Submitted 4 months ago by Cat@ponder.cat to technology@lemmy.world
https://citizenlab.ca/2025/02/network-security-issues-in-rednote/
I’m not particularly worried about those vulnerabilities. Unfortunately, they are pretty common AFAIK, but at-least they pretty much only open a backdoor within whatever network you’re connected to, and can be mitigated with a VPN.
IMO, there’s much bigger reasons to be worried about RedNote than security or even privacy.
IMO, there’s much bigger reasons to be worried about RedNote than security or even privacy.
What are those reasons?
I’m skeptical. Citizen Lab is great, but just because they didn’t reply doesn’t mean these issues weren’t worked on or fixed. They tested 8.59.2 and the current US version is 8.59.4 with the current Chinese version being 8.70.6.
There’s been dozens of updates since the test, so it’s hard say if these test are even valid anymore. Additionally;
Network attackers can read users’ file a contents on the Android versions of the application available for download on RedNote’s website and on the Mi Store, but not in the version downloaded from the Google Play Store or the iOS version.
The major security issue isn’t even possible as long as you get them directly from the Play Store.
That may have been addressed on Android, I got an update yesterday
sbv@sh.itjust.works 4 months ago
Citizen Lab is a national treasure. I really enjoy reading about what they do.