In response to the call for submissions of the United Nations Special Rapporteur on freedom of opinion and expression regarding the use of encryption and anonymity in digital communications, the Citizen Lab and independent researcher Collin Anderson have submitted a joint analysis, entitled “The need for democratization of digital security solutions to ensure the right to freedom of expression.”

In an article published on Slate, entitled “Code Is Law,” Citizen Lab Research Fellow Jon Penney discussed how US laws, such as the Computer Fraud and Abuse Act (CFAA) and Digital Millennium Copyright Act (DMCA), are determining the ethics of computer code.

The Canadian SIGINT Summaries includes downloadable copies, along with summary, publication, and original source information, of leaked CSE documents.

This report describes a malware attack on a Syrian citizen media group critical of Islamic State of Iraq and Syria (ISIS). Though we are unable to conclusively attribute the attack to ISIS or its supporters, a link to ISIS is plausible. The malware used in the attack differs substantially from campaigns linked to the Syrian regime, and the attack is against a group that is an active target of ISIS forces. In the interest of highlighting a developing threat, this post analyzes the attack and provides a list of Indicators of Compromise.

Independent Researcher Claudio Guarnieri has partnered with Privacy International, Digitale Gesellschaft, Electronic Frontier Foundation and Amnesty International to publicly release the Detekt tool, which allows journalists and human rights defenders to scan their computers for traces of known surveillance spyware.

Four years after the ‘Arab Spring’, it is believed that empowerment of civil society in Latin America has been hampered by formal and informal structures of power, which – legally and illegally- are funneling digital manifestations of social grievances, thus avoiding significant challenges to the status quo.

A new report, entitled “Communities @ Risk: Targeted Digital Threats Against Civil Society,” involved 10 civil society groups that enrolled as study subjects over a period of four years. The study sought to obtain greater visibility into an often overlooked digital risk environment affecting–whether they know it or not–many of society’s most essential institutions.

A new article in the Winston Report by Christopher Parsons and Andrew Hilts addresses issues that Canadians may face when attempting to request the personal information organizations keep on them.

This report provides a detailed analysis of two products sold for facilitating targeted surveillance known as network injection appliances. These products allow for the easy deployment of targeted surveillance implants and are being sold by commercial vendors to countries around the world. Compromising a target becomes as simple as waiting for the user to view unencrypted content on the Internet.