WaykNow Enterprise - Session Recording: Notify remote user
0 vote
I have a small suggestion for enhancing the product even further.
If user A connects to user B's system in order to provide remote assistance, and would record the session I think it would be good for user B to be made aware of the session being recorded.
Could be as simple as a small dot with a description "rec" that would be gray (or not shown) until user A starts to record. Then it should either be a red dot, or pulsate. If the "notification" screen for screen sharing was already closed, it should pop up again in the corner to raise awareness as well.
While I would say verbal notification and agreement should be enough, I do think that user B should be explicitly be made aware that the session is being recorded.
Kind regards,
Stephan Schwarz
Security Administrator - Leiden University Medical Center
All Comments (2)
Hi Stephan
Thanks for the feedback.
The current recording implementation is purely client-side - we simply encode the incoming frames as they arrive, and do some small work to make the frame rate consistent. The server doesn't have any knowledge if it's being recorded or not. While it would be possible to add this awareness on the server side, I'm not sure I see the benefit - realistically, if your screen is being shared, then it might be recorded, whether using Wayk Now itself, Camtasia, or some other screen capture tool. We would not be able to determine if the screen if being recorded by another application.
For example: on my Mac, I can press [Command]+[Shift]+5 at any time to invoke the system screen recorder, and capture an entire screen (or area of the screen), and this is not detectable by user applications on the machine. If I capture a Wayk session using that technique, the other user cannot be notified, and any UI hint showing that the screen was *not* being capture would be misleading.
Do you have any thoughts or suggestions on that?
Thanks and kind regards,
Richard Markievicz
granted that is true, and trying to block recording is probably something that would be too hard to make for little benefit (although it does help the enterprise edition as recording is an enterprise feature)
although one fun (and crazy, I know) feature might be mutually signed session recording, so that basically both the server and the client record a session (so the supporter can prove s/he done stuff and the one who gets help on the other hand can prove when the supporter did malicious stuff, and both copies of the file would get signed using both sides' wayk certificate, so basically mutually assured destruction
although that might be a thing the one who gets help might want to be able to trigger him/herself (especially in the days of tech support scams being not dead)
but obvously enough I am aware that this is a dream and will borderline 100% never get implemented.