Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

  • 3arn0wl@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    32
    ·
    1 year ago

    The most popular Western OS (and probably the other commercial OSs too) sends every key typed back to base. Plus every website visited. Plus every document amended.

    • TimeSquirrel@kbin.social
      link
      fedilink
      arrow-up
      14
      arrow-down
      1
      ·
      edit-2
      1 year ago

      You know, network sniffers exist. You can verify if this is true yourself if you know how to use one. Kill all other network services and just start typing and see if it starts spewing packets.

      The internet is not some black box where us regular users can’t see what’s going on.

    • Aurenkin@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      1
      ·
      1 year ago

      Any sources for this? I know Windows and probably MacOS send analytics but every keystroke and every document amended seems unlikely to me, maybe I’m wrong though.

        • HaggierRapscallier@feddit.nl
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          1 year ago

          The timeline feature on Windows that shows your info across devices when your account is signed in, contains websites, apps and services. They say you can see it for 30 days, but I doubt they delete it after, even if they say they do. They probably at minimum process the meta-data.

          I don’t see why c/technology scream about privacy violations every other post, and then suddenly turn forgetful when geopolitics comes into play. I used to watch ‘exposés about China’ and anti-sjw stuff on youtube back in 2015 too - and then just as I stopped watching them, they became an ‘official geopolitical enemy’. The last decade has been a ride.