Chinese Olympics app found collecting personal data of users

The Chinese Olympics app, which is called the MY2022, was made mandatory for everyone attending this year’s Olympic Games to be held in Beijing.

The Chinese Olympics app was found exploiting the data of users. The app, which is called the MY2022, was made mandatory for everyone attending this year’s Olympic Games to be held in Beijing. However, it was discovered that the app has too many loopholes. The app has a security flaw that can steal the personal data of users, including the passport details, health records, and travel histories of users who have installed the app. The security researchers also unearthed that app code has two security holes that could expose the information of users.

“MY2022, an app mandated for use by all attendees of the 2022 Olympic Games in Beijing, has a simple but devastating flaw where encryption protecting users’ voice audio and file transfers can be trivially sidestepped. Health customs forms which transmit passport details, demographic information, and medical and travel history are also vulnerable. Server responses can also be spoofed, allowing an attacker to display fake instructions to users,” the key findings of Citizen Lab revealed.