Microsoft’s Digital Crimes Unit takes legal action to dismantle Russia-based threat actor COLDRIVER following a joint investigation by The Citizen Lab and Access Now. In August, The Citizen Lab, jointly with Access Now, in collaboration with First Department, Arjuna Team, and RESIDENT.ngo, published a report that uncovered two distinct spear-phishing campaigns targeting members of Russian […]

October 3, 2024

In this report, we examine cloud-based pinyin keyboard apps from nine vendors (Baidu, Honor, Huawei, iFlyTek, OPPO, Samsung, Tencent, Vivo, and Xiaomi) for vulnerabilities in how the apps transmit user keystrokes. Our analysis found that eight of the nine apps identified contained vulnerabilities that could be exploited to completely reveal the contents of users’ keystrokes in transit. We estimate that up to one billion users could be vulnerable to having all of their keystrokes intercepted, constituting a tremendous risk to user security.

We discovered over 60,000 unique censorship rules used to partially or totally censor search results across eight China-accessible search platforms analyzed. These findings call into question the ability of non-Chinese technology companies to better resist censorship demands than their Chinese counterparts.

April 26, 2023

On April 22, the Citizen Lab published recommendations for Bill C-11, proposed updates to Canadian federal commercial privacy legislation. In this explainer, we discuss those recommendations with Christopher Parsons, the post’s lead author.

April 23, 2021

In their reporting on how China handled the first year of the COVID-19 pandemic, the New York Times cites Citizen Lab research that outlines information controls on Chinese social media during the outbreak. Senior researcher, Lotus Ruan, says that the government’s aim is “to create a state-approved version of the collective memory of the coronavirus pandemic for the public.” […]

January 10, 2021
1…20212223