Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

  • godless@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    1 year ago

    I live in China and this software is cancerous not just in the encryption failure, it also nestles into a computer like a trojan. Creates 2 fallback installations and will reinstall itself after removal if you reboot in between, unless you get rid of all 3 installations at once, where they are deliberately trying to obfuscate the uninstall button (triple confirmation, swapping the confirm/cancel buttons and button background colors, etc.).

    It’s a nasty piece of crap that come preloaded on any phone (android, at least) and Windows-PC here.

      • Dojan@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        I mean the CCP is aiming to have people use Kylin? If the government and the entire populace starts using Linux instead we’ll just see the same BS on Linux instead. It’s not an OS/platform issue, but an issue of bad actors.

  • nomadjoanne@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    1 year ago

    Didn’t swiftpad or whatever its called send every key pressed to Microsoft?

    Not a China shill. China is horrible. Microsoft less so as they don’t commit genocide in slow motion. But still, I think this sort of thing is more common than we think.

    Use FOSS.

    • dx1@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      What are the best FOSS options for Android keyboard apps? I’ve been struggling with this lately.

      • nomadjoanne@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        I use OpenBoard (it’s available on fDroid. Maybe the play store too).

        I don’t know if it’s the best but I like it. If you type in multiple languages you do need to hit a “language switcher” key on the keyboard to switch to the autocorrect for that language. A very minor complaint. Otherwise it’s great.

        And it will learn swear words. No more ducking ducks.

          • nomadjoanne@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            I only dislike it for German. My other languages are Spanish and English, which have the same layout minus one extra key not even used in English. But in German Z and Y change places, so that always trips me up.

            Having to remember to switch to the different language when writing a bilingual email is also annoying and does happen somewhat more often than you’d imagine.

  • punseye@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    As if other keyboard apps are any different, I don’t think Microsoft bought SwiftKey just for fun?!

    • Jesus@lemm.ee
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Tencent owns sizeable pieces (and outright owns) of more companies than you can imagine.

      • JJROKCZ@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        They invest in basically any tech company that is open to investment and willing to accept Chinese investors. To the ccp the data of the west is worth any price.

  • 3arn0wl@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    The most popular Western OS (and probably the other commercial OSs too) sends every key typed back to base. Plus every website visited. Plus every document amended.

  • Cam@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    1 year ago

    Never use a closed source keyboard app. It can read what you send for messages, websites you go to, search engine queries.