citizenlab.orgThe Citizen Lab - University of Toronto

OpenCloseResearch Targeted Threats Free Expression Online Transparency and Accountability App Privacy and Controls Global Research Network Tools & Resources Publications News In the Media Events Opportunities About About the Citizen Lab Media Resources People Teaching Donate Security VulnerabilitiesThe not-so-silent type Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers April 23, 2024 App Privacy and ControlsIn this report, we examine cloud-based pinyin keyboard apps from nine vendors (Baidu, Honor, Huawei, iFlyTek, OPPO, Samsung, Tencent, Vivo, and Xiaomi) for vulnerabilities in how the apps transmit user keystrokes. Our analysis found that eight of the nine apps identified contained vulnerabilities that could be exploited to completely reveal the contents of users’ keystrokes in transit. We estimate that up to one billion users could be vulnerable to having all of their keystrokes intercepted, constituting a tremendous risk to user security.Featured Publications February 7, 2024 Targeted Threats PAPERWALL: Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content A network of at least 123 websites operated from within the People’s Republic of China while posing as local news outlets in 30 countries across Europe, Asia, and Latin America, disseminates pro-Beijing disinformation and ad hominem attacks within much larger volumes of commercial press releases. We name this campaign PAPERWALL. We attribute the PAPERWALL campaign to Shenzhen Haimaiyunxiang Media Co., Ltd., aka Haimai, a PR firm in China based on digital infrastructure linkages between the firm’s official website and the network. These findings confirm the increasingly important role private firms play in the realm of digital influence operations and the propensity of the Chinese government to make use of them. November 21, 2023 Free Expression Online Chinese censorship following the death of Li Keqiang As part of our ongoing project monitoring changes to Chinese search censorship, we tracked changes to censorship following Li Keqiang’s death across seven Internet platforms: Baidu, Baidu Zhidao, Bilibili, Microsoft Bing, Jingdong, Sogou, and Weibo. We found that some keyword combinations in search queries triggers hard censorship whereas others trigger soft censorship. Our results demonstrate China’s ongoing efforts to push state-sanctioned narratives concerning politically sensitive topics, impacting the integrity of the online information environment. October 26, 2023 Transparency and Accountability Finding You: The Network Effect of Telecommunications Vulnerabilities for Location Disclosure This report provides a comprehensive guide to geolocation-related threats sourced from 3G, 4G, and 5G network operators. Case studies, references, examples, and evidence are provided to give a complete and contextual understanding of mobile network-based location tracking in order to formulate policies and actions that protect civil society from current and future geolocation surveillance. Lifting the lid off the Internet. The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs & Public Policy, University of Toronto, focusing on research and development at the intersection of information and communication technologies, human rights, and global security. Learn more . Get the latest Citizen Lab news right in your inbox. Subscribe below. Leave this field empty if you’re human: Privacy Policy Features & News Citizen Lab submission to the Congressional-Executive Commission on China about the State of Human Rights in China April 2, 2024 News Emile Dirks, Research Associate at the Citizen Lab, prepared a written submission for the Congressional-Executive Commission on China (CECC) about the state of human rights in the country. The CECC was established by Congress in October 2000, with the legislative mandate to monitor human rights and the development of the rule of law in China,… Read more » Citizen Lab submission to Office of the Privacy Commissioner of Canada on draft guidance for processing biometrics March 19, 2024 News The recommendations call for an elaboration of the definition of biometric data, guidelines on what constitutes as sensitive biometric data types, and the usage of biometric data processing. Confirming Large-Scale Pegasus Surveillance of Jordan-based Civil Society February 1, 2024 News As part of a collaborative investigation led by Access Now, Citizen Lab researchers conducted forensic analysis of iPhones belonging to members of Jordan-based civil society. Job Opportunity: Communication Strategist January 18, 2024 Opportunities We are pleased to announce that The Citizen Lab is hiring a Communication Strategist. Reporting to the Director of Administration, Citizen Lab and working under the general direction of the Director, Citizen Lab, the Communication Strategist develops the strategic plan for increasing the Citizen Lab’s profile and presence in the national and international community and… Read more » Call for applications: Information Controls Fellowship Program 2024 January 17, 2024 Opportunities The Citizen Lab co-founded the program with OTF and has been a host organization since its inception. We welcome proposals from fellowship candidates for research projects related to our current thematic areas and applications are open to people from a variety of backgrounds and disciplines and can include students and junior to mid-career practitioners. Mobile security vulnerabilities threaten millions in Latin America: ICFP and Citizen Lab fellow Beau Kujath finds security vulnerabilities in mobile applications in Latin America region. January 12, 2024 News In a new study, Citizen Lab sheds light on the massive security threats facing Latin Americans. Citizen Lab and Open Technology Fund (OTF) fellow Beau Kujath in collaboration with SocialTIC finds that mobile applications in Latin America puts millions of users at a security and privacy risk. Beau’s research focuses on three types of mobile… Read more » Featured Video Mercenary spyware: Defending against what’s next – iMEdD International Journalism Forum 2023 Research Targeted Threats Free Expression Online Transparency and Accountability App Privacy and Controls Global Research Network Tools & Resources All Publications News In the Media Events Opportunities Newsletter Archives About About the Citizen Lab People Media Resources Teaching Donate Connect Newsletter Leave this field empty if you’re human: Privacy Policy Unless otherwise noted this site and its contents are licensed under a Creative Commons Attribution 2.5 Canada...