A smartphone app built by China to monitor the health of attendees at the Beijing Winter Olympic Games next month contains security flaws that make it vulnerable to privacy breaches and hackers, a report released on Tuesday by Canadian researchers said.
The MY2022 app was built by the Beijing Organizing Committee to track and share virus-related medical information among the athletes during the Games.
Researchers with Toronto’s Citizen Lab project said that MY2022 failed to properly encrypt the transfer of personal data, leaving it vulnerable to hackers.
They also found that MY2022’s privacy policy does not specify with which organizations it shares the users’ information.
The International Olympic Committee (IOC) said that it had conducted independent assessments on the application and had not found any “critical vulnerabilities.”
“It is not compulsory to install ‘My 2022’ on cellphones,” the IOC said in a statement.
Yu Hong, director-general of the Beijing Organizing Committee’s technology department, yesterday said that the main function of the app is to monitor people’s health and the country follows strict rules to protect data.
All of the MY2022 app’s technology aspects have been validated by relevant app stores, Yu told a briefing hosted by China’s embassy in the US via video link from Beijing.
Technology vulnerabilities are normal when developing this kind of app, Yu said, adding that her department is constantly updating the app to remove issues.
The Citizen Lab researchers said they found the flaws in the iOS version of the app after creating an account on it.
They were unable to set up an account on the Android version, but said the security flaws existed in both MY2022 versions.
The app failed to validate SSL certificates, which are needed to authenticate a Web site’s identity and enable encrypted connections, they said, adding that this can be exploited by hackers to transmit the data to malicious sites.
“Such data can be read by any passive eavesdropper, such as someone in range of an unsecured Wi-Fi access point, someone operating a Wi-Fi hotspot, or an Internet service provider or other telecommunications company,” they said.
Citizen Lab said it had informed the Beijing Organizing Committee on Dec. 3, but had received no reply.
The qualifying round of the World Baseball Classic (WBC) is to be held at the Taipei Dome between Feb. 21 and 25, Major League Baseball (MLB) announced today. Taiwan’s group also includes Spain, Nicaragua and South Africa, with two of the four teams advancing onto the 2026 WBC. Taiwan, currently ranked second in the world in the World Baseball Softball Confederation rankings, are favorites to come out of the group, the MLB said in an article announcing the matchups. Last year, Taiwan finished in a five-way tie in their group with two wins and two losses, but finished last on tiebreakers after giving
North Korea’s FIFA Under-17 Women’s World Cup-winning team on Saturday received a heroes’ welcome back in the capital, Pyongyang, with hundreds of people on the streets to celebrate their success. They had defeated Spain on penalties after a 1-1 draw in the U17 World Cup final in the Dominican Republic on Nov. 3. It was the second global title in two months for secretive North Korea — largely closed off to the outside world; they also lifted the FIFA U20 Women’s World Cup in September. Officials and players’ families gathered at Pyongyang International Airport to wave flowers and North Korea flags as the
For King Faisal, a 20-year-old winger from Ghana, the invitation to move to Brazil to play soccer “was a dream.” “I believed when I came here, it would help me change the life of my family and many other people,” he said in Sao Paulo. For the past year and a half, he has been playing on the under-20s squad for Sao Paulo FC, one of South America’s most prominent clubs. He and a small number of other Africans are tearing across pitches in a country known as the biggest producer and exporter of soccer stars in the world, from Pele to Neymar. For
Coco Gauff of the US on Friday defeated top-ranked Aryna Sabalenka 7-6 (7/4), 6-3 to set up a showdown with Olympic champion Zheng Qinwen in the final of the WTA Finals, while in the doubles, Taiwan’s Chan Hao-ching was eliminated. Gauff generated six break points to Belarusian Sabalenka’s four and built on early momentum in the opening set’s tiebreak that she carried through to the second set. She is the youngest player at 20 to make the final at the WTA Finals since Denmark’s Caroline Wozniacki in 2010. Zheng earlier defeated Wimbledon champion Barbora Krejcikova of the Czech Republic 6-3, 7-5 to book
RSS