Forum Discussion
Removed external meeting participant can easily rejoin
- VasilMichevAug 07, 2019MVP
Sorry, forgot to circle back here. Apparently Microsoft already has something in the works to address this.
- Erscpa725Feb 25, 2020Copper Contributor
hi, this is still behaving as described above. Can you please provide update on the fix to address this? This is very troubling that a user can just jump back into a meeting. VasilMichev
- Ian CunninghamApr 08, 2020Brass Contributor
Erscpa725
this pointless re-animation of a session still seems to work!Why no
1) Fix
2) comment from MS
Come one - this is clearly a very silly design decision. Although I can see that this might work against a genuine attendee who was dropped through connectivity issues and I suppose, could be used against a genuine user in some kind of DOS attack, the fact that the system redisplays the join details must mean that state information is being used to get them back into the meeting at the same status so it would be possible to use this (or remove it entirely) to bounce them back to the lobby. Surely if there is any concern about people "wrongly" going back to the lobby when they had a technical fail, this could be a meeting option?
"users who are dropped or removed must renter via lobby" checkbox - those who have poor connections and few "abusers" could choose not to use this - the rest of us set it up so that anyone who is disconnected by remove or drop re-enter through the lobby.
I'd also like to see a ban option but I can see how this with unvalidated users (anonymous) could be used to mount DOS attacks on innocent attendees but anyone who is that important could be made a guest and validated and it would take some technical skill to spoof an IP address (could be part of the ban table)