Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

you are viewing a single comment's thread
view the rest of the comments
[–] 111 points 3 years ago (14 children)

It's stories like this that don't surprise me as much as make me ask: How the fuck do you store and process this much data to get anything useful out of it.

  • source
  • hideshow 14 child comments
  • [–] 66 points 3 years ago (4 children)

    You just save the first 50 digits typed after some email is typed, and you have all the passwords you need!

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 3 years ago (3 children)

    This only applies if a username is a email

    And if it is then what happens when people actually email someone? Autocorrect during login?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 12 points 3 years ago* (1 child)

    I don't think they're saying that method would yield 100% clean data but it would give you all the "necessary" data with the absolute bare minimum storage requirement. At some point people will log into their email and for most people if you have their email password you have the password they use for everything

  • source
  • parent
  • hideshow 1 child comment
  • [–] 43 points 3 years ago (3 children)

    I could be wrong, and this is a generalization of any country you can name, but my impression is data is stored on everyone so when they decide someday to look you up they already have all the data collected. It's not really processed until needed.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 19 points 3 years ago (2 children)

    And how can autosuggest / autocorrect be so bad with so much training data

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 3 years ago

    The real answer is compute power. At the moment it's very expensive to run the computations necessary for big LLMs, I've heard some companies are even developing specialized chips to run them more efficiently. On the other hand, you probably don't want your phone's keyboard app burning out the tiny CPU in it and draining your battery. It's not worth throwing anything other than a simple model at the problem.

  • source
  • parent