In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network eavesdropper to decrypt sensitive communications sent by the app, including revealing all keystrokes being typed by the user. Following our disclosure of these vulnerabilities, Sogou released updated versions of the app that identified all of the issues we disclosed.
Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.
I mean like the FBI buys all that data without a warrant anyways… So st least we pretend its not happening but like were practically looking in a mirror
So in China the CPC forces companies to have CPC members in their leadership, but in the USA companies bribe and coerce our leaders to do whatever they want. The US government allows companies in the US surveil everyone and everything with great intensity, and in return all of them will turn over that information to the government anyway… So companies in both countries partake in surveillance on people, but the CPC imposes oversight onto the company while US companies impose oversight onto the government. (or more accurately, businesses and the government work together to the benefit of business)
idk, if we had a state run by a communist party, it would be pretty cool if they forced workers on to the board of Exon, Norfolk Southern, or Raytheon etc
Yes.. The pitfalls of FOSS is that some dude is working on it when they have free time. I’ve been using it for 2 years and can’t say I mind… would like to have the word suggestions, though.
Seconded. I use Gboard because it has the same functionality but I have to sandbox it and restrict all internet access via firewall. I still don’t trust it and would prefer a FOSS alternative with the same functionality.
You can sandbox an app using Shelter. You can block the internet access of that app using NetGuard. Both apps are available on F-Droid and easy to setup. No special OS needed but I strongly recommend GrapheneOS to avoid backdoors.
Glad to help. Consider dropping the NetGuard dev some coin, he’s doing incredible work. He also develops FairEmail which imho is the best IMAP email app in existence.
Think you mean SwiftKey which Microsoft just introduced bing AI into that you can’t turn off. I 100 percent assume they now use all your typing data to train their ai too. They won’t even let you use themes without logging in to an account so I again assume they also tie data to accounts.
Removed by mod
deleted by creator
Just for one thing, Chinese companies are required to have CCP members in their leadership.
I mean like the FBI buys all that data without a warrant anyways… So st least we pretend its not happening but like were practically looking in a mirror
deleted by creator
So in China the CPC forces companies to have CPC members in their leadership, but in the USA companies bribe and coerce our leaders to do whatever they want. The US government allows companies in the US surveil everyone and everything with great intensity, and in return all of them will turn over that information to the government anyway… So companies in both countries partake in surveillance on people, but the CPC imposes oversight onto the company while US companies impose oversight onto the government. (or more accurately, businesses and the government work together to the benefit of business)
idk, if we had a state run by a communist party, it would be pretty cool if they forced workers on to the board of Exon, Norfolk Southern, or Raytheon etc
I wanted to ask if you were born yesterday but I’ll try to be more educative than sassy.
All companies in China exist purely with the blessing of the political party. No approval, no company. Everything is done by their books.
And in US is other way around, every political party has blessing of companies.
What are the best FOSS options for Android keyboard apps? I’ve been struggling with this lately.
Removed by mod
OpenBoard - every other keyboard app is ducking shirt
FlorishBoard
F-Droid says the app hasn’t been updated in the last 14 months. Is the project still worked on? It says beta on the website.
Yes.. The pitfalls of FOSS is that some dude is working on it when they have free time. I’ve been using it for 2 years and can’t say I mind… would like to have the word suggestions, though.
Thanks for the recommendation. This comment is typed using a freshly installed florisboard keyboard :)
Seconded. I use Gboard because it has the same functionality but I have to sandbox it and restrict all internet access via firewall. I still don’t trust it and would prefer a FOSS alternative with the same functionality.
How do you do that?
Not OP, but this can be managed with Datura firewall on CalyxOs
wants to do something
needs to be an IT major
Welp, guess I’ll choose between China and Microsoft, then.
You can sandbox an app using Shelter. You can block the internet access of that app using NetGuard. Both apps are available on F-Droid and easy to setup. No special OS needed but I strongly recommend GrapheneOS to avoid backdoors.
Thank you vm! NetGuard is awesome. I will test Shelter.
Glad to help. Consider dropping the NetGuard dev some coin, he’s doing incredible work. He also develops FairEmail which imho is the best IMAP email app in existence.
I’m partial to thumbkey. It even has a Lemmy community: !thumbkey@lemmy.ml
OpenBoard with Gesture
Using FlorisBoard right now, no auto correct but you’ll adapt
Think you mean SwiftKey which Microsoft just introduced bing AI into that you can’t turn off. I 100 percent assume they now use all your typing data to train their ai too. They won’t even let you use themes without logging in to an account so I again assume they also tie data to accounts.
deleted by creator