The Citizen Lab

@citizenlab
7.1K Followers
118 Following
85 Posts

The Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs & Public Policy, University of Toronto, focusing on research, development, and high-level strategic policy and legal engagement at the intersection of information and communication technologies, human rights, and global security.

We use a “mixed methods” approach to research combining practices from political science, law, computer science, and area studies.

Websitehttps://citizenlab.ca/
The Citizen LabFeb 28

On Mar 5, join director and founder of The Citizen Lab @rondeibert in conversation with award-winning national security reporter Ellen Nakashima at the International Spy Museum.

Attend in-person or virtually.

🎟️ Register: https://bit.ly/41w6dK3

Chasing Shadows with Ronald Deibert and Ellen Nakashima

From the gritty streets of Guatemala City to the corridors of power in the White House, the Citizen Lab has evolved into the world’s foremost digital watchdogs, uncovering dozens of cyber espionage cases in countries around the world. In his new book…

International Spy Museum
The Citizen LabFeb 25

New legal commentary by The Citizen Lab’s Cynthia Khoo and Kate Robertson warns of the constitutional dangers posed by a potential Canada-U.S. CLOUD Act agreement. If signed, this would extend the reach of U.S. law enforcement into Canada’s digital terrain to an unprecedented extent.

Read it here: https://citizenlab.ca/2025/02/canada-us-cross-border-surveillance-cloud-act/

Canada-U.S. Cross-Border Surveillance Negotiations Raise Constitutional and Human Rights Whirlwind under U.S. CLOUD Act - The Citizen Lab

Legal researchers Cynthia Khoo and Kate Robertson warn that a Canada-U.S. CLOUD agreement would extend the reach of U.S. law enforcement into Canada’s digital terrain to an unprecedented extent, and that if signed, this agreement would effectively allow U.S. police to demand personal data directly from any provider of an “electronic communication service” or “remote computing service” in Canada, so long as it had some ties to the U.S.

The Citizen Lab
The Citizen LabFeb 24

⚠️ New legal analysis by The Citizen Lab’s Cynthia Khoo and Kate Robertson warns of the constitutional dangers posed by the Canada-U.S. #CLOUDAct.

If signed, the agreement would extend the reach of U.S. law enforcement into Canada’s digital terrain to an unprecedented extent.

Read it here: https://citizenlab.ca/2025/02/canada-us-cross-border-surveillance-cloud-act/

Canada-U.S. Cross-Border Surveillance Negotiations Raise Constitutional and Human Rights Whirlwind under U.S. CLOUD Act - The Citizen Lab

Legal researchers Cynthia Khoo and Kate Robertson warn that a Canada-U.S. CLOUD agreement would extend the reach of U.S. law enforcement into Canada’s digital terrain to an unprecedented extent, and that if signed, this agreement would effectively allow U.S. police to demand personal data directly from any provider of an “electronic communication service” or “remote computing service” in Canada, so long as it had some ties to the U.S.

The Citizen Lab
The Citizen LabFeb 21
✒️Even after Assad’s fall, #disinformation in #Syria is thriving. In an opinion piece The Citizen Lab’s @noura discusses how new trends and tactics have emerged, and how foreign powers and non-state actors exploit social media to manipulate narratives and spread fear.
Read more here: https://timep.org/2025/01/30/truth-in-transition-disinformation-in-post-assad-syria/
Truth in Transition: Disinformation in Post-Assad Syria

Disinformation fuels fear and division in Syria’s new political landscape, eroding trust and blocking the path to a peaceful political transition.

The Tahrir Institute for Middle East Policy -
The Citizen LabFeb 21
In an opinion piece for @globeandmail The Citizen Lab’s Emile Dirks , @sanstis @noura and @rondeibert underscore how the #HogueCommission’s report missed an opportunity to address transnational repression. Read it here 👇🏽
https://www.theglobeandmail.com/opinion/article-the-final-hogue-report-was-a-missed-opportunity-to-tackle/
The final Hogue report was a missed opportunity to tackle transnational repression

Canada’s commission on foreign interference did not adequately address the problems faced by diaspora communities

The Globe and Mail
The Citizen LabFeb 16
In a Q&A for the Digital Front Lines report by Foreign Policy Analytics (@foreignpolicy) human rights activist Carine Kanimba and The Citizen Lab director @rondeibert discuss the human toll of spyware and call for collaboration between civil society, tech firms, and governments to combat its abuse.
https://digitalfrontlines.io/2025/01/31/spyware-human-toll-cyber-mercenaries/
#spyware
Spyware’s Human Toll: Cyber Mercenaries Inflict ‘Enormous Harms’ on Their Targets - Digital Front Lines

Q&As with Dr. Ron Deibert and Carine Kanimba

The Citizen LabFeb 14
Last week CityNews journalist Faiza Amin sat down with @rondeibert to discuss his new book Chasing Shadows and the dangerous rise of unregulated mercenary surveillance. Watch it here:
https://toronto.citynews.ca/video/2025/02/05/new-book-details-concerning-global-cyber-security-issues/
New book details concerning global cyber security issues

Phones, computers and software are under attack from unknown hacker. One of the world's top cyber security experts, Ron Deibert has been tracking these attempts for years and has just released an explosive new book on cyber security.

CityNews Toronto
Show threadThe Citizen LabFeb 12
We disclosed these security issues to RedNote, and the related software development kit vendors NEXTDATA, and MobTech, but as of yet, have not received a response from any party.
Show threadThe Citizen LabFeb 12
These vulnerabilities leave user data exposed to potential eavesdropping, device attacks, and network surveillance. High-risk users should avoid using the app until these vulnerabilities are addressed.
Show threadThe Citizen LabFeb 12
We also found that RedNote transmits device metadata, such as location, description, and serial number with insufficient encryption. This can potentially expose sensitive information to network attackers.