RESEARCH β FOCUS AREA
App Security & Privacy
Examining the privacy and security of mobile applications (apps) from technical, legal, and policy perspectives.
LATEST RESEARCH
-
Our network security analysis of the popular social media app, RedNote, revealed a number of issues with both the Android and iOS versions of the app.
February 12, 2025 -
This report performs the first public analysis of MMTLS, the main network protocol used by WeChat, an app with over one billion users. The report finds that MMTLS is a modified version of TLS, however some of the modifications have introduced cryptographic weaknesses.
October 15, 2024 -
In this report, we examine cloud-based pinyin keyboard apps from nine vendors (Baidu, Honor, Huawei, iFlyTek, OPPO, Samsung, Tencent, Vivo, and Xiaomi) for vulnerabilities in how the apps transmit user keystrokes. Our analysis found that eight of the nine apps identified contained vulnerabilities that could be exploited to completely reveal the contents of usersβ keystrokes in transit. We estimate that up to one billion users could be vulnerable to having all of their keystrokes intercepted, constituting a tremendous risk to user security.
April 23, 2024
RECENT NEWS
BROWSE RELATED CONTENT
OUR EXPERTS IN APP SECURITY & PRIVACY
-
Pellaeon Lin
Senior Researcher
-
Mona Wang
Open Technology Fund Information Controls Fellow
-
Jeffrey Knockel
Senior Fellow
