Thanks to @dhsscitech for the shout out and all the support! They’ve been a great partner!
Curious about what’s possible when partnering with S&T? Check out the final Tech Impact video to learn about @AppCensusInc’s success + how to work with us through the Silicon Valley Innovation Program. ⬇️
youtu.be/NAteJeE8llg?si=wak-…
AppCensus retweeted
This press article is based on the findings of our last USENIX'23 paper:
usenix.org/system/files/sec2…
Co-authored by A. Lyons, J. Gamba, A. Shawaga, J. Reardon, @0xjet, @v0max and myself, from @UCalgary @IMDEA_Networks @uc3m @ICSIatBerkeley and @AppCensusInc
Excited to see the work we did for @IDACwatchdog having more impact!
ICYMI: An FTC complaint confirmed findings I first reported in 2020 that the fertility app Premom was sharing user data with Chinese advertisers without user permission.
The company has settled for $200,000 w/ the FTC and state AGs.
cyberscoop.com/ftc-fertility…
We're excited to be working on this!
Excited for the announcement of @dhsscitech SVIP awardees for SW Supply Chain Tools and #SBOM. We're looking forward to working with these great teams.
@AppCensusInc @chainguard_dev @deepbits_tech @manifestcyber @ScribeSecurity @testifysec & Veramine
dhs.gov/science-and-technolo…
The reports of our death have been greatly exaggerated.
Replying to @AppCensusInc
@AppCensusInc and Lumen Privacy Monitor by @narseo exist no more. What other/new tools are there for investigating private data sharing in apps? Using it for teacher education #twitterhjerne
AppCensus retweeted
The awarded paper was presented at @USENIXSecurity'19 and it is available at:
usenix.org/conference/usenix…
This paper is a collaboration of @IMDEA_Networks researchers with Joel Reardon, @v0max @primalw and @AmitElazari from @ucalgary, @ICSIatBerkeley and @AppCensusInc
Oh hey, the WSJ has picked up our story!
wsj.com/articles/apps-with-h…
New blog post: blog.appcensus.io/2022/04/06…
We discovered a spyware SDK that collects various identifiers, the contents of the clipboard, scans home networks to identify devices, as well as hashes of files on the user’s phone.
New blog post: blog.appcensus.io/2022/04/06…
We discovered a spyware SDK that collects various identifiers, the contents of the clipboard, scans home networks to identify devices, as well as hashes of files on the user’s phone.
It’s being distributed by a Panamanian shell company, Measurement Systems, which appears to be affiliated with a US defense contractor, Vostrom Holdings.
Developers are being lied to about what it does, which may induce them to violate various privacy laws.
New blog post on a previously-undisclosed side channel in the Olympics app (My 2022): blog.appcensus.io/2022/02/04…
Check out our new blog post, the first in a new series of privacy tips for app developers:
blog.appcensus.io/2022/02/03…
AppCensus retweeted
Today, we received the AEPD Emilio Aced Award in privacy research. It is very satisfying and a great honour seeing how our research contributions to improve online privacy are recognized by public data protection agencies.
Another research award recognizing our co-founders for their contributions to online privacy!
The award is for this paper: usenix.org/conference/usenix…
We're also happy to report that Google has fixed many of these privacy vulnerabilities.
This Post is from an account that no longer exists. Learn more
Glad to see the FTC taking action on this!
We reported the underlying vulnerability to Google in 2018, which allowed Android apps to access location data (BSSIDs) without permission by accessing the ARP cache.
Advertising platform OpenX will pay $2 Million for collecting personal information from children in violation of children’s privacy law: go.usa.gov/xeFjv
In the same vulnerability report, we noted that the Huq SDK contained code to do the same thing. They’ve also been in the news recently…
bbc.co.uk/news/technology-59…
More coverage of our recent blog post here: blog.appcensus.io/2021/10/25…
NEW: Location data broker Huq Industries admits to yet another app tracking users without consent. Two lawyers tell us that they believe three of Huq’s partner apps gained consent in violation of the GDPR.
🧵 in English and article in Norwegian: nrkbeta.no/2021/11/07/dette-…
AppCensus retweeted
It was Joel Reardon of @AppCensusInc that found that two of their apps, “QR Scanner” and “Quran Mp3”, sent data to Huq when data collection was turned off.
"AppCensus, a company that analyses the privacy of apps, looked at which apps Huq did business with. It found ones for flight-tracking, weather, and Muslim prayers were among those sending information to the company."
bbc.com/news/technology-5906…












