Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

  • godless@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    11 months ago

    I live in China and this software is cancerous not just in the encryption failure, it also nestles into a computer like a trojan. Creates 2 fallback installations and will reinstall itself after removal if you reboot in between, unless you get rid of all 3 installations at once, where they are deliberately trying to obfuscate the uninstall button (triple confirmation, swapping the confirm/cancel buttons and button background colors, etc.).

    It’s a nasty piece of crap that come preloaded on any phone (android, at least) and Windows-PC here.

    • Jesus@lemm.ee
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 months ago

      Tencent owns sizeable pieces (and outright owns) of more companies than you can imagine.

      • JJROKCZ@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        11 months ago

        They invest in basically any tech company that is open to investment and willing to accept Chinese investors. To the ccp the data of the west is worth any price.

  • GnuLinuxDude@lemmy.ml
    cake
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 months ago

    What’s the deal with Android “keyboards”? Why is it just an app that you can install? And why can it have more functionality/permissions from the OS beyond just being a local keyboard? As an iOS user this is very bizarre and foreign to me.

    I feel like every time the topic of Android keyboards (again, why is this a thing?) comes up it’s some kind of big spyware thing. Seems like most every app on Android and iOS is spyware anyway, of course.

    • anonion@lemmy.anonion.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 months ago

      There are some legitimate reasons to have a separate keyboard. I use Keepass2Android’s keyboard to enter passwords from Keepass. This way, there’s direct access to the password database instead of copying passwords/usernames/other fields to the system clipboard.

  • punseye@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 months ago

    As if other keyboard apps are any different, I don’t think Microsoft bought SwiftKey just for fun?!

  • nomadjoanne@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    11 months ago

    Didn’t swiftpad or whatever its called send every key pressed to Microsoft?

    Not a China shill. China is horrible. Microsoft less so as they don’t commit genocide in slow motion. But still, I think this sort of thing is more common than we think.

    Use FOSS.

    • dx1@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      11 months ago

      What are the best FOSS options for Android keyboard apps? I’ve been struggling with this lately.

      • nomadjoanne@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        11 months ago

        I use OpenBoard (it’s available on fDroid. Maybe the play store too).

        I don’t know if it’s the best but I like it. If you type in multiple languages you do need to hit a “language switcher” key on the keyboard to switch to the autocorrect for that language. A very minor complaint. Otherwise it’s great.

        And it will learn swear words. No more ducking ducks.