Olympic athletes told to use burner phones amid Beijing spying, security concerns

BBC

The Beijing Winter Olympics app that all Games attendees must use contains security weaknesses that leave users exposed to data breaches, analysts say.

The My2022 app will be used by athletes, audience members and media for daily Covid monitoring.

The app will also offer voice chats, file transfers and Olympic news.

But cybersecurity group Citizen Lab says the app fails to provide encryption on many of its files. China has dismissed the concerns.

Questions about the app come amid a rise in warnings about visitors’ tech security ahead of the Games, which begin on 4 February.

People attending the Beijing Olympics should bring burner phones and create email accounts for their time in China, cyber security firm Internet 2.0 said on Tuesday.

Censorship concerns
The Citizen Lab report said it had found a “censorship keywords” list built into the app, and a feature that allows people to flag other “politically sensitive” expressions.

The list of words included the names of Chinese leaders and government agencies, as well as references to the 1989 killing of pro-democracy protesters in Tiananmen Square, and the religious group Falun Gong, which is banned in China.

The analysts noted that these features and security flaws are not uncommon for apps in China but posed a risk to users nonetheless.

Analysts said the “illegal words” file appeared currently to be inactive, but it was unclear.

All visitors to the Games are required to download the app 14 days prior to their departure for China, and use it to record daily their Covid status.

For foreign visitors they also need to upload sensitive information already submitted to the Chinese government – like passport details and travel and medical histories.

Citizen Lab said transmission weaknesses in the app’s software could lead to easy exploitation of data by a hacker, if targeted.

In a report on Tuesday, Chinese state media outlet Global Times dismissed concerns about the app, saying “all personal information will be encrypted to ensure privacy”.

It compared the app to one that had been used at the Tokyo Games.

Wider concerns
Cyber security firm Internet 2.0 has also warned of potential security risks during the Olympics.

In a report seen by the BBC, it stressed the need for burner phones and reminded people not to use these devices after leaving China

The report looked at some of the technology sponsors of the Games and their products in order to show “the sophisticated and broad surveillance culture that exists in China”.

One product, a VPN by Qi-Anxin, was able to capture a significant amount of user data, the report said. Under China’s national security laws, authorities can request to access this data.

“China’s national data security laws are not designed with the Western values of privacy and liberty and do not offer the same level of protection,” the report said.

Team USA has encouraged its athletes to use a new device, according to USA Today.

A bulletin seen by the US outlet allegedly “encouraged” burner phones and rental or disposable computers for members of its team.

“Like computers, the data and applications on cell phones are subject to malicious intrusion, infection and data compromise,” the bulletin said.

الشرق

أفادت وسائل إعلام أمريكية أن اللجنة الأولمبية هناك طلبت من الرياضيين المشاركين في دورة الألعاب الأولمبية الشتوية في الصين التخلي عن هواتفهم ‏الذكية مقابل هواتف رخيصة وقابلة للإتلاف.

وبحسب ما أوردته صحيفة وول ستريت جورنال الأمريكية، تم إرسال التحذير مرتين العام الماضي لتنبيه الرياضيين من إمكانية المراقبة الرقمية أثناء وجودهم في الصين خلال الدورة التي تقام الشهر المقبل.

وجاء في نص التحذير النشرة أنه “يجوز مراقبة كل جهاز واتصال ومعاملات ونشاط عبر الإنترنت، وقد يتم أيضا اختراق جهازك (أجهزتك) ببرامج ضارة، مما قد يؤثر سلبا على استخدامها في المستقبل”.

وفي نفس السياق حذرت بريطانيا وكندا وهولندا رياضييها من إدخال أجهزتهم الإلكترونية الشخصية إلى البلاد.

يشار إلى أنه عندما عقدت بكين دورة الألعاب الأولمبية الصيفية لعام 2008، أصدرت وزارة الأمن الداخلي الأمريكية نصيحة مماثلة لأي مسافر متجه إلى الصين، محذرة من أن إحضار أي أجهزة يحتمل أن يعرضهم “للوصول غير المصرح به وسرقة البيانات من قبل عناصر حكومية إجرامية أو أجنبية”.

وخلال دورة الألعاب الأولمبية لعام 2008، وعدت الصين بمنح المشاهدين والصحفيين والرياضيين وصولا غير مقيد إلى شبكة الإنترنت، نظرا لأن جدار الحماية في الصين يحظر حاليا عددا من مواقع الإنترنت الشهيرة في البلاد، مثل “غوغل” و”يوتيوب” و”تويتر” و”فيسبوك” و”نيتفلكس”.

لكن رغم ذلك، أفاد الصحفيون بأنهم ما زالوا غير قادرين على الوصول إلى مواقع معينة، بما في ذلك “بي بي سي الصين”، وعدد من صحف هونغ كونغ، وكذلك موقع منظمة حقوق الإنسان منظمة العفو الدولية.