“Please do not make it public”: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping - The Citizen Lab
citizenlab.ca
In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network eavesdropper to decrypt sensitive communications sent by the app, including revealing all keystrokes being typed by the user. Following our disclosure of these vulnerabilities, Sogou released updated versions of the app that identified all of the issues we disclosed.

Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

  • Alien Nathan Edward@lemm.eeEnglish
    2411·
    11 months ago

    No one is saying Google massacred protestors, but if you’re gonna be against keyboard apps spying on you it should be irrelevant who they’re spying for. Criticizing shitty things American companies do doesn’t make you a China shill and calling everyone who does it a China shill is intellectually dishonest.

    • SnowdenHeroOfOurTime@unilem.orgEnglish
      611·
      11 months ago

      claiming that the dozen people in this thread falsely equating what China is doing to the things that happen in the US – ignoring that they are very different, and ONLY considering that they are moving attention away from the posted article – is not so much “intellectually dishonest” as it is an intentional lie with a goal. Good bye.