this post was submitted on 10 Aug 2023
35 points (97.3% liked)

Technology

58142 readers
3989 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

all 40 comments
sorted by: hot top controversial new old
[–] [email protected] 6 points 1 year ago (1 children)

I live in China and this software is cancerous not just in the encryption failure, it also nestles into a computer like a trojan. Creates 2 fallback installations and will reinstall itself after removal if you reboot in between, unless you get rid of all 3 installations at once, where they are deliberately trying to obfuscate the uninstall button (triple confirmation, swapping the confirm/cancel buttons and button background colors, etc.).

It's a nasty piece of crap that come preloaded on any phone (android, at least) and Windows-PC here.

[–] [email protected] 1 points 1 year ago (2 children)

It's time to switch to Linux!

[–] [email protected] 1 points 1 year ago (1 children)

I mean the CCP is aiming to have people use Kylin? If the government and the entire populace starts using Linux instead we'll just see the same BS on Linux instead. It's not an OS/platform issue, but an issue of bad actors.

[–] [email protected] 1 points 1 year ago

On the plus side maybe then it’ll finally be the year of the Linux desktop.

monkeys paw curls

[–] [email protected] 1 points 1 year ago

Don't worry, there is also a Linux version.

[–] [email protected] 5 points 1 year ago (4 children)

Alright China shills, you can stop changing the subject to how Google and the US are the "same".

The troops advanced into central parts of Beijing on the city's major thoroughfares in the early morning hours of 4 June and engaged in bloody clashes with demonstrators attempting to block them, in which many people – demonstrators, bystanders, and soldiers – were killed. Estimates of the death toll vary from several hundred to several thousand, with thousands more wounded.[15][16][17][18][19][20]

https://en.m.wikipedia.org/wiki/1989_Tiananmen_Square_protests_and_massacre

If you lived in China you'd likely not know about this, since people who talk about it go to prison.

Yeah the US is exactly like this so let's not talk about the Chinese government being awful to their citizens /s

[–] [email protected] 1 points 1 year ago (1 children)

Simple solution is to block lemmygrad and hexbear in your app. That cuts down quite a few tankies and mainlaind Taiwan shills.

[–] [email protected] -1 points 1 year ago (1 children)

Imagine being in Taiwan and having full access to information about China and the west and still shilling for China. Those types of people should be looking for a dominatrix, not a political philosophy...

[–] [email protected] 1 points 1 year ago

I think they might be using "mainland Taiwan" as a way of saying China - Taiwan is an island which China thinks is "theirs" for some reason.

[–] [email protected] 0 points 1 year ago (1 children)

No one is saying Google massacred protestors, but if you're gonna be against keyboard apps spying on you it should be irrelevant who they're spying for. Criticizing shitty things American companies do doesn't make you a China shill and calling everyone who does it a China shill is intellectually dishonest.

[–] [email protected] -1 points 1 year ago

claiming that the dozen people in this thread falsely equating what China is doing to the things that happen in the US -- ignoring that they are very different, and ONLY considering that they are moving attention away from the posted article -- is not so much "intellectually dishonest" as it is an intentional lie with a goal. Good bye.

[–] [email protected] -1 points 1 year ago

The troops advanced into central parts of Beijing on the city’s major thoroughfares in the early morning hours of 4 June and engaged in bloody clashes with demonstrators attempting to block them, in which many people – demonstrators, bystanders, and soldiers – were killed.

Here's a video of an interview with Chai Ling recorded on May 28, 1989 with reporter Philip Cunningham. Chai Ling was arguably the most influential leader of the student protesters at Tiananmen Square. In the interview she openly wishes for the soldiers to massacre the students after her instrumental role in blocking attempts by other activists to move the protest back to campuses, all while refusing to sacrifice herself.

Notable quotes from this interview include:-

"You, the Chinese are not worth my struggle. You are not worth my sacrifice"

"The students keep asking what shall we do next? What can we accomplish? I feel so sad, because how can I tell them what we're actually hoping for is bloodshed - for the moment when the government has no choice but to brazenly butcher the people?"

"Only when the square is awash with blood will the people of China open their eyes. Only then will they really be united"

"If we allow the [protesters] movement to collapse on its own, then the government will be able to wipe out all the leaders of the movement"

Upon being asked if she will stay in the square herself after urging the students to stay she simply responded, "No, I won't".

When the Tiananmen Square incident erupted in violence on June 3rd, Chai Ling escaped from Beijing by train. She was eventually smuggled to Hong Kong via Operation Yellowbird, an MI6/CIA led initiative to extract dissidents who they hoped would form the nucleus of a "Chinese democracy movement in exile". To my knowledge, no details exist about how and when she made contact with them. She was subsequently invited to study at Princeton on a full scholarship due to her pivotal role in the Tiananmen protests. She studied Politics and International Relations there, eventually picking up an MBA from Harvard. Today, she runs an internet company called Jenzabar that she founded with her husband, the lawyer Robert Maginn, a long time associate of the Republican party, having even served as the chairman of the Massachusetts Republican party between 2011 and 2013. Their company serves more than 1300 higher education institutions worldwide, whom they provide with ERP software.

[–] [email protected] -1 points 1 year ago* (last edited 1 year ago) (1 children)

I mean, ill always say that China is worse than the US. But you can find plenty of examples of the US doing awful things to its people too.

Like the MOVE bombing https://en.wikipedia.org/wiki/1985_MOVE_bombing

or The Tusla Massacre that involved law enforcement bombing black neighbourhoods https://en.wikipedia.org/wiki/Tulsa_race_massacre

Or any of the countless of times cops perpetrated mass violence against black people during the civil war era and cracked down harshly on protests.

Or when the did the same to anti-war protestors during the vietnam war.

Or the numerous times they experimented on their own citezens such as MK ultra, The Tuskegee Syphilis Experiment, or any of the dozens upon dozens of radiation experimentation, like when almost 1000 pregnant mothers were injected with radioactive iron, causing many miscarriages and cancers(and thats not the only time they injected pregnant mothers with radioctive material to see if it fucked up the baby), or when inserting radium rods up the nostrils of school children and then observing how their health declined, or when they dosed hundreds of inuit with radioactive iodine to see its affects on the thyroid.

Like I dont think this makes China's atrocities any more excusable, but the reverse is true to. The US really isnt much better than China.

[–] [email protected] -1 points 1 year ago

Don’t forget operation sea spray! Next time you laugh at someone talking about chemtrails remember the us government actually did chemtrails!

[–] [email protected] 1 points 3 months ago

So use Fcitx 5 Android instead. It's a open source IME application without requesting any permission except Notification, especially without network permission.

https://github.com/fcitx5-android/fcitx5-android

PermissionsNetwork Permissions

[–] [email protected] 1 points 1 year ago (1 children)

What's the deal with Android "keyboards"? Why is it just an app that you can install? And why can it have more functionality/permissions from the OS beyond just being a local keyboard? As an iOS user this is very bizarre and foreign to me.

I feel like every time the topic of Android keyboards (again, why is this a thing?) comes up it's some kind of big spyware thing. Seems like most every app on Android and iOS is spyware anyway, of course.

[–] [email protected] 1 points 1 year ago

There are some legitimate reasons to have a separate keyboard. I use Keepass2Android's keyboard to enter passwords from Keepass. This way, there's direct access to the password database instead of copying passwords/usernames/other fields to the system clipboard.

[–] [email protected] 1 points 1 year ago

As if other keyboard apps are any different, I don't think Microsoft bought SwiftKey just for fun?!

[–] [email protected] 1 points 1 year ago

Same with Microsoft keyboard and almost every other keyboard app.

[–] [email protected] 1 points 1 year ago

And gboard or SwiftKey don't?

[–] [email protected] 1 points 1 year ago

"Notice the lack of surprise."

[–] [email protected] 1 points 1 year ago (1 children)

Tencent began investing on Reddit several years back.

[–] [email protected] 0 points 1 year ago (1 children)

Tencent owns sizeable pieces (and outright owns) of more companies than you can imagine.

[–] [email protected] 0 points 1 year ago (1 children)

They invest in basically any tech company that is open to investment and willing to accept Chinese investors. To the ccp the data of the west is worth any price.

[–] [email protected] 0 points 1 year ago* (last edited 1 year ago) (1 children)

Didn't swiftpad or whatever its called send every key pressed to Microsoft?

Not a China shill. China is horrible. Microsoft less so as they don't commit genocide in slow motion. But still, I think this sort of thing is more common than we think.

Use FOSS.

[–] [email protected] 0 points 1 year ago (1 children)

What are the best FOSS options for Android keyboard apps? I've been struggling with this lately.

[–] [email protected] 0 points 1 year ago (1 children)

I use OpenBoard (it's available on fDroid. Maybe the play store too).

I don't know if it's the best but I like it. If you type in multiple languages you do need to hit a "language switcher" key on the keyboard to switch to the autocorrect for that language. A very minor complaint. Otherwise it's great.

And it will learn swear words. No more ducking ducks.

[–] [email protected] 0 points 1 year ago (1 children)

Just gonna plug FlorisBoard here. A bit barebones for now but at least it respects your privacy.

[–] [email protected] 0 points 1 year ago (1 children)
[–] [email protected] 0 points 1 year ago (1 children)

Apparently they've been caught up in working on predictions for a good while which has been harder than they expected, so that's slowed development and releases considerably. So not abandoned by the devs for what its worth.

[–] [email protected] 1 points 1 year ago

Perhaps. The last update is from June 2022 and the last contribution is 3 months old

[–] [email protected] 0 points 1 year ago (2 children)
[–] [email protected] 1 points 1 year ago (1 children)

This is one of my favorite things about kbin over Reddit. So neat to see gifs in chat.

[–] [email protected] 0 points 1 year ago (1 children)

You could have gifs on Reddit too

[–] [email protected] 1 points 1 year ago

Through New Reddit, which was objectively awful.

[–] [email protected] -1 points 1 year ago

Never use a closed source keyboard app. It can read what you send for messages, websites you go to, search engine queries.