this post was submitted on 10 Aug 2023
15 points (100.0% liked)

Technology

59534 readers
3168 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

all 24 comments
sorted by: hot top controversial new old
[–] godless@lemmy.world 7 points 1 year ago (1 children)

I live in China and this software is cancerous not just in the encryption failure, it also nestles into a computer like a trojan. Creates 2 fallback installations and will reinstall itself after removal if you reboot in between, unless you get rid of all 3 installations at once, where they are deliberately trying to obfuscate the uninstall button (triple confirmation, swapping the confirm/cancel buttons and button background colors, etc.).

It's a nasty piece of crap that come preloaded on any phone (android, at least) and Windows-PC here.

[–] Ultra980@lemmy.world 2 points 1 year ago (2 children)

It's time to switch to Linux!

[–] dojan@lemmy.world 2 points 1 year ago (1 children)

I mean the CCP is aiming to have people use Kylin? If the government and the entire populace starts using Linux instead we'll just see the same BS on Linux instead. It's not an OS/platform issue, but an issue of bad actors.

[–] djsaskdja@endlesstalk.org 1 points 1 year ago

On the plus side maybe then it’ll finally be the year of the Linux desktop.

monkeys paw curls

[–] ammonium@lemmy.world 1 points 1 year ago

Don't worry, there is also a Linux version.

[–] punseye@lemmy.world 1 points 1 year ago

As if other keyboard apps are any different, I don't think Microsoft bought SwiftKey just for fun?!

[–] critical@reddthat.com 1 points 1 year ago

Same with Microsoft keyboard and almost every other keyboard app.

[–] Elephant0991@lemmy.bleh.au 1 points 1 year ago (1 children)
[–] Coelacanthus@lemmy.kde.social 1 points 5 months ago

So use Fcitx 5 Android instead. It's a open source IME application without requesting any permission except Notification, especially without network permission.

https://github.com/fcitx5-android/fcitx5-android

PermissionsNetwork Permissions

[–] nomadjoanne@lemmy.world 1 points 1 year ago* (last edited 1 year ago) (1 children)

Didn't swiftpad or whatever its called send every key pressed to Microsoft?

Not a China shill. China is horrible. Microsoft less so as they don't commit genocide in slow motion. But still, I think this sort of thing is more common than we think.

Use FOSS.

[–] dx1@lemmy.world 0 points 1 year ago (1 children)

What are the best FOSS options for Android keyboard apps? I've been struggling with this lately.

[–] nomadjoanne@lemmy.world 0 points 1 year ago (1 children)

I use OpenBoard (it's available on fDroid. Maybe the play store too).

I don't know if it's the best but I like it. If you type in multiple languages you do need to hit a "language switcher" key on the keyboard to switch to the autocorrect for that language. A very minor complaint. Otherwise it's great.

And it will learn swear words. No more ducking ducks.

[–] out@lemmynsfw.com 1 points 1 year ago* (last edited 9 months ago)
[–] 3arn0wl@lemmy.world 0 points 1 year ago (1 children)

The most popular Western OS (and probably the other commercial OSs too) sends every key typed back to base. Plus every website visited. Plus every document amended.

[–] magnor@lemmy.magnor.ovh 1 points 1 year ago (1 children)

Not that it would surprise me in any way, but do you have a source for this claim?

What, you don't take whataboutist claims trying to deflect attention from CCP spyware at face value?

[–] lasagna@programming.dev 0 points 1 year ago (1 children)

Tencent began investing on Reddit several years back.

[–] Jesus@lemm.ee 0 points 1 year ago (1 children)

Tencent owns sizeable pieces (and outright owns) of more companies than you can imagine.

[–] JJROKCZ@lemmy.world 0 points 1 year ago (1 children)

They invest in basically any tech company that is open to investment and willing to accept Chinese investors. To the ccp the data of the west is worth any price.

[–] out@lemmynsfw.com 1 points 1 year ago* (last edited 9 months ago)
[–] ObamaBinLaden@lemmy.world 0 points 1 year ago

And gboard or SwiftKey don't?

[–] thecam@lemmy.world -1 points 1 year ago

Never use a closed source keyboard app. It can read what you send for messages, websites you go to, search engine queries.