The Digital Source For China's Tech Innovation Since 2000

Search
Close

Tencent's QQ Browser Rife With Privacy Problems

March 30, 2016
Security | Software | Telecom & Wireless

Unfortunately it would be more of a surprise that a Chinese Internet company did not have a security hole, but the latest finding from an overseas research team confirms that Tencent's QQ Browser leaks user data.

Tencent, China's largest Web portal company, itself also confirmed the vulnerabilities to the researchers at Citizen Lab, an interdisciplinary laboratory based at Canada's Munk School of Global Affairs in the University of Toronto.

In a newly published report, Citizen Lab alleges the QQ Browser sends "a user's IMEI, IMSI, nearby WiFi access points, search queries entered into the address bar, URLs of pages visited, and Android ID, without encryption or with easily decryptable encryption" to QQ's servers. Both Windows and Android versions of QQ Browser apparently incorporate these vulnerabilities. Plus, some of the information is only encrypted using 128-bit RSA, which is not difficult to deconstruct.

This means that not only does QQ gain sensitive user data, but a "man-in-the-middle" attack can easily exploit these flaws to grab user data too. This can include online bank information, Web surfing habits, passwords, and other personal and private information.

Citizen Lab says they alerted Tencent on February 05, 2016, but by March 24 only some of the issues had been addresses or fixed. Tencent is not alone in harboring an insecure browser — Chinese search Baidu also apparently has privacy and security issues.

Tags: Android | Baidu | Canada | Citizen Lab | mobile | QQ | search engine | Tencent | Toronto | University of Toronto | web browser | Windows | Wireless

Other Related News:

FAST FIVE: China Intensifies Crackdown On Didi With New Ride-Hailing Rules

December 1, 2021

Alibaba.com Looks To India For New Partnership

April 30, 2008

Was The Smart Money Right About Taiwan Semiconductor Mfg. Co. Ltd. (TSM)?

November 3, 2021

China Telecom Cooperates With Huawei To Build 40G Transmission Network

August 13, 2008

Fabulous Vintage Royal Stafford Bone China "Richmond" Pattern Teacup Candle Duo with a "Cinnamon Spiced Apple" Scented Candle

January 31, 2022

New Chinese Email Spam Rules Will Cleanse The Marketplace

March 20, 2006

NBA topics followers attending Clippers-Wizards sport to video message from Chinese language ambassador

January 29, 2022

China-Vietnam trains opened in 2021, 346 trains surpassed the total of the first four years since the launch-International Online Mobile

January 6, 2022

China regulator proposes cybersecurity review for some Hong Kong IPOs The Edge Markets

November 14, 2021
  • Contact Us
  • About Us
  • Corrections and Disclosure
  • Privacy Policy
  • Terms & Conditions
Menu
  • Contact Us
  • About Us
  • Corrections and Disclosure
  • Privacy Policy
  • Terms & Conditions
© 2022 ChinaTechNews.com. A Service of Asia Media Network.
Twitter
Posting....