Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

you are viewing a single comment's thread
view the rest of the comments
[–] 33 points 3 years ago (8 children)

And gboard or SwiftKey don't?

  • source
  • hideshow 16 child comments
  • [–] 34 points 3 years ago* (3 children)

    Every single time something sketchy is happening in Chinese tech a Lemmy user will slide the conversation and accusations to American tech. It's a rule.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 14 points 3 years ago (1 child)

    Is not about American/Chinese government, is about privacy. ANY company or government storing your data can be extremely problematic in the future.

    Yeah the Sogou Keyboard send data to Tencent, the same thing happens or could happens with others proprietary keyboards in the future. How about trying a FOSS one?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 3 years ago* (1 child)

    It's absolutely about the American/Chinese government, I don't see comments forum sliding into Chinese tech on every post about Google.

    But no, swift and gboard don't send your data to the American government.

    There's also a dangerous misconception around here that FOSS == privacy safe. It doesn't.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 3 years ago

    There is also a differece between invading your privacy and compromising your security. Both are bad, but one is much worse at least in my view. Keylogging and then sending those keystrokes back to base with a dodgey custom rolled encryption framework is not just a breach of privacy.

  • source
  • parent
  • [–] 4 points 3 years ago

    On all social media, that seems to happen and it makes me sick.

    People not knowing how scary the Chinese government is speaks volumes about the future of other countries. We had all the opportunity to see it happen and avoid it and these morons dismiss the truth and whatabout every damned thing

  • source
  • parent
  • [–] 13 points 3 years ago* (3 children)

    Gboard doesn't at least. It does send some stuff but not keystrokes

  • source
  • parent
  • hideshow 6 child comments
  • [–] 31 points 3 years ago (1 child)

    It sends whole words instead!

  • source
  • parent
  • hideshow 2 child comments
  • [–] 26 points 3 years ago*

    Any data you submit to Google is stored and analysed. That's different from sending keystrokes as they happen though.

    I'm all for criticising invasive data use and collection which Google is definitely guilty of. It's not the same as keylogging though which is not just a privacy concern but a pretty serious security one as well. Also we have actual evidence here of Tencent doing this which makes a difference to me at least.

  • source
  • parent
  • [–] 7 points 3 years ago (1 child)

    While GBoard is closed source, they have documented that they use federated learning. Meaning their model is generated on-device and only the inferences are sent to Google.

    That being said, I use OpenBoard.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 3 years ago (1 child)

    I prefer OpenBoard, it doesn't send keystrokes to any server

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 3 years ago (1 child)

    The fork even has support for swipe, autocorrect, word prediction, clipboard management, etc, and is way more lightweight than Gboard and the rest. Zero reason to use anything else at the moment.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 3 years ago (1 child)

    What's the fork? I've been using Florisboard beta (ehich is also opensource) and pretty happy with it. The only things I miss is swipe for dictionary words

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 3 years ago* (1 child)

    https://github.com/Helium314/openboard
    Important to note that you need to install a library from inside the app's settings to enable swipe typing. Ctrl+F "enable gesture typing" on the Github page to see where to get it.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 3 years ago (1 child)

    I loaded the library but couldn't see a toggle to turn it on.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 3 years ago (1 child)

    Uhhh it's pretty blatant.
    OpenBoard Settings > Gesture Typing > Enable Gesture Typing

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 3 years ago (1 child)
  • [–] 1 point 3 years ago*

    No, it's the fork I've linked. You got it from here, yes? Also, the option only appears after you successfully load a library by going to Advanced > Load gesture typing library. Since you said you'd already loaded it I didn't mention that. You might've loaded the incorrect file or something.

  • source
  • parent
  • [–] 2 points 3 years ago (1 child)

    Not if you block internet connection at system level. I think it can be done if GBoard in installed as an user app, not as a system one.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 3 years ago (1 child)

    This "they're all bad" shit aimed at the Chinese government makes me so sad. How many of you dullards have even heard of Tienanmen square

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 3 years ago (1 child)

    The downvotes tell me some people need to Google Tienanmen square. From outside China. Inside china, it didn't happen. Erases from history

  • source
  • parent
  • hideshow 2 child comments
  • [–] 9 points 3 years ago

    It's not called the 'Tiananmen Square' by the Chinese - that's just the name of the place. Either 六四屠殺 (June 4 massacre) or 六四鎮壓 (June 4 crackdown) would be more likely. And yes, expect loads of downvoting on Lemmy if you're ever critical of China.

  • source
  • parent