Tl;dv: Over 180k meetings left wide open
bobdahacker.com
August 10, 2026
7 min read
🔥🔥🔥🔥🔥
66/100
Summary
tl;dv (Too Long; Didn't View) is an AI meeting recording platform that integrates with Google Meet, Zoom, and Teams to record, transcribe, and summarize meetings. The platform has over 2 million users and is backed by investors, with endorsements from prominent figures in the sales community on LinkedIn.
Key Takeaways
- The tl;dv platform has a vulnerability that allows any authenticated user to access and query all meeting records across the platform, exposing sensitive information such as conference IDs and email addresses.
- There are 181,874 meeting records belonging to 84,312 unique users across 35,003 email domains, including government, university, and corporate meetings.
- An attacker can join live meetings by obtaining conference IDs from the exposed Firestore database, with approximately 1,000 meetings in recording status at any given time.
- The tl;dv platform is used by over 2 million users and is endorsed by a significant portion of LinkedIn's sales influencer community.
Community Sentiment
Positives
- The interest in AI note takers is palpable, with users eager for local solutions that can avoid security pitfalls — the race is on for better diarization and speaker identification!
- Developers are actively working on improving local AI note-taking tools, showing that innovation in this space is far from stagnant.
Concerns
- The exposure of sensitive data due to lax security settings in AI products raises serious concerns about user trust and accountability.
- Commenters are rightly skeptical of SOC2 compliance, calling it a marketing ploy that doesn't guarantee actual security — how can users feel safe?
- There's a pervasive fear that AI tools are a security risk, making users hesitant to adopt them, even when they could boost productivity.
