feedle

In a piece for the Asia Pacific Foundation of Canada, Emile Dirks and Diana Fu argue that the U.S.’s pull back from its liberal-minded engagements in China “poses an imminent challenge to Canada: how to curb Beijing’s foreign interference without the support of a network of organizations backed by i...

Key findings We analyzed RedNote on Android and iOS for network security issues and found that all versions of RedNote fetch viewed images and videos over HTTP, which enables network eavesdroppers to learn exactly what content users are browsing. Some versions of RedNote contain a vulnerability that...

This report performs the first public analysis of MMTLS, the main network protocol used by WeChat, an app with over one billion users. The report finds that MMTLS is a modified version of TLS, however some of the modifications have introduced cryptographic weaknesses.

In this talk at the DEF CON 32 convention on August 11, Jeffrey Knockel and Mona Wang will discuss how any network eavesdropper may read the keystrokes of popular Chinese IME keyboard users.

The Citizen Lab, Munk School of Global Affairs & Public Policy, University of Toronto, is hiring an Informatics Security Analyst and Network Administrator. Reporting to the Systems and Security Technical Lead, the incumbent is responsible for carrying out a range of system and network administration...

In this report, we examine cloud-based pinyin keyboard apps from nine vendors (Baidu, Honor, Huawei, iFlyTek, OPPO, Samsung, Tencent, Vivo, and Xiaomi) for vulnerabilities in how the apps transmit user keystrokes. Our analysis found that eight of the nine apps identified contained vulnerabilities th...

A network of at least 123 websites operated from within the People’s Republic of China while posing as local news outlets in 30 countries across Europe, Asia, and Latin America, disseminates pro-Beijing disinformation and ad hominem attacks within much larger volumes of commercial press releases. We...

We identified a network of 885 websites and attributed these websites with high confidence as having been used by the United States (US) Central Intelligence Agency (CIA) for covert communication.