Report: Mandatory Olympic app has serious security flaws

Advertisement

Advertise with us

RICHMOND, Va. (AP) — A smartphone app that athletes and others attending next month’s Winter Games in Beijing must install has glaring security problems that could expose sensitive data to interception, according to a report published Tuesday.

Read this article for free:


or

Already have an account? Log in here »

To continue reading, please subscribe:

Subscribe and receive a limited-edition Free Press branded hat or tote.

Digital Subscription

One year of digital access for only $205*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*First annual payment billed as $205.00 + GST for one year. This annual subscription will automatically renew at $233.00 + GST every 52 weeks (10% off the regular annual price of $259.35). Offer available to new and qualified returning subscribers only. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

*Your next Brandon Sun subscription payment will increase by $1.00 and you will be charged $17.95 plus GST for four weeks. After four weeks, your payment will increase to $24.95 plus GST every four weeks.

Hey there, time traveller!
This article was published 18/01/2022 (1691 days ago), so information in it may no longer be current.

RICHMOND, Va. (AP) — A smartphone app that athletes and others attending next month’s Winter Games in Beijing must install has glaring security problems that could expose sensitive data to interception, according to a report published Tuesday.

Citizen Lab, an internet watchdog group, said in its report the MY2022 app has seriously flawed encryption that would make users’ sensitive data — and any other data communicated through it — vulnerable to being hacked. Other important user data on the app wasn’t encrypted at all, the report found.

That means the data could be read by Chinese internet service providers or telecommunications companies through Wi-Fi hotspots at hotels, airports and Olympic venues.

A woman looks at her phone as she passes an Olympic logo inside the main media center for the Beijing Winter Olympics Tuesday, Jan. 18, 2022, in Beijing. (AP Photo/David J. Phillip)
A woman looks at her phone as she passes an Olympic logo inside the main media center for the Beijing Winter Olympics Tuesday, Jan. 18, 2022, in Beijing. (AP Photo/David J. Phillip)

China is requiring all international Olympic attendees — including coaches and journalists — to download and start using the app 14 days before their departure. The app allows users to submit required health information on a daily basis and is part of China’s aggressive effort to manage the coronavirus pandemic while hosting the games, which begin Feb. 4. The multipurpose app also includes chat features, file transfers, weather updates, tourism recommendations and GPS navigation.

Citizen Lab’s report comes amid heightened concerns over athletes’ data and privacy. Many countries are advising their athletes not to take their normal smartphones to China, but instead to bring temporary — or burner — phones that do not store any sensitive personal data, according to news reports.

The U.S. Olympic & Paralympic Committee issued an advisory to athletes telling them to “assume that every device and every communication, transaction, and online activity will be monitored.”

“There should be no expectation of data security or privacy while operating in China,” the advisory said.

China has a well-documented history of conducting muscular surveillance of its citizens and aggressive cyber-spying on others. But Citizen Lab said there was no evidence that the easily discoverable security flaws in the MY2022 app were placed intentionally by the Chinese government. For one, much of the sensitive health information held on the app is required to be submitted directly to authorities on health customs forms, the report said.

Citizen Lab said the security vulnerabilities found in MY2022 app are similar to those found in popular Chinese web browsers and noted that “insufficient protection of user data is endemic to the Chinese app ecosystem.”

“In light of previous work analyzing popular Chinese apps, our findings concerning MY2022 are, while concerning, not surprising,” the report said.

Citizen Lab said it reported the security issues to the Beijing Organizing Committee last month but did not receive a response. The report also said the app’s security flaws could run afoul of Apple’s and Google’s policies for software used on iPhones and Android devices. The two companies did not immediately return a request for comment.

The Android version of the MY2022 app included a list named “illegalwords.txt” that included 2,442 keywords, including some that could be politically sensitive and relate to China’s actions toward Tibet and the Uyghur ethnic group.

The report said despite having the list bundled with the app, it does not appear to function. The Chinese government has long required tech companies to censor content and keywords deemed politically sensitive or inappropriate.

____

Frank Bajak in Boston contributed to this report.

Report Error Submit a Tip

More Stories

Endorsements build up mayoral candidates’ profiles

Chris Kitching 6 minute read Preview

Endorsements build up mayoral candidates’ profiles

Chris Kitching 6 minute read Monday, Oct. 17, 2022

With just over a week until election day, high-profile endorsements are rolling in for Winnipeg’s top mayoral candidates in what political observers say is another way to sway undecided voters.

Read
Monday, Oct. 17, 2022

Remove barriers, coalition says

Dan Lett 6 minute read Preview

Remove barriers, coalition says

Dan Lett 6 minute read Monday, Jul. 30, 2018

Game on.

Just two weeks after city council approved a referendum on whether to open Winnipeg’s landmark intersection, an official ‘Yes’ campaign in support of tearing down the barriers has formed.

A coalition of downtown business and land owners, planners, architects and advertising and marketing firms — with the support of organizations such as the Exchange District and Downtown BIZ organizations — has taken up the challenge to defend Mayor Brian Bowman’s vision of a barrier-free Portage and Main.

Organizers said the campaign in favour of re-opening the intersection will be funded by an online crowd-sourcing campaign and will open a storefront headquarters in the shadow of the historic intersection. Lawn signs, promotional videos and mass mail will all be part of the drive to remove pedestrian barriers once and for all.

Read
Monday, Jul. 30, 2018

FIFA president overshadowing the good of the game

JERRAD PETERS 5 minute read Preview

FIFA president overshadowing the good of the game

JERRAD PETERS 5 minute read Yesterday at 6:03 PM CDT

There is a big London Derby on Sunday (Arsenal-Chelsea), and the weekend schedule also features marquee matches in Turkey (Feherbahce-Besiktas) and the Netherlands (Ajax-PSV Eindhoven), as well as a showdown between the Italian teams with the last four Scudetti between them (Inter Milan-Napoli).

Then there’s the Under-20 Women’s World Cup, which is set to kick off in Poland (Canada plays England on Saturday at 11:00 a.m.).

And yet, clouding it all — and the world of football is a massive thing to overshadow — is the figure of FIFA president Gianni Infantino, who suddenly finds himself facing a protracted legal battle over his scheme to sell off the World Cup’s commercial rights.

Specifically, UEFA — the sport’s governing body in Europe — is “preparing to bring criminal claims in Switzerland against Infantino…for criminal mismanagement under Article 158 of the Swiss Criminal Code.” So reads its recent filing in a Florida court.

Read
Yesterday at 6:03 PM CDT

Endometriosis painful, lack of research shameful

Jen Zoratti 7 minute read Preview

Endometriosis painful, lack of research shameful

Jen Zoratti 7 minute read Tuesday, Mar. 17, 2026

In late 2023, I spent a few weeks in the dark days of winter talking to women about their experiences with endometriosis for a reported feature. I listened as they told me about the labyrinthian, sometimes decades-long quest to get a diagnosis. They told me about being gaslit and dismissed by doctors. One told me about having to get surgery abroad and pay for it out of pocket.

I listened as they raged and cried.

Through my reporting, I learned the cruel facts of this disease.

That endometriosis is a chronic inflammatory disease in which tissue that looks and behaves similarly to the lining of the uterus grows outside the uterus.

Read
Tuesday, Mar. 17, 2026

No end in sight to Ottawa’s pandemic spending

Temur Durrani 8 minute read Preview

No end in sight to Ottawa’s pandemic spending

Temur Durrani 8 minute read Monday, Nov. 30, 2020

A crucial caveat expected in Monday's fiscal statement from Ottawa failed to manifest: there is no end in sight to federal spending amidst the COVID-19 pandemic.

As Canada stares down a nearly $400-billion, record-high deficit for 2020, the Liberal government plans to spend up to $100 billion over the next three years, along with a further $25.1 billion in immediate measures to support workers and businesses affected by the novel coronavirus.

That's not all.

In a long-awaited speech from the House of Commons, Finance Minister Chrystia Freeland did not provide a spending cap to draw any red lines around the limit to which the feds will continue funnelling toward an economic recovery she acknowledged is still well-off the horizon.

Read
Monday, Nov. 30, 2020

Canadian labour market still tight as economy sees slight bump in employment

Nojoud Al Mallees, The Canadian Press 5 minute read Preview

Canadian labour market still tight as economy sees slight bump in employment

Nojoud Al Mallees, The Canadian Press 5 minute read Friday, Oct. 7, 2022

OTTAWA - After sustaining three consecutive months of job losses and propelling fears of an economic slowdown, the Canadian economy posted a modest bump in employment in September, suggesting the labour market is still exceptionally tight.

The unemployment rate for the month fell to 5.2 per cent as fewer people looked for work, down from 5.4 per cent in August, Statistics Canada reported in its labour force survey released on Friday. Meanwhile,the economy added 21,000 jobs.

Economists say the latest jobs report shows employers are still eager to hire, and wages are growing accordingly.

The report showed wages were up by 5.2 per cent in September compared with a year ago, with the average hourly wage at $31.67. It marked the fourth straight month of five per cent or higher wage growth, but still falls short of the rate of inflation.

Read
Friday, Oct. 7, 2022