Network Security Issues in RedNote.
Our first network security analysis of the popular Chinese social media platform, RedNote, revealed numerous issues with the Android and iOS versions of the app. Most notably, we found that both the Android and iOS versions of RedNote fetch viewed images and videos without any encryption, which enab...
Citizen Lab is a national treasure. I really enjoy reading about what they do.
That may have been addressed on Android, I got an update yesterday
I'm skeptical. Citizen Lab is great, but just because they didn't reply doesn't mean these issues weren't worked on or fixed. They tested 8.59.2 and the current US version is 8.59.5 with the current Chinese version being 8.70.6.
There's been dozens of updates since the test, so it's hard say if these test are even valid anymore. Additionally;
Network attackers can read users’ file a contents on the Android versions of the application available for download on RedNote’s website and on the Mi Store, but not in the version downloaded from the Google Play Store or the iOS version.
The major security issue isn't even possible as long as you get them directly from the Play Store.
I'm not particularly worried about those vulnerabilities. Unfortunately, they are pretty common AFAIK, but at-least they pretty much only open a backdoor within whatever network you're connected to, and can be mitigated with a VPN.
IMO, there's much bigger reasons to be worried about RedNote than security or even privacy.
IMO, there's much bigger reasons to be worried about RedNote than security or even privacy.
What are those reasons?
