this post was submitted on 10 Aug 2023
1796 points (97.9% liked)

Technology

59157 readers
2446 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

you are viewing a single comment's thread
view the rest of the comments
[–] Diabolo96@lemmy.dbzer0.com 35 points 1 year ago* (last edited 1 year ago) (7 children)

The people here acting like their Gboard doesn't do the same is so funny.

Edit : never used nor installed tiktok.

[–] PaigePalisade@lemmy.blahaj.zone 99 points 1 year ago (1 children)

It probably doesn't though. Obviously it's closed source making it harder to tell what's actually happening, but there's nothing stopping security analysts from looking at network usage and such. I would imagine that Google doesn't install a keylogger on every Android phone, not out of the goodness of their hearts, but because they don't want the bad publicity and lawsuits when it would inevitably be discovered.

[–] vox@sopuli.xyz 36 points 1 year ago* (last edited 1 year ago) (1 children)

they do collect usage stats by default though.
which include typed sentences passed through their ai model and words usage counts.
it can all be turned off and gboard seems to respect these options. it doesn't access online services unless requested with these options off.

[–] avidamoeba@lemmy.ca 8 points 1 year ago* (last edited 1 year ago)

If you mean by "collect usage stats" train their AI model on-device and send the training result to Google, then yes. If you mean that the actual words get sent to Google's servers, then no. There was a study shared recently that looked into this. Only metadata about what's typed is sent. That's not nothing of course, but it's not what Tencent does at all.

E: Found it.

[–] GenderNeutralBro@lemmy.sdf.org 51 points 1 year ago (4 children)

If you have any evidence that it does, it would be big news. Please share.

[–] knock@lemmy.world 11 points 1 year ago (1 children)

I mean he's not wrong, but also not really the same thing. Gboard does send a substantial amount of data about the things you typed to google. It is supposedly anonymous, but they do this to get anylitics, and they use this data to improve the suggestions given to you.

There has been at least one article where someone intercepted the data leaving from Gboard and found it's either unencrypted or just hashed into something like base64. This was a while back so things hopefully changed.

While google does try not to phone home users passwords, how can you tell what is and isent private?

load more comments (3 replies)
[–] SnowdenHeroOfOurTime@unilem.org 21 points 1 year ago (29 children)

I'm going to guess you're one of the people who defends tiktok and compares it to every other social media app by saying the US government is basically the same as the Chinese government

[–] PopOfAfrica@lemmy.one 5 points 1 year ago (3 children)

I don't think this post is a defence of China, its a damning of the invasive governments, which the US also has.

It's a warning that we are one step away from China, and should do something about it.

[–] prole@sh.itjust.works 7 points 1 year ago

No it's not a "warning," it's just boring old whataboutism.

The first part of your comment is like a textbook example of the fallacy.

[–] SnowdenHeroOfOurTime@unilem.org 3 points 1 year ago (1 children)

I'm not so sure. The China apologists are in every thread like this and I don't think it's something to dismiss

[–] assassin_aragorn@lemmy.world 6 points 1 year ago (1 children)

It seems to be a very common fallacy in geopolitics to believe that a rival of the US must automatically be morally better. You see plenty of "left wing" imperialism defenses that blame Ukraine for the invasion and insist they should give up and do whatever Russia wants them to do.

It's apparently disappointingly complex for some people to believe that X can oppose Y and both of them can be horrible bastards. They can't take criticism of China or Russia because they automatically see an implicit "America better" that's not really there.

[–] SnowdenHeroOfOurTime@unilem.org 3 points 1 year ago (1 children)

yeah, that's fair. I think that it is more common to like a thing (tiktok) and defend it however you can.

[–] assassin_aragorn@lemmy.world 4 points 1 year ago

Absolutely, yeah. I'd like to think I'm able to give a more objective take since I got into TikTok late, but I honestly don't know that I do.

[–] Diabolo96@lemmy.dbzer0.com 0 points 1 year ago* (last edited 1 year ago)

It seems people can't understand this. Am not American so i have an outside view that's free from any patriotic feeling and the spoon fed propaganda since childhood.

[–] linearchaos@lemmy.world 3 points 1 year ago (4 children)

Not op, I know for sure that China's been trying to grab as much intelligence as possible going as far as installing sniffing type software in network controllers and servers, and grabbing keystrokes from a keyboard is absolutely despicable and something they would do to grab more intelligence.

The thing I have trouble figuring out is why in the hell people would care about TikTok. What signal intelligence is coming from my wife swiping through 14,000 cat and home organization videos.

Location is turned off The app is sandboxed It's not allowed to access the camera or the speaker without giving some minor notification that they're on and people would notice.

I totally get the China will do bad if they can but I fail to see the ultimate danger of TikTok.

load more comments (4 replies)
load more comments (27 replies)
[–] avidamoeba@lemmy.ca 8 points 1 year ago* (last edited 1 year ago) (1 children)
load more comments (1 replies)
[–] Squirrel@thelemmy.club 6 points 1 year ago (2 children)

Oh shit, Google is sending my stuff to China?

load more comments (2 replies)
[–] An_Ugly_Bastard@lemmy.world 1 points 1 year ago (8 children)

The big issue is Google isn’t owned by the state.

[–] ShovelLiz@lemmy.zip 21 points 1 year ago (2 children)

I mean... Does It change anything? They are owned by a board of directors that want profits over anything else

[–] SnowdenHeroOfOurTime@unilem.org 6 points 1 year ago (1 children)

Yes, not being owned by the world's most terrifying government turns out to be different than being owned by the world's most terrifying government. Funny how that works

[–] Atrabiliousaurus@reddthat.com 5 points 1 year ago (1 children)

Where are the Snowdens of yesteryear?

[–] SnowdenHeroOfOurTime@unilem.org 0 points 1 year ago (1 children)
[–] Atrabiliousaurus@reddthat.com 1 points 1 year ago

It's a quote from the book Catch-22 and just popped into my head when I saw your user name. Highly recommend the book but there's a short explanation of the phrase here if you're curious.

[–] ZeroHora@lemmy.ml 6 points 1 year ago

Of course it change, at least the authorities have to buy from companies with public money instead of getting for free.

[–] Diabolo96@lemmy.dbzer0.com 16 points 1 year ago

Man, Snowden wasted his entire life to tell you USA literally spy on everything you do and when caught their answer was : yeah, so what you gonna do about it, maybe you should do the same.

[–] MonkderZweite@feddit.ch 10 points 1 year ago

Instead they are about to be their own state.

Btw, companies are absolutistic by default.

[–] sndrtj@feddit.nl 1 points 1 year ago

They are the state at this point. So same thing.

load more comments (4 replies)
[–] KuroiKaze@lemmy.world 0 points 1 year ago

Total false take, don't just say your suspicions like they are facts.