The official account of https://xitter.cf/t.co/4BVSQyGTyK: privacy news, commentary, and product announcements. Privacy Analysis as a Service. At Scale.

San Francisco, CA
Joined January 2019
Want to find privacy issues in your mobile apps before others do? Talk to us.
1
3
Thanks to @dhsscitech for the shout out and all the support! They’ve been a great partner!
Curious about what’s possible when partnering with S&T? Check out the final Tech Impact video to learn about @AppCensusInc’s success + how to work with us through the Silicon Valley Innovation Program. ⬇️ youtu.be/NAteJeE8llg?si=wak-…
1
208
This press article is based on the findings of our last USENIX'23 paper: usenix.org/system/files/sec2… Co-authored by A. Lyons, J. Gamba, A. Shawaga, J. Reardon, @0xjet, @v0max and myself, from @UCalgary @IMDEA_Networks @uc3m @ICSIatBerkeley and @AppCensusInc
1
3
5
1,593
Excited to see the work we did for @IDACwatchdog having more impact!
ICYMI: An FTC complaint confirmed findings I first reported in 2020 that the fertility app Premom was sharing user data with Chinese advertisers without user permission. The company has settled for $200,000 w/ the FTC and state AGs. cyberscoop.com/ftc-fertility…
1
574
The reports of our death have been greatly exaggerated.
Replying to @AppCensusInc
@AppCensusInc and Lumen Privacy Monitor by @narseo exist no more. What other/new tools are there for investigating private data sharing in apps? Using it for teacher education #twitterhjerne
1
1
178
(We exist, but are currently focused on serving our existing paying customers, so can’t keep our free services updated in the short term. Rather than having people use data that is now several years old, we removed the free dataset from the website.)
74
The awarded paper was presented at @USENIXSecurity'19 and it is available at: usenix.org/conference/usenix… This paper is a collaboration of @IMDEA_Networks researchers with Joel Reardon, @v0max @primalw and @AmitElazari from @ucalgary, @ICSIatBerkeley and @AppCensusInc
2
6
Oh hey, the WSJ has picked up our story! wsj.com/articles/apps-with-h…
New blog post: blog.appcensus.io/2022/04/06… We discovered a spyware SDK that collects various identifiers, the contents of the clipboard, scans home networks to identify devices, as well as hashes of files on the user’s phone.
5
New blog post: blog.appcensus.io/2022/04/06… We discovered a spyware SDK that collects various identifiers, the contents of the clipboard, scans home networks to identify devices, as well as hashes of files on the user’s phone.
1
20
6
37
It’s being distributed by a Panamanian shell company, Measurement Systems, which appears to be affiliated with a US defense contractor, Vostrom Holdings. Developers are being lied to about what it does, which may induce them to violate various privacy laws.
1
4
1
6
We reported it to Google back in October, and as of now, all apps we identified as containing it have been removed from the Play Store.
2
2
8
New blog post on a previously-undisclosed side channel in the Olympics app (My 2022): blog.appcensus.io/2022/02/04…
Check out our new blog post, the first in a new series of privacy tips for app developers: blog.appcensus.io/2022/02/03…
1
1
1
3
Today, we received the AEPD Emilio Aced Award in privacy research. It is very satisfying and a great honour seeing how our research contributions to improve online privacy are recognized by public data protection agencies.
1
2
14
Another research award recognizing our co-founders for their contributions to online privacy! The award is for this paper: usenix.org/conference/usenix… We're also happy to report that Google has fixed many of these privacy vulnerabilities.
This Post is from an account that no longer exists. Learn more
1
Glad to see the FTC taking action on this! We reported the underlying vulnerability to Google in 2018, which allowed Android apps to access location data (BSSIDs) without permission by accessing the ARP cache.
Advertising platform OpenX will pay $2 Million for collecting personal information from children in violation of children’s privacy law: go.usa.gov/xeFjv
1
3
6
In the same vulnerability report, we noted that the Huq SDK contained code to do the same thing. They’ve also been in the news recently… bbc.co.uk/news/technology-59…
1
2
More coverage of our recent blog post here: blog.appcensus.io/2021/10/25…
NEW: Location data broker Huq Industries admits to yet another app tracking users without consent. Two lawyers tell us that they believe three of Huq’s partner apps gained consent in violation of the GDPR. 🧵 in English and article in Norwegian: nrkbeta.no/2021/11/07/dette-…
1
1
It was Joel Reardon of @AppCensusInc that found that two of their apps, “QR Scanner” and “Quran Mp3”, sent data to Huq when data collection was turned off.
2
1
2
"AppCensus, a company that analyses the privacy of apps, looked at which apps Huq did business with. It found ones for flight-tracking, weather, and Muslim prayers were among those sending information to the company." bbc.com/news/technology-5906…