We conducted the first analysis of WeChat’s tracking ecosystem. Using reverse engineering methods to intercept WeChat’s network requests, we identified exactly what types of data the WeChat app is sending to its servers, and when. This report is part one of a two-part series on a privacy and security analysis of the WeChat ecosystem.
The Information Controls Fellowship Program (ICFP) from the Open Technology Fund (OTF) fosters research, outputs, and creative collaboration on repressive Internet censorship and surveillance issues. The program supports examination into how governments in countries, regions, or areas of OTF’s core focus are restricting the free flow of information, cutting access to the open Internet, and… Read more »
Citizen Lab examined a set of documents leaked to news outlet The Intercept that describe plans to develop and launch an Iranian mobile network, including subscriber management operations and services, and integration with a legal intercept solution. If implemented fully as envisioned, it would enable state authorities to directly monitor, intercept, redirect, degrade or deny all Iranians’ mobile communications, including those who are presently challenging the regime.
النتائج الرئيسية تم اختراق أجهزة أربعة مدافعين عن حقوق الإنسان، محاميين، وصحفيين أردنيين بواسطة برنامج التجسس بيغاسوس من مجموعة NSO في الفترة ما بين أغسطس 2019 و ديسمبر 2021. من ضمن المستهدفيين أفراد ناشطون في قضايا مكافحة الفساد في الأردن. اثنان من الأفراد المستهدفين نساء. نقدر أن اثنين على الأقل من المستهدفين الأربعة قد تم… Read more »
The Information Controls Fellowship Program from the Open Technology Fund (OTF) supports research into how governments in countries, regions, or areas of OTF’s core focus are restricting the free flow of information, cutting access to the open Internet, and implementing censorship mechanisms, thereby threatening the ability of global citizens to exercise basic human rights and democracy; work focused on mitigation of such threats is also supported.
MY2022, an app mandated for use by all attendees of the 2022 Olympic Games in Beijing, has a simple but devastating flaw where encryption protecting users’ voice audio and file transfers can be trivially sidestepped. Health customs forms which transmit passport details, demographic information, and medical and travel history are also vulnerable. Server responses can also be spoofed, allowing an attacker to display fake instructions to users.
Citizen Lab researchers reviewed the consultation materials, including the “Technical Paper” and the “Discussion Guide” associated with the government’s proposal to address what it has referred to as “online harms.” We provide the following comments in response to that consultation process.
On March 22, 2021, Citizen Lab research associate Christopher Parsons appeared before the Special Committee on Canada-China Relations to testify about issues of national security, governance, and trust with regards to Chinese companies and their technical products and services.
A comparative analysis of security, privacy, and censorship issues in TikTok and Douyin, both developed by ByteDance.
In order to contribute to the IPC’s deliberations in the triaging of its strategic priorities, this submission serves to provide particularized input with respect to the IPC’s public interest mandate in the oversight of law enforcement authorities when it comes to the use of algorithmic policing technology in Ontario.
