2022
The most popular Chinese keyboard app which is used by more than 450 million monthly users sends every key typed to Tencent in China. (citizenlab.ca)
submitted 3 years ago by to c/technology@lemmy.world
460 comments fedilink hide all child comments
 

Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

you are viewing a single comment's thread
view the rest of the comments
[–] 66 points 3 years ago (1 child)

You just save the first 50 digits typed after some email is typed, and you have all the passwords you need!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 years ago (2 children)

    This only applies if a username is a email

    And if it is then what happens when people actually email someone? Autocorrect during login?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 12 points 3 years ago* (1 child)

    I don't think they're saying that method would yield 100% clean data but it would give you all the "necessary" data with the absolute bare minimum storage requirement. At some point people will log into their email and for most people if you have their email password you have the password they use for everything

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •