10-18-2020 03:22 PM - edited 10-18-2020 03:22 PM
If someone sends you a link to join a Cisco/Webex meeting and they attempt to join by the web, it immediately asks guests for your name and email address with ZERO notice of why they need it. What is Webex/Cisco doing with all these email addresses? I could see that on the free tier, using these email addresses to advertise to those people as a way to recoup the costs of providing a free service - though that'd be illegal in Canada as there is no opt-in to marketing email checkbox - however my bigger concern is that I'm paying for the service I expect Cisco/Webex not to annoy my contacts.
Question 1: Why is Cisco/Webex harvesting email addresses from all my meeting attendees?
Question 2: Where is the setting to turn off this function?
Thank you.
Solved! Go to Solution.
10-18-2020 07:00 PM - edited 10-19-2020 06:12 AM
As I mentioned above there is no legitimate way that an email address should be required in that spot and, I rather cheekily asked someone from Cisco/Webex to tell me where they hid this option... As I'm impatient and started browsing Reddit afterwards, I decided to see if there was a webex community over there and I found an entirely not upvoted enough post by "mylifeisawesome2" over there which had the correct answer. So, for other people who find this requirement ludicrous, here is how you disable it:
10-18-2020 07:00 PM - edited 10-19-2020 06:12 AM
As I mentioned above there is no legitimate way that an email address should be required in that spot and, I rather cheekily asked someone from Cisco/Webex to tell me where they hid this option... As I'm impatient and started browsing Reddit afterwards, I decided to see if there was a webex community over there and I found an entirely not upvoted enough post by "mylifeisawesome2" over there which had the correct answer. So, for other people who find this requirement ludicrous, here is how you disable it:
10-18-2020 06:08 PM - edited 10-18-2020 06:48 PM
I am not complaining about the name, I agree that is a legitimately required field, I'm complaining about the requirement to have a properly formatted email address as it is, essentially, useless to anyone except Webex/Cisco themselves.
The meetings I'm having aren't being transcribed or recorded, as well, the attendees may not want to receive them, however it isn't an optional field, so it makes me question Cisco/Webex for making this a mandatory field.
I am meeting with a variety of people including some non-tech-savvy people who don't like putting their email address out there and I don't want to give the instructions "put in your first name and a fake email address". Also, if there are recordings and transcripts going to those addresses, if you put in a random address you might be sending that information to random third parties, which could be very bad depending on the content. Additionally, if people enter any email address to get transcripts and replays of meetings, it could very easily get Cisco/Webex's email systems blacklisted as bad actors start to abuse this unsolicited email sending option in SPAMing, phishing, and other campaigns. Which makes me seriously question if the system currently sends anything to those addresses.
From a usability, security, and good internet denizen perspective transcripts, recordings, and on-demand requests should only be sent to email addresses which have been verified by everyone involved ie: people who have registered webex accounts, who are authenticated to their account, and whom I invited to the meeting using the same email address as their Webex account uses. Beyond that, anything else would be exploitable.
While some may argue that I could have a closed meeting and that only those with email addresses I have invited may enter this, too, would be a highly exploitable system as there's no checks on if that truly is the person they claim to be. Individualized URLs with tokens sent when I invite people from the WEbex UI would be a half measure, but forwarding the invite email or providing the URL to another person would defeat any protection specifying users in advance would afford.
Seeing as I haven't seen a way for I, as the host, to get a list of the email addresses for my attendees, Cisco/Webex can't even claim to be doing this for my benefit... so, Cisco/Webex, legitimately, have zero options for how to use those email addresses other than to try to advertise to those people or try to mine the attendee data for marketing or advertising purposes. Because I'm a paying customer, I don't want them to do that. If someone from Cisco/Webex wishes to refute this claim, please do so. I'd appreciate it even more if you tell me where you've hidden the option to disable this highly questionable "feature"; if there's no way to disable the prompt/requirement, I'll start looking to move to a different provider as this is, simply put, a show stopper.
10-18-2020 03:35 PM
@TimSp
As far as I know, the Name (any Name) is needed to provide a useful list of participants since a list with "guest 1" "guest 2" "guest 3" is not helpful.
The eMail-Addresses are needed to be able to send the recording, transcript etc. to the participants - in case this option is used by the host - I guess. Since those email-addresses are not checked you may also use a fake-address.
I am using my free Webex-Account since almost a year now and did not receive any marketing eMail from Cisco (or from any other "unknown 3rd party") besides the notification that some feature-changes have been applied to all free accounts by Cisco.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide