Privacy

Posts tagged “Privacy”

Cynthia Khoo joins Online Harms and Cyberbullying Town Hall Panel on CPAC

On December 14, 2024, Cynthia Khoo, senior fellow at The Citizen Lab, participated in a CPAC Town Hall in Ottawa on Online Harms and Cyberbullying. Khoo emphasized that regulating online abuse is essential to protecting freedom of expression, particularly for marginalized communities. She explained that many individuals subjected to harassment, hate speech, and online threats… Read more »

The Citizen Lab’s submission to the Senate Standing Committee on National Security, Defence and Veterans Affairs

Kate Robertson, Senior Researcher at the Citizen Lab provided a submission to the Senate Standing Committee on National Security, Defence, and Veterans Affairs, that contributes to the ongoing consideration of Bill C-26, which seeks to give the federal government the power to impose cybersecurity regulations on telecom and critical infrastructure providers in Canada. 

Keynote Session by Kate Robertson at the 2024 APSIM Conference

We are thrilled to announce that Kate Robertson, Lawyer and senior research associate at the Citizen Lab will deliver a keynote at the upcoming Access, Privacy, Security, and Information Management Conference (APSIM).  In her keynote, titled “In the World of Privacy Regulation, What’s the Constitution got to do with it?” Kate will take a behind-the-scenes… Read more »

【我們繼續聊天?】常見問題

微信是一個具有許多功能的應用程式。之前我們研究過圍繞小程式的隱私問題,以及微信對文字和圖片訊息的監視及審查。在這項研究中,我們主要關注微信的網路加密協定及其安全性。

“Please do not make it public”: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping

In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network eavesdropper to decrypt sensitive communications sent by the app, including revealing all keystrokes being typed by the user. Following our disclosure of these vulnerabilities, Sogou released updated versions of the app that identified all of the issues we disclosed.

Should We Chat? Privacy in the WeChat Ecosystem

We conducted the first analysis of WeChat’s tracking ecosystem. Using reverse engineering methods to intercept WeChat’s network requests, we identified exactly what types of data the WeChat app is sending to its servers, and when. This report is part one of a two-part series on a privacy and security analysis of the WeChat ecosystem.

Privacy in the WeChat Ecosystem Explained

This FAQ accompanies the full report on privacy in the WeChat ecosystem. We analyzes privacy issues with popular app WeChat by reviewing the data collected by the app and sent to WeChat servers during the regular operation of its various features. We find that they collect more usage data than is disclosed in the WeChat privacy policy.