The Citizen Lab

How Abu Dhabi’s Spy Sheikh hid ToTok in Plain Sight by our own @billmarczak t.co/rQM2cogIbH

ICYMI from last week: How these Toronto sleuths are exposing the world’s digital spies while risking their own lives t.co/eS51nakutY via @TorontoStar @scontenta

While initially hailed as a tool of liberation, social media is now seen as an engine of political propaganda. @abulkhaezuran & @AndrewMLeber contextualize this within the Gulf Crisis and demonstrate how state actors manipulate discourse on Twitter. t.co/sVsj2NqarP t.co/flie4uKmZ0

NSO spyware first appeared in Mexico in 2016, with operators setting sights not on terrorists or criminals, but public health scienists #GobiernoEspía #TBT t.co/8FjV1sckGb

Users, producers, and sellers of stalkerware apps are *all* likely in contravention of several Canadian laws. This comic by @jasonli breaks down some of the potential legal rights infringed upon. t.co/imeQodNMNY

Canada must conduct an evaluation on how Ottawa expanding its engagement with Huawei could affect its relations with Washington, argues @caparsons t.co/dEAeABVZSS

Today: join @irenepoet in a discussion of why it's integral to approach digital policy and cybersecurity as issues deeply impacted by gender and orientation.

"Frankly, the government of Canada has fallen down catastrophically and this has meant that no one knows exactly what they should be doing"- @caparsons on the lack of guidance universities recieve when partnering with companies like Huawei t.co/VWF2u4JJlh

“I resorted to suing [Korea Telecom] to get the rest of my data.”- Kelly Kim of @opennetkr on how a personal data request turned into a legal stand-off. t.co/Mw2I2Ixl0G

Join @KateRobertson_ on December 3rd as she discusses the dangers of facial recognition and the legal implications of increasingly invasive technologies. t.co/uxFcbuDhIK t.co/Qa0aN43t3Q

Platform providers must pay close attention to threats against civil society: not only are these users at heightened risk of negative consequences from digital espionage, but the tools honed with the unwitting aid of civil society put all users at risk. t.co/MspfkrYuvc

"I think generally Canadians should be concerned, because not all Canadians know they're under suspicion"- @caparsons t.co/GS93UYYM6X

"Now, after months of investigation, we can say who was behind this attack. Today, we have filed a complaint in federal court that explains what happened and attributes the intrusion to an Israeli technology company called NSO Group." t.co/3FGMuURwxk

We have identified over 100 cases of abusive targeting in at least 20 countries that took place after Novalpina Capital acquired NSO Group and began an ongoing public relations campaign to promote the narrative that the new ownership would curb abuses. t.co/1SFxr16hVe

At #MozFest? Join @mattbraga at 4:30 pm in a discussion of how @SecPlanner can be tailored and updated to better protect the digital lives of everyday Internet users. t.co/iz8GvSzNYb

If you're at @mozillafestival next week, be sure to check out @adam_senft and @MilesJKenyon speak about LGBTQ2+ info controls and the effects of censorship on marginalized communities t.co/2EGN8dFM9H

We give companies tons of personal data. But how do they handle it? And how might they be using it in unexpected ways? 🤔 Access My Info helps you take back control by learning exactly what companies know about you & who they share data with. Learn more: t.co/zoadOUdwHI

The Internet was created by academics to embolden access to information, free expression, and privacy. But insecurities now threaten those fundamental principles of research. So, according to @RonDeibert, it's time we take the Internet back. t.co/QXQvOk2De0

While encryption poses investigative friction it does not preclude governments from conducting successful investigations or intelligence operations. t.co/DDsKH8Z664

If you're at @OntarioDEMCON this year, make sure to check out @drchangelove explore the technology-driven needs and capabilities of citizens in crisis t.co/l0tQHBWRwv

Despite popular perceptions otherwise, China’s sophisticated information control system is neither monolithic nor consistent. @lotus_ruan explains. t.co/0CL6OYPYa9

As cybersecurity issues have mounted, dual-use technologies have proliferated. To better understand these issues, we've put together an annotated bibliography on deep packet inspection, Internet filtering and targeted intrusion dual-use tech. t.co/PFB8aX96dP

"The OEWG began with a split and will, in the big picture, end with one. But so long as states remain focused on consensus areas and win-win pragmatism, this new global forum could have a lot to offer."- @JoshGold3 t.co/Ak69Z3EtcX

What does social engineering look like? Posing as a @nytimes journalist and repeatedly asking for feedback on news articles related to your work, hoping that you'll click on malicious links. t.co/QRTV4EL9xD

ཀུ་ཤུ་དང་ཨན་ཌོ་ཁ་པར་ནང་དུ་བོད་པ་ཚོར་གསང་མྱུལ་དྲ་འབུས་འཇབ་རྒོལ་བྱས་ཡོད། @tibcert t.co/SHgzeowCCr

“These apps, like Facebook, already hold a boatload of permissions to access the phone’s camera, microphone, GPS, SMS messages, contacts, and call logs,” @billmarczak said, adding that they “have a large attack surface since they run a full browser.” t.co/jh6Ma8Deq6