The Citizen Lab

Today at 6:30 pm EST, @RonDeibert will be delivering testimony to the House of Commons, detailing our investigations into Zoom security & other digital risks MPs might encounter when working from home. Background research in thread 👇 @HoCCommittees #PROC t.co/Vc7H16UQLp

"This represents to my eye a continuation of that effort, to take what is often sort of secret or classified information, turn it into a way that could be made publicly available and then trying to make it more useful to Canadians"- @caparsons t.co/DeBsH76o6A

Today at 4:00 pm EST, @RonDeibert and @irenepoet tackle data protection during COVID-19, gender and digital security, and any questions you submit. t.co/zrXgnAm0OC

Join @RonDeibert and @irenepoet Monday on Instagram as they discuss personal data protection in the era of COVID-19. t.co/KzQIpFa29y t.co/9cQiWQRMMe

ICYMI t.co/JFGDFsBLNr

Get to know the people behind Citizen Lab research with a live chat between @RonDeibert and @billmarczak. Join us Monday on Instagram and ask all things Zoom encryption, targeted digital threats, and Internet Freedom. t.co/aF9GV1r20t

“Surveillance has become so normalized into our lives and used for so many other purposes, from marketing to security, that it’s a reflex”- @RonDeibert t.co/JFGDFsBLNr

"The government must do more to increase testing capacity, encourage its population to get tested and provide robust personal data protection that minimizes the risk of breaches."- @irenepoet and Sinta Dewi Rosadi t.co/akIKDzKIp7

"Algorithms used to power this technology are vulnerable to the same decision-making of concern to humans: discrimination, bias and error." t.co/Rg9T2THpks

自Zoom報告發佈以來，我們收到了許多疑問。就常見疑問，我們發佈了一篇後續報告，補充說明 Zoom 存在的安全漏洞，並回應外界對我們研究的錯誤解讀。t.co/NL3hIsZZya

Anatomy of a Zoom call t.co/jp3ReVxVI5

In our latest research brief, we describe a security issue where users in the “waiting room” of a Zoom meeting could have spied on the meeting, even if they were not approved to join. Zoom fixed the issue after we reported it to them. t.co/35GgSBFvxA

Join @jsrailton this Thursday for a conversation on COVID-19 and increasing calls for the deployment of spyware in the name of public good t.co/xT8XSR8Gft

A newly published paper by @abulkhaezuran and @AndrewMLeber showcase the usefulness of social media data for political analysis by focusing on the main Arabic Twitter hashtag following the assassination of Jamal Khashoggi. t.co/2RuRGSmzx1

Trust is critical during a pandemic. But trust is difficult to earn when governments suggest deploying invasive technologies that are perceived as pretexts for dismantling privacy. @jsrailton on why spyware will not be our savior. t.co/OrBVWqT4xl

“I would think very carefully before I used Zoom to communicate classified information, trade secrets, or confidential medical data." - @billmarczak t.co/phfQbBGx7v

NEW REPORT: Move Fast & Roll Your Own Crypto: A Quick Look at the Confidentiality of Zoom Meetings t.co/WFgWSI9qqH

Thread 👇

"I can't think of a better brand name to make citizens nervous about a governmental tracking effort," says @jsrailton of NSO's new COVID-19 software. t.co/iyVv2qISRM

ICYMI t.co/CjI9mKAYDh

“In this moment of crisis, phone companies, regulators and the Department of Justice should step up to prevent foreign powers from tracking us through our phones."- @jsrailton t.co/3w8fK2SQTS

"Most services and technologies of this nature haven’t been tested at this scale," says @caparsons of lawful interception systems applied at the national level. t.co/acxjVyW2sU

According to @lotus_ruan, Chinese domestic censorship is decentralized and fragmented—not monolithic—with the burden of information control downloaded to private companies. t.co/CjI9mKAYDh

Researcher @caparsons says there are limitations in scaling Canada-wide mass cellphone surveillance, to say nothing of the "wonderful problems" that could crop up if the government compels telcos to hand over this data. t.co/acxjVyW2sU

The Tibetan diaspora are no strangers to digital attacks, so they've become savvy to signs of suspicious emails, attachments, & phishing. But new exploits, like mobile threats, require new tactics. And groups like @tibcert are instrumental in this work. t.co/MspfkrGT6C