Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

    • @Steeve@lemmy.ca
      link
      fedilink
      English
      35
      edit-2
      11 months ago

      Every single time something sketchy is happening in Chinese tech a Lemmy user will slide the conversation and accusations to American tech. It’s a rule.

      • @ZeroHora@lemmy.ml
        link
        fedilink
        English
        1111 months ago

        Is not about American/Chinese government, is about privacy. ANY company or government storing your data can be extremely problematic in the future.

        Yeah the Sogou Keyboard send data to Tencent, the same thing happens or could happens with others proprietary keyboards in the future. How about trying a FOSS one?

        • @Steeve@lemmy.ca
          link
          fedilink
          English
          7
          edit-2
          11 months ago

          It’s absolutely about the American/Chinese government, I don’t see comments forum sliding into Chinese tech on every post about Google.

          But no, swift and gboard don’t send your data to the American government.

          There’s also a dangerous misconception around here that FOSS == privacy safe. It doesn’t.

          • @Aurenkin@sh.itjust.works
            link
            fedilink
            English
            211 months ago

            There is also a differece between invading your privacy and compromising your security. Both are bad, but one is much worse at least in my view. Keylogging and then sending those keystrokes back to base with a dodgey custom rolled encryption framework is not just a breach of privacy.

      • @SnowdenHeroOfOurTime@unilem.org
        link
        fedilink
        English
        711 months ago

        On all social media, that seems to happen and it makes me sick.

        People not knowing how scary the Chinese government is speaks volumes about the future of other countries. We had all the opportunity to see it happen and avoid it and these morons dismiss the truth and whatabout every damned thing

      • @Aurenkin@sh.itjust.works
        link
        fedilink
        English
        311 months ago

        Well, we have actual evidence here of dodgy shit happening, but what about this other thing I assume is also happening based on absolutely nothing? See, both just as bad!

        • @Aurenkin@sh.itjust.works
          link
          fedilink
          English
          27
          edit-2
          11 months ago

          Any data you submit to Google is stored and analysed. That’s different from sending keystrokes as they happen though.

          I’m all for criticising invasive data use and collection which Google is definitely guilty of. It’s not the same as keylogging though which is not just a privacy concern but a pretty serious security one as well. Also we have actual evidence here of Tencent doing this which makes a difference to me at least.

      • @supercheesecake@aussie.zone
        link
        fedilink
        English
        411 months ago

        I’m not sure if that’s true. You know, it’s Google. Every keystroke in your gmail email is analysed, so can’t imagine gboard is any different to them.

    • fmstratA
      link
      English
      711 months ago

      While GBoard is closed source, they have documented that they use federated learning. Meaning their model is generated on-device and only the inferences are sent to Google.

      That being said, I use OpenBoard.

    • Lee Duna
      link
      fedilink
      English
      511 months ago

      I prefer OpenBoard, it doesn’t send keystrokes to any server

      • @august_senpai@lemm.ee
        link
        fedilink
        English
        211 months ago

        The fork even has support for swipe, autocorrect, word prediction, clipboard management, etc, and is way more lightweight than Gboard and the rest. Zero reason to use anything else at the moment.

    • Engywuck
      link
      fedilink
      English
      211 months ago

      Not if you block internet connection at system level. I think it can be done if GBoard in installed as an user app, not as a system one.

      • fmstratA
        link
        English
        311 months ago

        Might as well just use Open Board.

        • Engywuck
          link
          fedilink
          English
          111 months ago

          Of course. My “problem” is that I need to write in 3 languages at the same time and switching languages manually in Open board is a bit cumbersome, while in GBoard it happens automatically.

    • @SnowdenHeroOfOurTime@unilem.org
      link
      fedilink
      English
      111 months ago

      This “they’re all bad” shit aimed at the Chinese government makes me so sad. How many of you dullards have even heard of Tienanmen square

      • @SnowdenHeroOfOurTime@unilem.org
        link
        fedilink
        English
        311 months ago

        The downvotes tell me some people need to Google Tienanmen square. From outside China. Inside china, it didn’t happen. Erases from history

        • @addie@feddit.uk
          link
          fedilink
          English
          811 months ago

          It’s not called the ‘Tiananmen Square’ by the Chinese - that’s just the name of the place. Either 六四屠殺 (June 4 massacre) or 六四鎮壓 (June 4 crackdown) would be more likely. And yes, expect loads of downvoting on Lemmy if you’re ever critical of China.