The Citizen Lab

In light of our latest report detailing an inexpensive but effective phishing campaign, protecting yourself online has never been more important. Learn why 2-Factor Authentication is an easy first step to take: t.co/KytFzvuHEj

Can you spot the difference? Gmail log-in pages were spoofed in latest phishing campaign targeting Tibetan community t.co/YAyTwC3Inq

Along with @cippic, we've penned an analysis of the government's explanations of some of the more problematic elements of #C59 and outline how they are ultimately not enough to alleviate our concerns t.co/LVaQdw8fTk

NEW REPORT: Spying on a Budget: Inside a Phishing Operation with Targets in the Tibetan Community t.co/VqyhGQX36T

"It's very much in the interest of a company collecting this kind of data to not really discourage everybody from sharing it," says @jsrailton. "They want that data." t.co/IKqMXYXheZ

"[@lex_is], chercheuse rattachée au Citizen Lab du Munk School of Global Affairs, à l'Université de Toronto, note qu'elle serait « très surprise » d'apprendre que le stratagème en question respecte la Constitution canadienne." t.co/aBJ1nEsUNi

"In one case, [@jsrailton] was able to look at activity in what's believed to be a drone warfare facility in the Middle East, whilst looking at routes around a Russian embassy in Damascus, Syria." t.co/RI6rMi1lvG

Citizen Lab's @jsrailton recently outlined the information that can be gleaned from insecure apps-- like Strava’s fitness tracker-- including the identification of secret military facilities and specific behaviour patterns of at-risk individuals t.co/oZRnXwWxNE t.co/jiTVg2jbGq

Read Citizen Lab's @jsrailton analysis of privacy and security risks of data leakage in fitness trackers, #Fitleaking t.co/rxisMqPI07

Throwback to last year's discovery of Chinese censorship in an unlikely place: video games t.co/vWpqLnTbql #TBT t.co/dn87NrOTmY

"Given the high stakes for public safety and foreign policy, there is no reason whatsoever for Metrolinx to not disclose whatever evidence they have."- @RonDeibert t.co/mJwz2mv6eZ

This Saturday, Citizen Lab Research Fellow @jon_penney will be giving a talk at the CivilServant Community Research Summit hosted at @medialab. More info: t.co/EWnnZ2DSlJ @natematias

"Once considered the exclusive concern of national security reporters, basic digital security competence is now essential for all journalists." t.co/kaKStIBngG

ICYMI: spyware campaigns targeting Mexican journalists, lawyers, human rights advocates, and anti-corruption campaigners highlighted in @hrw 2017 review t.co/aVgjMXXpxb #GobiernoEspía

Psiphon sees widespread use amid Iranian civil unrest - The Varsity t.co/Q3ACzzUjxu @rondeibert @psiphoninc

El Informe Mundial 2018 de @hrw detalla el récord de derechos humanos de México en 2017, incluido el uso de spyware contra periodistas, abogados y organizaciones que luchan contra la corrupción t.co/aVgjMXXpxb

t.co/3DtCG6BJUm #GobiernoEspia

World Report 2018 by @hrw details Mexico's human right record for 2017, including the use of spyware to target journalists, lawyers, and anti-corruption advocates t.co/aVgjMXXpxb

Congrats to Citizen Lab research fellow @RamyRaoof! t.co/BZCc6meBrT

Citizen Lab research fellow @lex_is discusses the challenges and opportunities presented in Bill #C59: t.co/5F1n92dh3r

“We created a system based on private social networks of trust.”- @RonDeibert t.co/m87igsTfc3

ICYMI: t.co/9qrcZQKRjo @mozilla

FlashPoint IP Ltd. responds to the unauthorized use of its name and address in code-signing certificate linked to Cyberbit’s PSS spyware. Read the letter here: t.co/d7UiWkYpdu

“There can be understandable operational reasons the Canadian government believes it would be helpful to intrude upon foreign elections, foreign judicial processes . By having that there . . . we are normalizing (the practice).” @caparsons t.co/cpQFuCI3gW via @torontostar

#TBT to our analysis of proposed Bill #C59 t.co/xn7qp9vagc t.co/gtibBiIC5V

It's really hard to chat privately on the Internet (and that's why encrypted messaging matters) t.co/TLjcgBZB2e t.co/2X4Kjbzvz7