China Legal Blog
Aggregated China Law Information
Clubhouse says it is improving security to address fear of spying by the Chinese government
Aggregated Source: ChinaLegalBlog.com

Clubhouse Unsplash Clubhouse was found pinging to servers ‘possibly located’ in China by researchers at the Stanford Internet Observatory. The report identified that a Chinese company, Agora , provided the backend infrastructure to the app. The app was found transmitting unique user IDs and chat room IDs in plaintext, making them susceptible to spying. According to a security research report by Stanford Internet Observatory ( SIO ), certain vulnerabilities were discovered in Clubhouse’s infrastructure, making it susceptible to spying by the Chinese government.
According to the report, Agora Inc, a Shanghai-based company, provides the backend infrastructure to Clubhouse. Since it is a Chinese company, it is subject to Chinese laws and could be required to turn over data to the Chinese government, if asked.
The SIO researchers were told by Agora that it does not store user data or audio, except for the purposes of monitoring network quality and billing Clubhouse for its work.
Advertisement In a statement to The Verge , Agora said it “does not have access to, share, or store personally identifiable end-user data. Voice or video traffic from non-China based users — including US users — is never routed through China.”
Unique user IDs, chatroom IDs transferred in plaintext
A major issue with Clubhouse’s infrastructure seems to be the fact that unique user IDs and chat room IDs are being transferred in plaintext. This would allow spies to monitor internet traffic and figure out who is talking to whom.
Advertisement

This data comes from MediaIntel.Asia's Media Intelligence and Media Monitoring Platform.

Original URL: Click here to visit original article