana kaʻawale** i ka pau ʻana o kahi kelepona: 1. Ka Paʻi wikiō (.mp4): Loaʻa nā kiʻi pololei o kāu pale a me ka leo leo. 2. Ka Leo Leo (.vtt / .docx): Loaʻa i kahi kope kikokikona hiki ke ʻimi ʻia o nā mea a pau i paʻa i ka mic wela. 3. ** ʻO ka hōʻuluʻulu ʻana o ka hui AI / Nā mea hana (Zoom AI Companion, Microsoft Copilot, Google Gemini Notes):** Hoʻopili ʻokoʻa i ka mea i ʻōlelo ʻia ma ka mic wela a leka uila i ka poʻe i hele mai. 4. Kūkaʻikaʻi a me nā kiʻi paʻi kiʻi ʻokoʻa: Hoʻopaʻa nā hui a me nā bots ʻaoʻao ʻekolu i nā kiʻi PNG i kēlā me kēia manawa e loli nui ka pale.

E hāhai i ke kaʻina hana hoʻihoʻi pololei no kāu paepae ma lalo ** koke (ma mua o ka pau ʻana o ka hālāwai, a i ʻole i loko o 60 kekona o ka pau ʻana o ka hālāwai)**:

1. Zoom (Cloud Recording, Local Recording & Zoom AI Companion)

  • Inā e ola ana ka hālāwai a ʻo ʻoe ka mea hoʻokipa:
    1. Kaomi ** More (...) -> AI Companion -> Hooki AI Companion**, a i ka manawa e koi ʻia ai, e nānā i ka pahu i "Hoʻopau i nā waiwai hōʻuluʻulu hui mai kēia hālāwai" no laila e hoʻopau koke ʻo Zoom AI Companion i ka transcript i loko o ka memo me ka ʻole o ka leka uila ʻana i kahi hōʻuluʻulu.
    2. Paʻi Alt + R (Cmd + Shift + R) i Hoʻopau i ka hoʻopaʻa ʻana i ke ao.
  • E Holoi i ka Zoom Cloud Recording & Transcript Mai ka Portal:
    1. Wehe https://zoom.us/recording ma kāu polokalamu kele pūnaewele a kaomi i ka Cloud Recordings.
    2. E ʻimi i ke kumuhana o ka hālāwai (inā i pau ka hālāwai, hōʻike ʻia ʻo "Processing Recording...". E kali 60 kekona a hōʻoluʻolu a hiki i ke pihi Delete, a i ʻole e hoʻololi i ka Share -> Share this recording -> OFF i ka wā e hana mau ana i hiki ʻole i kekahi me ka loulou-aunoa ke nānā iā ia).
    3. Kaomi i ka Delete (neʻe i ka ʻōpala), a laila kaomi koke iā Trash (luna ʻākau) -> Empty Trash / Delete Permanently no laila ʻaʻole hiki ke hoʻihoʻi ʻia.
    4. E hele i https://zoom.us/ai/Summary (AI Companion -> Nā Hōʻuluʻulu Hui) a holoi i ka kikokikona hōʻuluʻulu manaʻo.
    5. **Inā ʻaʻole ʻoe ka mea hoʻokipa ma kahi moʻokāki Zoom hui: ** E leka i ka mea hoʻokipa hālāwai A me kāu IT Helpdesk / Zoom Administrator koke. Hiki i ka Zoom Admin ke hele i ka Account Management -> Recording Management, e huli i ka palapala a ka mea hoʻohana ma ka Meeting ID, a holoi mau iā ia ma mua o ka hoʻouna ʻana o ka webhook i ka leka uila.

2. Nā Pūʻulu Microsoft (OneDrive, SharePoint, Stream & Copilot Transcripts)

Ma nā Pūʻulu Microsoft, kahi e ola ai ka hoʻopaʻa ʻana a me ka moʻokalaleo e pili ana i ka hui ʻana he Hui Kanal a i ʻole ka Hui Kūkākūkā maʻamau / Chat Meeting:

  • Ma kahi e mālama ai nā hui i ka faila:
    • Kalena maʻamau a i ʻole Ad-Hoc Chat Meetings: ʻO ka .mp4 mālama ʻia ka hoʻopaʻa ʻana i loko o ka Recordings waihona o ka mooolelo OneDrive for Business no ka mea nana i kaomi "Start Recording" (a i ole ka mea hoonohonoho halawai), a Aiia ka palapala ae heluhelu/Nike i na mea kono iloko i ka pau ana o ka halawai.
    • ** Hui Pūʻulu Channels:** Mālama ʻia ka hoʻopaʻa ʻana i loko o ka SharePoint Online Documents -> Recordings waihona no kēlā kaha kiʻi hui.
  • Hoʻihoʻi i kēlā me kēia ʻanuʻu i nā Pūʻulu Microsoft:
    1. Ma mua o ka pau ʻana o ka Halawai: Kaomi ** More (...) -> Hoʻopaʻa a unuhi -> Hooki i ka hoʻopaʻa ʻana** (a me Stop transcription).
    2. ** Holoi mua i ka Transcript Mai ka Meeting Chat Tab:** Inā ʻoe e holoi i ka faila wikiō, mālama ʻo Teams i ke kope kikokikona i hoʻopili ʻia i ka pā Recap / Transcript o ka hālāwai. Ma ke ʻano he mea hoʻonohonoho hui, wehe i ka hālāwai ma kāu Kalena Pūʻulu -> kaomi i ka Recap a i ʻole Transcript tab -> kaomi Delete ma luna o ka transcript e holoi i ka kikokikona wela-mic a kāpae iā Microsoft Copilot mai ka kuhikuhi ʻana iā ia.
    3. Hoʻopau i ke komo a holoi i ka .mp4 Video ma OneDrive / SharePoint: Wehe OneDrive (My files -> Recordings), kaomi i nā kiko ʻekolu (...) e pili ana i ka .mp4 file -> Manage Access -> Stop Sharing (ʻoki koke kēia i ka pāʻani i hoʻokomo ʻia i loko o ke kamaʻilio Teams no nā poʻe a pau i hele mai), a laila kaomi iā Delete, a hoʻokuʻu i kāu OneDrive Recycle Bin.

3. Google Meet (Google Drive Meet Recordings & Gemini Notes)

  • Ke hoʻopaʻa ʻia a paʻi ʻia paha kahi kelepona Google Meet, mālama ʻo Google i ka faila wikiō a me Google Doc transcript i loko o ka mea hoʻonohonoho hui ʻo Google Drive -> My Drive -> Meet Recordings folder, A hoʻopili ʻokoʻa i ka loulou i ka Hana ʻo Google Calendar no laila e loaʻa i kēlā me kēia malihini ma ke kono kalena ke komo ʻike.
  • Hoʻihoʻi i kēlā me kēia ʻanuʻu ma Google Workspace:
    1. E wehe i ka Kalena Google hanana no ka halawai koke, e kaomi i ka Edit (ikona penikala), wehe i ka mea i pili. .mp4 wikiō a me ka palapala Google Doc mai nā mea hoʻopili Kalena, a mālama me ka hoʻouna ʻole ʻana i nā leka uila hou.
    2. E wehe Google Drive -> Meet Recordings, kaomi ʻākau i ka faila wikiō a me ka "Meeting Transcript" / "Notes by Gemini" Google Doc -> Kaʻana -> hoʻololi i ka General Access i "Kaohi" a wehe i nā mea hoʻoponopono/nānā a pau, a laila e hoʻoneʻe i nā faila ʻelua i Trash a kaomi i ka Delete forever.

4. ʻO nā mea lawe memo AI ʻEkolu (Otter.ai, Fireflies.ai, Fathom, Gong, Read.ai)

Inā lawe mai kekahi mea i waho a i loko paha i kahi bot hoʻopaʻa leo AI i ke kelepona: - E ʻike i ka mea nona ka bot (hōʻike ka hapa nui o nā bots i ka inoa o ka mea nona ka inoa ma ka papa inoa o ka mea komo, e like me "Alex's OtterPilot" a i ʻole "Fireflies.ai Notetaker - Sarah"). - Kāhea a leka uila paha i kēlā kanaka kikoʻī ma mua o ka pau ʻana o ka hālāwai (a i ʻole i loko o 2 mau minuke o ka pau ʻana): e noi iā lākou e komo i loko o kā lākou Otter / Fireflies / Fathom / Read.ai dashboard, wehe i kēlā hālāwai, ** hoʻopau i ka hāʻawi leka uila maʻamau**, a kaomi i ka Delete Meeting Permanently.

Mahele 3: Hoʻopaʻa ʻenehana a me ka hoʻoponopono ma hope o ka leaka ʻikepili pale-kaʻana

Inā ʻike ʻia nā ʻikepili koʻikoʻi ma kāu pale, mai hilinaʻi ʻoe i ka manaʻo makemake ("Ua piʻi wale no 2 kekona a ua liʻiliʻi ka font"). Hou 4K a 1440p ʻO nā ʻāpana pale i hoʻopaʻa ʻia me nā codec WebRTC H.264/VP9 he aniani akaka ke hoʻomaha ʻia ma kahi nānā nui.

5-Minute Credential & Ikepili Hooia

+-----------------------------------------------------------------------+
|  WHAT WAS VISIBLE ON YOUR SCREEN? -> MANDATORY TECHNICAL ACTION       |
|                                                                       |
|  [1] Code Editor with .env / config.json / AWS / Stripe / OpenAI Key  |
|      -> REVOKE & ROTATE every key visible in that file scrolling      |
|         window within 5 minutes (even if you didn't copy-paste it).   |
|                                                                       |
|  [2] Password Manager Vault (1Password / Bitwarden / Chrome Passwords)|
|      -> Change every password whose plaintext or autofill preview     |
|         was unmasked; check if Master Password / Recovery Key showed. |
|                                                                       |
|  [3] Browser DevTools (Network Tab / Application Cookies / JWT Token) |
|      -> Click "Log Out of All Devices / Revoke All Sessions" in the   |
|         web app immediately to invalidate the leaked Bearer/Session   |
|         cookie (`SID`, `session_id`, `Authorization: Bearer ...`).    |
|                                                                       |
|  [4] Internal Admin Dashboard, Pre-Signed S3 URL, or Private Doc Link |
|      -> Change the document sharing setting from "Anyone with link"   |
|         to "Restricted" and expire the pre-signed URL token.          |
|                                                                       |
|  [5] Spreadsheet with Customer PII, SSNs, Patient PHI, or Salaries    |
|      -> Write down the exact columns/rows visible on screen, purge    |
|         the call recording, and report to InfoSec / Privacy / HR.     |
+-----------------------------------------------------------------------+
  • No ke aha e hōʻike ai i kahi PII/PHI Screen-Share i kāu ʻoihana pilikino/hui palekana e pale aku iā ʻoe: Ma nā ʻoihana i hoʻoponopono ʻia (mālama olakino ma lalo o US HIPAA, kālā ma lalo o GLBA/SEC, a i ʻole kekahi hui e lawelawe ana i ka ʻikepili kamaʻāina EU/UK ma lalo o GDPR), he ʻike maka ʻole o nā moʻolelo o nā mea kūʻai aku i kahi ʻaoʻao ʻekolu, ʻaʻole i ʻae ʻia. ** ke ʻole ʻoe e hoʻāʻo e uhi iā ia**. Ke hōʻike ʻoe iā ia i loko o 15 mau minuke:
    1. Hiki i kāu hui IT Security ke hoʻohana i ka Microsoft Purview / Google Workspace Admin Vault / Zoom Admin API no ka hoʻomaʻemaʻe ʻana i ka hoʻopaʻa ʻana o ke ao a wehe i nā leka uila i hoʻouna ʻia mai nā pahu leka uila ma mua o ka wehe ʻana o kekahi iā lākou.
    2. Hiki i kāu hui Kānāwai ke noi i ka mea kūʻai waho ma ke kelepona e hoʻopaʻa inoa i kahi Certificate of Destruction / Non-Retention attestation e hōʻoia ana ʻaʻole lākou i kiʻi kiʻi kiʻi a hoʻopaʻa i ke kau, kahi e hoʻokō pinepine ai i nā koi hoʻohaʻahaʻa i ke kānāwai no laila ʻaʻole koi ʻia kahi leka hoʻolaha lehulehu.

Mahele 4: Verbal & Interpersonal Triage for Hot-Mic, Camera, or Private-Chat Slips

He aha inā ʻaʻole he ʻōlelo huna a ʻikepili paha ka leka, akā he ** pilikia kanaka **: ua manaʻo ʻoe ua ʻakaʻaka ʻoe a hana i kahi ʻōlelo huhū, hele kekahi o kou hale ma hope o ʻoe me ka ʻaʻahu ʻole, ua kaʻana like ʻole ʻoe i kahi puka makani Slack kahi āu e hoʻopiʻi nei e pili ana i kahi hoa hana ma ke kelepona, a i ʻole ua ʻike kou haku i kāu papa palapala noi LinkedIn / mea hoʻokūkū?

Manaʻo 1: ʻO ka walaʻau kāʻei hilahila, nā pilikia ʻohana, a i ʻole nā ​​paʻa lole / pahu pahu pahu.

  1. Hiki i ka Mute / Camera Kill-Switch (Alt + A / Alt + V) a i ʻole e pani koke i ka poʻi laptop.
  2. E hoʻohana i ke kānāwai "10-Second Calm Acknowledgment & Pivot": Mai ** ʻaʻole** kalahala nui no 2 mau minuke a i ʻole e hana i kahi wahaheʻe. E kali a haku ʻia ʻoe, e hoʻokaʻawale (me ka pahu pahu inā pono), a hāʻawi i hoʻokahi ʻōlelo mālie: > "E kala mai no ka hoʻopaneʻe ʻana i koʻu hopena, e nā mea a pau. E hoʻihoʻi hou kāua i ka Slide 4 me ka laina manawa Q3."
  3. Inā he flash pahupaʻikiʻi pōʻino i ka wā e hoʻololi ana i nā lole a i ʻole kekahi lālā o ka ʻohana ma hope i ka wā i hoʻopaʻa ʻia ai ke kelepona ʻana, ** hoʻokaʻaʻike koke i ka mea hoʻokipa hālāwai a me HR/IT no ka holoi mau ʻana i ka .mp4 ʻO ka hoʻopaʻa ʻana o ke ao** (ʻo kēlā me kēia hui HR a me ke keʻena IT e mālama i nā leo hoʻopaʻa ʻana i ka mokuʻāina ʻaʻole i hoʻopaʻa ʻia ma ke ʻano he hoʻopau pilikino wikiwiki a hoʻomaʻemaʻe i ka faila wikiō me ka nīnau ʻole).

Hōʻike 2: Ua hōʻike ʻole ʻoe i kahi kamaʻilio pilikino a i ʻole i hana i kahi ʻōlelo Hot-Mic e pili ana i kekahi ma ke kelepona.

Inā ʻoe i kaʻana like i kāu pale a me kahi leka Slack/Teams e ʻōlelo ana * "No ke aha e nīnau mau ai ʻo Dave e pili ana i kēia?" * ʻike ʻia, a i ʻole ʻoe i ʻōhumu i kahi mea koʻikoʻi ma kahi mic wela, ** ʻo ka hoʻohālike ʻana ʻaʻole i hiki ke koho maikaʻi loa **. Ua ʻike a lohe paha ke kanaka (a me nā mea ʻē aʻe ma ke kelepona ʻana), a ʻo ka noho mālie ʻana e hoʻoulu ai ka huhū a i ʻole ka hoʻopiʻi ʻana i ka hoʻopiʻi HR.

  1. I ka wā o ke Kāhea Ola (I ka manawa): E pani koke i ka mahele/mute, mai ʻaʻole hana i kahi hiʻohiʻona ma ke kelepona hui, a hoʻopau i ka hālāwai me ka ʻoihana: > "E kala mai, kaʻana like ʻole i ka nānā ʻana i ka papapihi hewa ma laila. Ke hoʻololi nei i ka puka aniani hōʻike i kēia manawa."
  2. Ma loko o 10 a 15 mau minuke ma hope o ka pau ʻana o ke kelepona ʻana (The Direct 1-on-1 Call): E kelepona (a i ʻole e hoʻouna i kahi leo pōkole/noi kamaʻilio e kamaʻilio 1-a-1 me) ka hoa hana a i ʻole ka mea kūʻai aku i hoʻopilikia ʻia. E loaʻa iā ia me ka ʻole e kala ʻole: > *"E [Name], he ʻelua mau minuke kāu? Makemake au e kala pololei iā ʻoe no kēlā memo [a ʻōlelo] i ʻā mai ma koʻu pale i ka wā o ke kelepona.
    • No ke aha kēia e hana ai: ʻO kahi kalahala wikiwiki, pololei, ʻaʻohe kumu ʻole i loko o 15 mau minuke e pale aku i ka 90 pākēneka o nā pilikia ma waena o ka wahi hana ma mua o ka piʻi ʻana i ka hoʻokele a i ʻole HR.

ʻIke 3: Ua ʻike kāu Luna a i ʻole nā hoa hana i kahi Tab-Hunting Tab, Resume, a i ʻole kono ninaninau ma kāu pale.

Inā ʻoe i kaʻana like i kāu polokalamu kele pūnaewele a me kahi pā i kapa ʻia ʻo "Senior Engineer Application - [Competitor]", ʻike ʻia kahi leka uila a i ʻole kāu resume: - Mai hopohopo a hoʻopuka i ka haʻi ʻōlelo ma ke kelepona. E hoʻololi mālie i ka papa hana a hoʻopau i ka hālāwai. - E kali e ʻike inā hoʻopuka kāu luna iā ia ma kahi 1-a-1: I nā manawa he nui, ke nānā nei ka poʻe nānā i ke kikowaena o kāu pukaaniani kaʻana like ʻole a ʻaʻole heluhelu i ka kikokikona i ʻoki ʻia ma kāu mau ʻaoʻao kele pūnaewele. - Inā nīnau pololei kāu luna e pili ana iā ia ma kāu 1-a-1 e hiki mai ana: E mālama i kāu pane me ka mālie, pale ʻole, a me ka pāʻani haʻahaʻa: - Inā he leka recruiter a papa hana paha: *"Ua hele mai kahi mea hoʻolimalima a ua wehe au i ka ʻaoʻao ma mua e nānā i ka wehewehe ʻana o ka mākeke. - Inā ʻo kāu hoʻomaka: "Ke hoʻomau nei au i kaʻu hoʻomau i ka hoʻonui ʻia i kēlā me kēia manawa a ke kōkua nei au i kahi hoaaloha / hoʻomaikaʻi ʻana i kaʻu mau pahu pahu pāhana hou i ka ʻaina awakea." - E hoʻoneʻe koke i ka nānā ponoʻī āpau, nā noi hana, ka leka uila pilikino, a me nā moʻokāki Slack/Discord pilikino ma kahi ** pona pilikino kaʻawale a i ʻole kahi ʻaoʻao o ka mea hoʻohana OS / Browser Profile ** (e nānā ka palekana hana mamao pilikia a me ka pilikino ʻikepili).

Kāohi mau: ʻO ka hoʻonohonoho wikiō "Leak-Proof" 5 mau minuke

E hoʻonohonoho i kēia mau kiaʻi ʻenehana ʻelima i kēia manawa i hiki ʻole i kahi kaʻana like ʻole a i ʻole leak wela-mic hiki ʻole ke hana hou ʻia**:

  • Mai kaomi i ka "Share Entire Screen" (E kaʻana like mau i ka puka aniani no ka hoʻohana ʻana a i ʻole ka Pūnaewele Pūnaewele): ʻO ka hāʻawi ʻana i hoʻokahi pukaaniani he mea hiki ʻole i ka Slack pop-ups, password managers, desktop file, a i ʻole nā ​​ʻaoʻao kele pūnaewele e ʻike mau ʻia ma ke kahawai wikiō.
  • ** E ho'ā 'akomi i ka OS "Mai ho'opilikia / Mana'o" i ka wā e ka'ana like ana:**
    • Windows 11: E hele i Settings -> System -> Notifications -> Set priority notifications (Focus) and turn ON "When au e duplicating my display".
    • macOS: E hele i System Settings -> Notifications and UNCHECK "Allow notifications when mirroring or sharing the display".
  • Hana i kahi "Kōnaewele Hōʻike Hōʻikeʻike Maʻemaʻe": Ma Chrome, Edge, a i ʻole Firefox, e hana i kahi ʻaoʻao polokalamu kele pūnaewele ʻelua i kapa ʻia ʻo "Screen Share / Demos" ʻaʻole i loaʻa iā ** ʻaʻohe mau kaha kikoʻī pilikino, ʻaʻohe mōʻaukala autofill, ʻaʻohe huaʻōlelo hoʻonui i nā pop-up, a ʻaʻohe ʻaoʻao pūnaewele leka uila/kamaʻilio **.
  • E hoʻā i ka "Mute mau i kaʻu Microphone & Hoʻopau i ke wikiō i ka wā e hui ai i kahi hālāwai" ma kāu hoʻonohonoho Zoom, Teams, a me Google Meet, a hoʻohana i kahi pihi kīwī hoʻoheheʻe kino webcam ** me kahi ** paʻa uila USB headset mute hoʻololi me kahi hōʻailona LED ʻulaʻula.
  • E hoʻohana i ka hiʻona "Hūnā Windows Mai Screen Share" no Slack a me 1Password: Ma Zoom Desktop Settings -> Share Screen -> Advanced -> Share i koho ʻia windows, a i ʻole e hiki ai i ka hoʻonohonoho palekana i loko **1Password / Bitwarden ("Hūna i nā ʻōlelo huna / Hūnā i ka app mai ka hopu ʻana i ka ʻaoʻao") ** no laila e hoʻolilo ka OS i ka ʻōlelo huna ma ke ʻano he pahu ʻeleʻele paʻa.

Nīnau pinepine

If I shared my entire screen for 3 seconds with a sensitive document open, can the company's IT department or meeting host tell what was on my screen if the meeting wasn't being recorded?

**If the meeting was NOT being recorded (no cloud recording, no local recording, and no third-party AI note-taker bot in the room), Zoom, Microsoft Teams, and Google Meet do NOT store historical video frames of unrecorded screen shares on their servers.** Live WebRTC video streams are transmitted transiently in real time and discarded immediately after rendering on participants' screens. Your IT department can only see telemetry metadata in the admin logs (such as *"User shared screen from 14:02:10 to 14:02:14"*), **not** the visual pixels of what was on your screen, unless a participant on the call was running a local screen recorder (like OBS or QuickTime) or took a screenshot.

Can people on a Zoom, Microsoft Teams, or Google Meet call see my private direct messages (DMs) if I send a private chat message inside the meeting chat, or if I record the meeting?

**Here is the exact rule for private in-meeting chats across platforms:** - **Zoom In-Meeting Direct Messages:** Private 1-on-1 memo i hoʻouna ʻia i loko o kahi kamaʻilio hālāwai Zoom ʻaʻole ʻike ʻia e ka mea hoʻokipa** a ʻaʻole i komo i loko o ke kamaʻilio Cloud Recording. `.txt` waihona** mālama ʻia i ka puka puka o ka mea hoʻokipa. *Akā naʻe, inā ʻoe e hana nei i kahi **Local Recording** ma kāu kamepiula ponoʻī `.txt` mālama ka log log i nā leka pilikino * ʻoe * i hoʻouna / loaʻa; a inā **kaʻana like ʻoe i kāu pale holoʻokoʻa** me ka pukaaniani kamaʻilio Zoom e wehe ʻia ma kēlā kiaʻi, hiki i nā mea a pau ke heluhelu i kāu mau pihi pale. - **Microsoft Teams / Google Meet:** ʻAʻole kākoʻo ʻo Teams a i ʻole Google Meet i nā DM huna huna 1-a-1 i loko o ka ʻaoʻao kamaʻilio hālāwai nui (ʻike ʻia kēlā me kēia memo i loko o ke kamaʻilio hālāwai e ka lumi holoʻokoʻa); e hoʻohana mau i kahi puka aniani kamaʻilio ʻokoʻa ʻo Teams/Slack 1-on-1 ma kahi nānā kaʻana like ʻole.

Does Zoom's "Pause Share" (`Alt + T` / `Cmd + Shift + T`) freeze the image on viewers' screens so I can safely open my password manager or Slack on that same monitor?

**Yes, while "Pause Share" is active (`Orange border: "Your screen sharing is paused"`), viewers only see a frozen still frame of whatever was on your screen the split-second you pressed Pause.** However, **relying on "Pause Share" to look at confidential passwords or private chats on the same monitor is dangerous**, because the moment you accidentally click **Resume Share** before closing your password manager (or if the app window crashes/resizes), the live feed broadcasts your secret immediately. Always press **Stop Share (`Alt + S`)** completely, or move sensitive apps to a second unshared monitor, before opening credentials or private messages.

I was in a Breakout Room on Zoom or Teams and complained about the main presentation. Could the meeting host hear us or record our Breakout Room?

**Only if the host physically joined your Breakout Room, a participant inside your Breakout Room clicked Record, or an AI meeting bot followed someone into the Breakout Room.** In both Zoom and Microsoft Teams, the main room's **Cloud Recording only records the Main Room** (it does not simultaneously record all separate Breakout Rooms unless a Breakout Room participant has local-recording permission and starts a recording inside that room, which triggers an audible/visual *"Recording in progress"* banner inside the Breakout Room). Similarly, the meeting host cannot silently eavesdrop on Breakout Room audio without visibly joining the room in your participant list.

Nānā ʻia nā kumu

  • Zoom Video Communications, Inc.: Admin a me ka mea hoʻohana palapala no ka hoʻoponopono ʻana a me ka holoi ʻana i nā leo ʻopua, nā hōʻuluʻulu hui hui AI, ka pilikino kamaʻilio i loko o ka hālāwai, a me nā ʻoki pōkole.
  • Microsoft Corporation: Microsoft Teams Recording and Transcription Architecture in OneDrive for Business and SharePoint Online a me Microsoft Purview Data Loss Prevention (DLP) for Teams Screen Sharing.
  • Kōkua Luna Hoʻokele o Google Workspace: Hoʻokele i nā palapala hoʻopaʻa Google Meet, Transcripts, a me Gemini no ka lawe ʻana i nā memo ma Google Drive a me ka Kalena.
  • National Institute of Standards and Technology (NIST, United States): NIST SP 800-46 Revision 2: Guide to Enterprise Telework, Remote Access, and bring your own device (BYOD) Security a me NIST SP 800-61 Computer Security Incident Handling Guide.
  • European Data Protection Board (EDPB) & UK Information Commissioner's Office (ICO): Alakaʻi 9/2022 no Personal Data Breach Notification under GDPR (Article 33 72-Hour Assessment and Accidental Unauthorized Disclosure Triage).

Nā alakaʻi pili