Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

  • SnowdenHeroOfOurTime@unilem.org
    link
    fedilink
    English
    arrow-up
    100
    arrow-down
    18
    ·
    1 year ago

    Alright China shills, you can stop changing the subject to how Google and the US are the “same”.

    The troops advanced into central parts of Beijing on the city’s major thoroughfares in the early morning hours of 4 June and engaged in bloody clashes with demonstrators attempting to block them, in which many people – demonstrators, bystanders, and soldiers – were killed. Estimates of the death toll vary from several hundred to several thousand, with thousands more wounded.[15][16][17][18][19][20]

    https://en.m.wikipedia.org/wiki/1989_Tiananmen_Square_protests_and_massacre

    If you lived in China you’d likely not know about this, since people who talk about it go to prison.

    Yeah the US is exactly like this so let’s not talk about the Chinese government being awful to their citizens /s

    • dingleberry@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      38
      arrow-down
      9
      ·
      1 year ago

      Simple solution is to block lemmygrad and hexbear in your app. That cuts down quite a few tankies and mainlaind Taiwan shills.

      • Hype@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        1 year ago

        Been using lemmy for a few days and I am already feeling the need to do just that.

        • CrypticCoffee@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          How so? I’ve been using since the API blackout and not seen any content from either instance.

        • grue@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          If I understand correctly, hexbear is where the refugees ended up after Reddit banned r/ChapoTrapHouse.

      • Notorious_handholder@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        Imagine being in Taiwan and having full access to information about China and the west and still shilling for China. Those types of people should be looking for a dominatrix, not a political philosophy…

        • evilgiraffe666@ttrpg.network
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          I think they might be using “mainland Taiwan” as a way of saying China - Taiwan is an island which China thinks is “theirs” for some reason.

      • PersnickityPenguin@lemm.ee
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        mainland Taiwan

        You must mean West Taiwan. Sadly they refuse to acknowledge the authority of Taiwans government.

    • Alien Nathan Edward@lemm.ee
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      2
      ·
      1 year ago

      No one is saying Google massacred protestors, but if you’re gonna be against keyboard apps spying on you it should be irrelevant who they’re spying for. Criticizing shitty things American companies do doesn’t make you a China shill and calling everyone who does it a China shill is intellectually dishonest.

      • SnowdenHeroOfOurTime@unilem.org
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        8
        ·
        1 year ago

        claiming that the dozen people in this thread falsely equating what China is doing to the things that happen in the US – ignoring that they are very different, and ONLY considering that they are moving attention away from the posted article – is not so much “intellectually dishonest” as it is an intentional lie with a goal. Good bye.

    • PersnickityPenguin@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 year ago

      Sir this is a Wendy’s

      Or more specifically, a thread about a phone keyboard.

      But it is true that Google and Microsoft phone home with your key strokes. That’s how they develop their predictive typing and autocorrect.

    • purahna@lemmygrad.ml
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      5
      ·
      1 year ago

      If you can’t see the fundamental intertwining of Google (or any other fortune 500 company) and the US State, then you should really start looking harder. Lobbyists, revolving door membership, corruption, tax writeoffs, corporate power being used to influence day-to-day life, really, US companies’ control over the US state is pretty similar to the Chinese State’s control over Chinese Companies. I just don’t think corporations should be in charge like y’all seem to.

        • Aceticon@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          edit-2
          1 year ago

          It actually makes sense that Americans should talk a lot more about the shitty state of things in the US rather than the propaganda about China used to distract them.

          It also makes sense that Chinese should talk a lot more about the shitty state of things in China rather than the propaganda about the US used to distract them.

          That just leaves everybody else, looking at both countries and people in them doing the equivalent of measuring the length of turds and fighting for which one is the shortest, pointedly ignoring it’s all shit.

        • purahna@lemmygrad.ml
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          4
          ·
          1 year ago

          yeah I really do, because the average annual US foreign conflict is worse than the wildest liberal exaggeration of the worst thing China has ever done

    • gmtom@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      arrow-down
      1
      ·
      edit-2
      1 year ago

      I mean, ill always say that China is worse than the US. But you can find plenty of examples of the US doing awful things to its people too.

      Like the MOVE bombing https://en.wikipedia.org/wiki/1985_MOVE_bombing

      or The Tusla Massacre that involved law enforcement bombing black neighbourhoods https://en.wikipedia.org/wiki/Tulsa_race_massacre

      Or any of the countless of times cops perpetrated mass violence against black people during the civil war era and cracked down harshly on protests.

      Or when the did the same to anti-war protestors during the vietnam war.

      Or the numerous times they experimented on their own citezens such as MK ultra, The Tuskegee Syphilis Experiment, or any of the dozens upon dozens of radiation experimentation, like when almost 1000 pregnant mothers were injected with radioactive iron, causing many miscarriages and cancers(and thats not the only time they injected pregnant mothers with radioctive material to see if it fucked up the baby), or when inserting radium rods up the nostrils of school children and then observing how their health declined, or when they dosed hundreds of inuit with radioactive iodine to see its affects on the thyroid.

      Like I dont think this makes China’s atrocities any more excusable, but the reverse is true to. The US really isnt much better than China.

      • bloodfart@lemmy.ml
        link
        fedilink
        English
        arrow-up
        0
        arrow-down
        1
        ·
        1 year ago

        Don’t forget operation sea spray! Next time you laugh at someone talking about chemtrails remember the us government actually did chemtrails!

    • Shaggy0291@lemmygrad.ml
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      5
      ·
      1 year ago

      The troops advanced into central parts of Beijing on the city’s major thoroughfares in the early morning hours of 4 June and engaged in bloody clashes with demonstrators attempting to block them, in which many people – demonstrators, bystanders, and soldiers – were killed.

      Here’s a video of an interview with Chai Ling recorded on May 28, 1989 with reporter Philip Cunningham. Chai Ling was arguably the most influential leader of the student protesters at Tiananmen Square. In the interview she openly wishes for the soldiers to massacre the students after her instrumental role in blocking attempts by other activists to move the protest back to campuses, all while refusing to sacrifice herself.

      Notable quotes from this interview include:-

      “You, the Chinese are not worth my struggle. You are not worth my sacrifice”

      “The students keep asking what shall we do next? What can we accomplish? I feel so sad, because how can I tell them what we’re actually hoping for is bloodshed - for the moment when the government has no choice but to brazenly butcher the people?”

      “Only when the square is awash with blood will the people of China open their eyes. Only then will they really be united”

      “If we allow the [protesters] movement to collapse on its own, then the government will be able to wipe out all the leaders of the movement”

      Upon being asked if she will stay in the square herself after urging the students to stay she simply responded, “No, I won’t”.

      When the Tiananmen Square incident erupted in violence on June 3rd, Chai Ling escaped from Beijing by train. She was eventually smuggled to Hong Kong via Operation Yellowbird, an MI6/CIA led initiative to extract dissidents who they hoped would form the nucleus of a “Chinese democracy movement in exile”. To my knowledge, no details exist about how and when she made contact with them. She was subsequently invited to study at Princeton on a full scholarship due to her pivotal role in the Tiananmen protests. She studied Politics and International Relations there, eventually picking up an MBA from Harvard. Today, she runs an internet company called Jenzabar that she founded with her husband, the lawyer Robert Maginn, a long time associate of the Republican party, having even served as the chairman of the Massachusetts Republican party between 2011 and 2013. Their company serves more than 1300 higher education institutions worldwide, whom they provide with ERP software.

      • SnowdenHeroOfOurTime@unilem.org
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        5
        ·
        1 year ago

        Straight up disgusting attempt to dismiss what happened at Tienanmen square. Gee I wonder what your opinion on the chinese govt is.

        • blueberries@lemmygrad.ml
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          7
          ·
          1 year ago

          You’re just salty that the Western backed color revolution failed in China. You would have loved to cheer the West on in sucking the country dry the same that it did with Russia after they fell for the Western lies. Just compare the life expectency graphs between Russia and China after 1989:

          • Syrc@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            3
            ·
            edit-2
            1 year ago

            “China’s life expectancy is great and didn’t suffer at all even from the pandemic!”

            Source: China

            • Trudge [Comrade]@lemmygrad.ml
              link
              fedilink
              English
              arrow-up
              0
              arrow-down
              3
              ·
              1 year ago

              I know right? It’s amazing what proper governmental response and civic mindedness of the populace can do.

              See also: Vietnam, Korea, New Zealand

                • Zaktor@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  0
                  ·
                  1 year ago

                  The consequences were way better than the let 'er rip nations. If China had a death toll equivalent to the United States, they’d have 5 million dead. Even the “China is lying” people are talking about hundreds of thousands, or possibly a million, not 5 million.

                  Staying COVID-zero until better treatments and vaccines are available actually does save lives.

          • assassin_aragorn@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            1 year ago

            You’re just salty that the Western backed color revolution failed in China. You would have loved to cheer the West on in sucking the country dry the same that it did with Russia after they fell for the Western lies.

            Then how come discussion of Tienanman Square is discouraged, if not banned, instead of being widely extolled as successful defiance of the West? Clearly, unless Xi is actually a US plant, the government does not want discussion of it.

            • blueberries@lemmygrad.ml
              link
              fedilink
              English
              arrow-up
              0
              ·
              edit-2
              1 year ago

              Because this issue is used as a battering ram to weaken the Chinese government. The West keeps talking about there being a ‘Tiananmen Massacre’ where unarmed students were killed even though behind closed doors US diplomats admit there was no bloodshed on TIananmen. It is really hard to defend yourself against those accusations which are false when the other side doesn’t need to produce any evidence whatsoever. What is provable are the deaths of the soldiers and maoists fighting in street battles outside the square but that was not a massacre and funnily enough the West also doesn’t like to talk about those deaths

        • Shaggy0291@lemmygrad.ml
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          5
          ·
          1 year ago

          I haven’t stated an opinion either way. I’ve simply provided additional context to a historical event you chose to bring up. Why do you feel the need to respond to it in such a kneejerk manner and ascribe my motives? Does the context I’ve provided make you feel uncomfortable in some way?

          I have neither dismissed nor denied that a terrible incident happened at Tiananman square on the late hours of June 3rd 1989. I wish for those responsible for plotting and catalysing the incident to face justice for their crimes.

            • Shaggy0291@lemmygrad.ml
              link
              fedilink
              English
              arrow-up
              3
              arrow-down
              4
              ·
              edit-2
              1 year ago

              If you’re asking for my personal opinion then I’d say the US is a great deal worse than anything China has done since they took their country back, actually. It’s not even remotely close.

              What’s “telling” is the way people such as yourself latch onto anything the western media has to say about America’s geopolitical rivals, in spite of any and all the evidence to the contrary; regardless of the credibility of any of the sources. I mean, are you honestly just going to lap up whatever western media outlets tell you? The guys that told you Iraq undeniably had WMDs? The cynical scum bags who banged the drum about Gaddafi and have subsequently shrugged their shoulders while Libya now wallows with open air slave markets? Those are your respectable sources? You’re going to hang off of every word from weirdo crooks like Adrian Zenz, born-again Christian “China experts” who publicly declare they’re on a mission from God to defeat communism in China? That’s the sort of “impartial” source you’re prepared to die on a hill for? Or maybe its teenagers speculating over satellite photography they pulled up from Google maps?

              Here’s something I find telling; that you won’t engage whatsoever with the point I raised in response to you trying to grandstand over the Tiananmen incident; that you swivelled on a dime from gleefully using a massacre as a political football to clutching your pearls that someone dared to bring information to the table that contextualises that event into something more than the simplistic good vs evil narrative you were going for. Do yourself a favour and actually listen to what Chai Ling has to say; it’s been independently verified and held up in a libel case she brought against the journalists when it came to light, so you can rest assured its legitimate. Stop and think about what it really means for the student leader of those killed at Tiananmen to outright admit they were trying to get their supporters massacred after actively blocking attempts to disperse peacefully. Consider the potential significance that she was literally extracted out of her country by the intelligence services of China’s biggest geopolitical rivals. If you’re genuinely appalled with all the death from this event, don’t you think she and her benefactors have something to answer for? Or do you suppose its the place of the United States or Great Britain to stir up trouble in other countries, to dictate who should be in charge there and how their countries should be run?

              • imaqtpie@lemmy.myserv.one
                link
                fedilink
                English
                arrow-up
                0
                arrow-down
                1
                ·
                1 year ago

                Fascinating stuff, I enjoyed reading this thread. I don’t agree that the US has been worse than China, but you do make some very good points.

              • SnowdenHeroOfOurTime@unilem.org
                link
                fedilink
                English
                arrow-up
                0
                arrow-down
                3
                ·
                1 year ago

                yeah I don’t have time to debate people who are only interested in downplaying something really fucked up. Sorry – I won’t read this.

                • Shaggy0291@lemmygrad.ml
                  link
                  fedilink
                  English
                  arrow-up
                  0
                  arrow-down
                  1
                  ·
                  1 year ago

                  No, what you don’t have time for is confronting inconvenient truths that fly in the face of your political agenda.

                  Again, as previously stated I am not downplaying this incident. It happened and it was terrible. If you’re not really just a coward ducking my point (Which I think you are) and you actually think that’s the case then I challenge you to point out how I’m doing so. This was a serious incident and many people died; don’t you think that the people who actively provoked the confrontation between students and soldiers should face up to what they’ve done?

    • money_loo@kbin.social
      link
      fedilink
      arrow-up
      21
      arrow-down
      6
      ·
      1 year ago

      This is one of my favorite things about kbin over Reddit. So neat to see gifs in chat.

      • tuoret@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        1
        ·
        1 year ago

        Reddit added the same functionality some time ago, I’m a bit sad it’s a thing here too but oh well. People seem to like it. My favourite thing about reddit was it being text-based though

      • Raltoid@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        1 year ago

        If you think that’s a kbin thing, you’ve not used reddit in years, you haven’t looked at anything lemmy, etc.

  • Goodie@lemmy.world
    link
    fedilink
    English
    arrow-up
    37
    ·
    1 year ago

    It’s stories like this that don’t surprise me as much as make me ask: How the fuck do you store and process this much data to get anything useful out of it.

    • WarmSoda@lemm.ee
      link
      fedilink
      English
      arrow-up
      23
      arrow-down
      1
      ·
      1 year ago

      I could be wrong, and this is a generalization of any country you can name, but my impression is data is stored on everyone so when they decide someday to look you up they already have all the data collected. It’s not really processed until needed.

      • TheEntity@kbin.social
        link
        fedilink
        arrow-up
        4
        ·
        1 year ago

        Did you ever see how an average person types? It’s not the amount of data that is the problem. We have too much dumb data!

      • Steeve@lemmy.ca
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        The real answer is compute power. At the moment it’s very expensive to run the computations necessary for big LLMs, I’ve heard some companies are even developing specialized chips to run them more efficiently. On the other hand, you probably don’t want your phone’s keyboard app burning out the tiny CPU in it and draining your battery. It’s not worth throwing anything other than a simple model at the problem.

  • punseye@lemmy.world
    link
    fedilink
    English
    arrow-up
    23
    arrow-down
    3
    ·
    1 year ago

    As if other keyboard apps are any different, I don’t think Microsoft bought SwiftKey just for fun?!

  • Diabolo96@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    48
    arrow-down
    30
    ·
    edit-2
    1 year ago

    The people here acting like their Gboard doesn’t do the same is so funny.

    Edit : never used nor installed tiktok.

    • Paige (she/her)@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      36
      arrow-down
      4
      ·
      1 year ago

      It probably doesn’t though. Obviously it’s closed source making it harder to tell what’s actually happening, but there’s nothing stopping security analysts from looking at network usage and such. I would imagine that Google doesn’t install a keylogger on every Android phone, not out of the goodness of their hearts, but because they don’t want the bad publicity and lawsuits when it would inevitably be discovered.

      • voxel@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        14
        arrow-down
        1
        ·
        edit-2
        1 year ago

        they do collect usage stats by default though.
        which include typed sentences passed through their ai model and words usage counts.
        it can all be turned off and gboard seems to respect these options. it doesn’t access online services unless requested with these options off.

        • Avid Amoeba@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          1 year ago

          If you mean by “collect usage stats” train their AI model on-device and send the training result to Google, then yes. If you mean that the actual words get sent to Google’s servers, then no. There was a study shared recently that looked into this. Only metadata about what’s typed is sent. That’s not nothing of course, but it’s not what Tencent does at all.

          E: Found it.

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        10
        ·
        1 year ago

        Even if i had it, do you honestly think i would waste my life to be completely forgotten and left to rot for disclosing it like Snowden. Yep, no one will ever reveal anything after that shit show.

    • SnowdenHeroOfOurTime@unilem.org
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      5
      ·
      1 year ago

      I’m going to guess you’re one of the people who defends tiktok and compares it to every other social media app by saying the US government is basically the same as the Chinese government

        • prole@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 year ago

          No it’s not a “warning,” it’s just boring old whataboutism.

          The first part of your comment is like a textbook example of the fallacy.

        • Diabolo96@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          2
          ·
          edit-2
          1 year ago

          It seems, people can’t understand this. Am not American so i have an outside view that’s free from any patriotic feeling and spoon fed propaganda since childhood.

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        5
        ·
        1 year ago

        I will now answer any questions that boils down to “but we’re the good guys” to “not American”

        • SnowdenHeroOfOurTime@unilem.org
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          4
          ·
          1 year ago

          What the fuck are you talking about? This has nothing to do with America, the problem here is you’re falsely equating a horrifyingly authoritarian government and basically writing it off as the “sAmE aS gOoGlE”

          • Diabolo96@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            5
            ·
            edit-2
            1 year ago

            I don’t know. What i read on Wikileaks made me believe they’re not that different you know. Go read it, it will open your mind.

            • SnowdenHeroOfOurTime@unilem.org
              link
              fedilink
              English
              arrow-up
              6
              ·
              1 year ago

              How many times has the US military ever murdered 900+ protestors in broad daylight then censored it from all media and imprisoned anyone who talks about it decades later?

              Educate yourself. Jesus fucking Christ.

              For the record I don’t need to read more about the US government corruption, that’s known. The fact that you’re comparing the two is disturbing af

              • Diabolo96@lemmy.dbzer0.com
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                2
                ·
                1 year ago

                Starting with the native American or i don’t count it ? I don’t know ? Is shooting a bus full of kids and laughing about it saying they’ll grow up to be terrorist anyway isn’t that far off and this is the tip of the iceberg buddy. USA is good at hiding murdering brown people by prefixing the word terrorists.

              • Landrin201@lemmy.ml
                link
                fedilink
                English
                arrow-up
                0
                arrow-down
                2
                ·
                1 year ago

                Several in fact. Most famously they bombed Tulsa oklahoma when black people there got too wealthy. But now multiple states are banning the teaching of it, alongside banning the teaching of our genocide of the Native Americans.

                We do most of our murder of innocent people these days abroad though which isn’t really much better, but most Americans are apparently completely fine with children being murdered so long as they aren’t white and they aren’t here, or they aren’t in an American school being shot by one of their peers.

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        edit-2
        1 year ago

        Did you read it ? Can you share the part with relevant info. I tried to read it but it kept going abouts how Gboard and the Microsoft keyboard both gather huge amount of data and that both are opaque and you can’t know what data is sent to the server backend.

        Also, ever heard of 5,9 and 14 eyes ?

        • Avid Amoeba@lemmy.ca
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 year ago

          Google doesn’t sell to data brokers. Not yet at least. They have a competitive advantage they will lose if they sold their data (our data) to third parties, especially third party resellers.

  • s20@lemmy.ml
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    3
    ·
    edit-2
    1 year ago

    And the Platinum Award for Least Surprising News Headline goes to…

  • sugarfree@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    1 year ago

    These findings underscore the importance for software developers in China to use well-supported encryption implementations such as TLS instead of attempting to custom design their own.

    lol.

    • Jesus@lemm.ee
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 year ago

      Tencent owns sizeable pieces (and outright owns) of more companies than you can imagine.

      • JJROKCZ@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        1 year ago

        They invest in basically any tech company that is open to investment and willing to accept Chinese investors. To the ccp the data of the west is worth any price.

  • Cris.Q@lemmy.world
    link
    fedilink
    arrow-up
    7
    ·
    1 year ago

    In fact it’s hard to find open source Chinese input methods that work well enough, the only ones I know of are Trime and Fcitx5_for_android.

  • godless@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    1 year ago

    I live in China and this software is cancerous not just in the encryption failure, it also nestles into a computer like a trojan. Creates 2 fallback installations and will reinstall itself after removal if you reboot in between, unless you get rid of all 3 installations at once, where they are deliberately trying to obfuscate the uninstall button (triple confirmation, swapping the confirm/cancel buttons and button background colors, etc.).

    It’s a nasty piece of crap that come preloaded on any phone (android, at least) and Windows-PC here.

      • Dojan@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        I mean the CCP is aiming to have people use Kylin? If the government and the entire populace starts using Linux instead we’ll just see the same BS on Linux instead. It’s not an OS/platform issue, but an issue of bad actors.