Sports

Mandatory Olympic app has security vulnerabilities: report – CTV News

Published

3 years ago

January 18, 2022

TORONTO —
Researchers at a Toronto-based tech laboratory have uncovered security vulnerabilities and censorship frameworks in an app all 2022 Beijing Olympics attendees must use.

The Citizen Lab, a research institute at the University of Toronto’s Munk School of Global Affairs and Public Policy that studies spyware, found a “simple but devastating” flaw in the MY2022 app that makes audio files, health and customs forms transmitting passport details, and medical and travel history vulnerable to hackers.

Researcher Jeffrey Knockel found ‘MY2022’ does not validate some SSL certificates, digital infrastructure that uses encryption to secure apps and ensures no unauthorized people can access information as it is transmitted.

This failure to validate means the app can be deceived into connecting with malicious hosts it mistakes as being trusted, allowing information the app transmits to servers to be intercepted and attackers to display fake instructions to users.

“The worst case scenario is that someone is intercepting all the traffic and recording all the passport details, all the medical details,” said Knockel, a research associate, who investigated the app after a journalist curious about its security functions approached him.

Olympic organizers have required all games attendees, including athletes, spectators and media members, to download and start using the MY2022 app for submitting health and customs information like COVID-19 test results and vaccination status at least 14 days ahead of their arrival in China.

The app from a state-owned company called Beijing Financial Holdings Group also offers GPS navigation and text, video and audio chat functions and the ability to transfer files and provide news and weather updates.

Knockel found it’s unclear with whom the app shares highly-sensitive medical information.

The Olympic playbook outlines that personal data such as biographical information and health-related data may be processed by Beijing 2022, International Olympic and Paralympic committees, Chinese authorities and “others involved in the implementation of the (COVID-19) countermeasures.”

Knockel say MY2022 outlines several scenarios where it will disclose personal information without user consent, which include but are not limited to national security matters, public health incidents, and criminal investigations.

However, the app does not specify whether court orders will be required to gain access to this information and who will be eligible to receive data.

The final concern Knockel uncovered was that the app allows users to report “politically sensitive” content and found it has a censorship keyword list.

The list includes 2,442 political terms, including some linked to tensions in Xinjiang and Tibet, as well as references to Chinese government agencies. On the list are Chinese phrases translating to “Jews are pigs” and “Chinese are all dogs,” Uyghur terms for “the Holy Quran” and Tibetan words referring to the Dalai Lama.

Knockel couldn’t find evidence that the list was being used by the app.

“We don’t know whether they intended for it to be inactive or whether they intended for it to be active, but either way, it’s something that….can be enabled at the flick of a switch,” said Knockel.

The Citizen Lab disclosed the concerns it found with MY2022 to organizing committees on Dec. 3, giving them 15 days to respond and 45 days to fix the issues, before it publicly disclosed the problems.

A new version of MY2022 for iOS users was released on Jan. 6, but Citizen Lab said no issues were resolved with the update. In fact, Citizen Lab said the update introduced a new “Green Health Code” feature that collects more medical data and is vulnerable to attacks because of its lack of SSL certificate validation.

Knockel recommends anyone headed to the Olympics only use the app when connected to networks they trust, like a virtual private network (VPN).

Olympic participants should also consider taking conversations and other actions that are not mandatory to complete in MY2022 to other apps with better security, he said.

“But it’s tricky,” he said. “Even if they are aware of the security vulnerabilities in the app, they might not have a choice.”

This report by The Canadian Press was first published Jan. 18, 2022

Adblock test (Why?)

Source link

Sports

Champions Trophy host Pakistan says it’s not been told India wants to play cricket games elsewhere

Published

1 day ago

November 8, 2024

Anne Joseph

LAHORE, Pakistan (AP) — A top official of the Pakistan Cricket Board declined Friday to confirm media reports that India has decided against playing any games in host Pakistan during next year’s Champions Trophy.

“My view is if there’s any problems, they (India) should tell us in writing,” PCB chairman Mohsin Naqvi told reporters in Lahore. “I’ll share that with the media as well as with the government as soon as I get such a letter.”

Indian media reported Friday that the Board of Control for Cricket in India (BCCI) has communicated its concerns to all the Champions Trophy stakeholders, including the PCB, over the Feb. 19-March 9 tournament and would not play in arch-rival Pakistan.

The Times of India said that “Dubai is a strong candidate to host the fixtures involving the Men in Blue” for the 50-over tournament.

Such a solution would see Pakistan having to travel to a neutral venue to play India in a group match, with another potential meeting later in the tournament if both teams advanced from their group. The final is scheduled for March 9 in Pakistan with the specific venue not yet decided.

“Our stance is clear,” Naqvi said. “They need to give us in writing any objections they may have. Until now, no discussion of the hybrid model has happened, nor are we prepared to accept one.”

Pakistan hosted last year’s Asia Cup but all India games were played in Sri Lanka under a hybrid model for the tournament. Only months later Pakistan did travel to India for the 50-over World Cup.

Political tensions have stopped bilateral cricket between the two nations since 2008 and they have competed in only multi-nation tournaments, including ICC World Cups.

“Cricket should be free of politics,” Naqvi said. “Any sport should not be entangled with politics. Our preparations for the Champions Trophy will continue unabated, and this will be a successful event.”

The PCB has already spent millions of dollars on the upgrade of stadiums in Karachi, Lahore and Rawalpindi which are due to host 15 Champions Trophy games. Naqvi hoped all the three stadiums will be ready over the next two months.

“Almost every country wants the Champions Trophy to be played here (in Pakistan),” Naqvi said. “I don’t think anyone should make this a political matter, and I don’t expect they will. I expect the tournament will be held at the home of the official hosts.”

Eight countries – Pakistan, India, Bangladesh, England, Australia, South Africa, New Zealand and Afghanistan – are due to compete in the tournament, the schedule of which is yet to be announced by the International Cricket Council.

“Normally the ICC announces the schedule of any major tournament 100 days before the event, and I hope they will announce it very soon,” Naqvi said.

___

AP cricket:

Source link

Sports

Dabrowski, Routlife into WTA doubles final with win over Melichar-Martinez, Perez

Published

1 day ago

November 8, 2024

Anne Joseph

RIYADH, Saudi Arabia – Ottawa‘s Gabriela Dabrowski and Erin Routliffe of New Zealand are through to the doubles final at the WTA Finals after a 7-6 (7), 6-1 victory over Nicole Melichar-Martinez of the United States and Australia’s Ellen Perez in semifinal action Friday.

Dabrowski and Routliffe won a hard-fought first set against serve when Routliffe’s quick reaction at the net to defend a Perez shot gave the duo set point, causing Perez to throw down her racket in frustration.

The second seeds then cruised through the second set, winning match point on serve when Melichar-Martinez couldn’t handle Routliffe’s shot.

The showdown was a rematch of last year’s semifinal, which Melichar-Martinez and Perez won in a super tiebreak.

Dabrowski and Routliffe will face the winner of a match between Katerina Siniakova and Taylor Townsend, and Hao-Ching Chan and Veronika Kudermetova in the final on Saturday.

Dabrowski is aiming to become the first Canadian to win a WTA Finals title.

This report by The Canadian Press was first published Nov. 8, 2024.

Source link

Sports

Winger Tajon Buchanan back with Canada after recovering from broken leg

Published

1 day ago

November 8, 2024

Anne Joseph

Inter Milan winger Tajon Buchanan, recovered from a broken leg suffered in training at this summer’s Copa America, is back in Jesse Marsch’s Canada squad for the CONCACAF Nations League quarterfinal against Suriname.

The 25-year-old from Brampton, Ont., underwent surgery July 3 to repair a fractured tibia in Texas.

Canada, ranked 35th in the world, plays No. 136 Suriname on Nov. 15 in Paramaribo. The second leg of the aggregate series is four days later at Toronto’s BMO Field.

There is also a return for veteran winger Junior Hoilett, who last played for Canada in June in a 4-0 loss to the Netherlands in Marsch’s debut at the Canadian helm. The 34-year-old from Brampton, now with Scotland’s Hibernian, has 15 goals in 63 senior appearances for Canada.

Midfielder Ismael Kone, recovered from an ankle injury sustained on club duty with France’s Marseille, also returns. He missed Canada’s last three matches since the fourth-place Copa America loss to Uruguay in July.

But Canada will be without centre back Derek Cornelius, who exited Marseille’s win Sunday over Nantes on a stretcher after suffering an apparent rib injury.

The Canadian men will prepare for Suriname next week at a camp in Fort Lauderdale, Fla.

“We are looking forward to getting the group together again with the mindset that there is a trophy on the line,” Marsch said in a statement. “We want to end 2024 the right way with two excellent performances against a competitive Suriname squad and continue building on our tremendous growth this past summer.”

The quarterfinal winners advance to the Nations League Finals at SoFi Stadium in Inglewood, Calif., with the two semifinals scheduled for March 20 and the final and third-place playoff March 23, and qualify for the 2025 CONCACAF Gold Cup.

Thirteen of the 23 players on the Canadian roster are 25 or younger, with 19-year-old defender Jamie Knight-Lebel, currently playing for England’s Crewe Alexandra on loan from Bristol City, the youngest.

Bayern Munich star Alphonso Davies captains the side with Stephen Eustaquio, Jonathan Osorio, Richie Laryea, Alistair Johnston and Kamal Miller adding veteran support.

Jonathan David, Cyle Larin and Theo Bair are joined in attack by Minnesota United’s Tani Oluwaseyi.

Niko Sigur, a 21-year-old midfielder with Croatia’s Hadjuk Split, continues in the squad after making his debut in the September friendly against Mexico.

Suriname made it to the Nations League quarterfinals by finishing second to Costa Rica in Group A of the Nations League, ahead of No. 104 Guatemala, No. 161 Guyana and unranked Martinique and Guadeloupe.

“A good team,” Osorio said of Suriname. “These games are always tricky and they’re not easy at all … Suriname is a (former) Dutch colony and they’ll have Dutch players playing at high levels.”

“They won’t be someone we overlook at all,” added the Toronto FC captain, who has 81 Canada caps to his credit.

Located on the northeast coast of South America between Guyana and French Guiana, Suriname was granted independence in 1975 by the Netherlands.

Canada has faced Suriname twice before, both in World Cup qualifying play, winning 4-0 in suburban Chicago in June 2021 and 2-1 in Mexico City in October 1977.

The Canadian men, along with Mexico, the United States and Panama, received a bye into the final eight of the CONCACAF Nations League.

Canada, No. 2 in the CONCACAF rankings, drew Suriname as the best-placed runner-up from League A play.

Canada lost to Jamaica in last year’s Nations League quarterfinal, ousted on the away-goals rule after the series ended in a 4-4 draw. The Canadians lost 2-0 to the U.S. in the final of the 2022-23 tournament and finished fifth in 2019-20.

Canada defeated Panama 2-1 last time out, in an Oct. 15 friendly in Toronto.

Goalkeepers Maxime Crepeau and Jonathan Sirois, defenders Joel Waterman, Laryea and Miller and Osorio took part in a pre-camp this week in Toronto for North America-based players.

Canada Roster

Goalkeepers: Maxime Crepeau, Portland Timbers (MLS); Jonathan Sirois, CF Montreal (MLS); Dayne St. Clair, Minnesota United FC (MLS).

Defenders: Moise Bombito, OGC Nice (France); Alphonso Davies, Bayern Munich (Germany); Richie Laryea, Toronto FC (MLS); Alistair Johnston, Celtic (Scotland); Jamie Knight-Lebel. Crewe Alexandra, on loan from Bristol City (England); Kamal Miller, Portland Timbers (MLS); Joel Waterman, CF Montreal (MLS).

Midfielders: Ali Ahmed. Vancouver Whitecaps (MLS); Tajon Buchanan, Inter Milan (Italy); Mathieu Choiniere, Grasshopper Zurich (Switzerland); Stephen Eustaquio, FC Porto (Portugal); Junior Hoilett, Hibernian FC (Scotland); Ismael Kone, Olympique Marseille (France); Jonathan Osorio, Toronto FC (MLS); Jacob Shaffelburg, Nashville SC (MLS); Niko Sigur, Hadjuk Split (Croatia).

Forwards: Theo Bair, AJ Auxerre (France); Jonathan David, LOSC Lille (France); Cyle Larin, RCD Mallorca (Spain); Tani Oluwaseyi, Minnesota United (MLS).

—

Follow @NeilMDavidson on X platform

This report by The Canadian Press was first published Nov. 8, 2024.

Source link