Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

  • godless@lemmy.world
    link
    fedilink
    English
    arrow-up
    359
    arrow-down
    7
    ·
    1 year ago

    I live in China and this software is cancerous not just in the encryption failure, it also nestles into a computer like a trojan. Creates 2 fallback installations and will reinstall itself after removal if you reboot in between, unless you get rid of all 3 installations at once, where they are deliberately trying to obfuscate the uninstall button (triple confirmation, swapping the confirm/cancel buttons and button background colors, etc.).

    It’s a nasty piece of crap that come preloaded on any phone (android, at least) and Windows-PC here.

    • Anamana@feddit.de
      link
      fedilink
      English
      arrow-up
      32
      arrow-down
      3
      ·
      1 year ago

      Do people generally try to circumvent it? Are they too scared to uninstall it? Or do they just not care?

        • Anamana@feddit.de
          link
          fedilink
          English
          arrow-up
          26
          arrow-down
          3
          ·
          edit-2
          1 year ago

          Why? Useful for safety and security of the society?

          Edit: Why downvotes? I’m trying to put myself in their shoes, it’s not how I view it lol

          • godless@lemmy.world
            link
            fedilink
            English
            arrow-up
            10
            ·
            1 year ago

            Comes with a built in translator and spell checker, and since access to Google translate is blocked, that’s often the only alternative.

              • godless@lemmy.world
                link
                fedilink
                English
                arrow-up
                3
                ·
                1 year ago

                Nah. They don’t know Google translate. Or Google, for that matter. They know what they are supposed to know.

                Of course some people know better, and those are the ones who will eventually get around the block - finding and installing a VPN is not rocket science, not even here. But if you keep 98% of the population contained, the rest won’t reach critical mass.

          • Rai@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            10
            arrow-down
            1
            ·
            1 year ago

            Some weird downvotes, and I want to know too. Why does a keyboard app mean anything to anyone? The keyboards included on iOS and latest Android versions are great.

            • thekinghaslost@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              Don’t know about this keyboard or Chinese, but a language specific feature might be one of the reason.

              I use SwiftKey and I love how it supports multilingual autocorrect and prediction for Indonesian and English without needing to switch between keyboard language.

              iOS built in keyboard supports multilingual typing for some languages, but not Indonesian.

              I assume people love it also because some specific feature that doesn’t exist in the stock keyboard.

              • Rai@lemmy.dbzer0.com
                link
                fedilink
                English
                arrow-up
                8
                ·
                1 year ago

                Yeah, wtf is that equivalency?

                “Why do people smoke”

                “Well some people like to eat at restaurants or watch movies with their friends so”

              • coffeebiscuit@lemmy.world
                link
                fedilink
                English
                arrow-up
                5
                ·
                1 year ago

                It was a “what about” analogy. It compares a app that steals data without the users consent and the other one is the keyboard app. Both seem to be wanted by consumers despite the steeling parts.

                • Anamana@feddit.de
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  1 year ago

                  Yeah but a social media platform has completely different qualities. Therefore the reasons for people how and why they use them will be completely different. Also the keyboard app is forced on the phones by the state while the use of social media platforms is optional. Just too many different factors at play here imo.

      • boooooboo@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 year ago

        My guess is that it might either be more accurate in predictions or some additional convenience factors that makes typing this logographic language much easier and faster lol.

        Or people are also simply used to it since it’s everywhere.

      • godless@lemmy.world
        link
        fedilink
        English
        arrow-up
        17
        ·
        1 year ago

        Sure. Foreigners aren’t really sanctioned though, that’s more of a risk for the locals. But even then usually only if they want to get someone disappeared and don’t have anything substantial against them.

  • SnowdenHeroOfOurTime@unilem.org
    link
    fedilink
    English
    arrow-up
    326
    arrow-down
    66
    ·
    1 year ago

    Alright China shills, you can stop changing the subject to how Google and the US are the “same”.

    The troops advanced into central parts of Beijing on the city’s major thoroughfares in the early morning hours of 4 June and engaged in bloody clashes with demonstrators attempting to block them, in which many people – demonstrators, bystanders, and soldiers – were killed. Estimates of the death toll vary from several hundred to several thousand, with thousands more wounded.[15][16][17][18][19][20]

    https://en.m.wikipedia.org/wiki/1989_Tiananmen_Square_protests_and_massacre

    If you lived in China you’d likely not know about this, since people who talk about it go to prison.

    Yeah the US is exactly like this so let’s not talk about the Chinese government being awful to their citizens /s

    • dingleberry@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      129
      arrow-down
      31
      ·
      1 year ago

      Simple solution is to block lemmygrad and hexbear in your app. That cuts down quite a few tankies and mainlaind Taiwan shills.

      • Notorious_handholder@lemmy.world
        link
        fedilink
        English
        arrow-up
        70
        arrow-down
        25
        ·
        1 year ago

        Imagine being in Taiwan and having full access to information about China and the west and still shilling for China. Those types of people should be looking for a dominatrix, not a political philosophy…

        • evilgiraffe666@ttrpg.network
          link
          fedilink
          English
          arrow-up
          63
          arrow-down
          11
          ·
          1 year ago

          I think they might be using “mainland Taiwan” as a way of saying China - Taiwan is an island which China thinks is “theirs” for some reason.

            • AngryCommieKender@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              1
              ·
              edit-2
              1 year ago

              The politicians have to play nice and be polite. Right up until they don’t have to anymore.

              The people can recognize that Taiwan is what happened to the last freely elected government of Western Taiwan, and that the CCCP are nothing more than despots and authoritarian tyrants that freely abuse their own people, and would absolutely be bullying the world, if they were actually as powerful as they claim to be.

              The CCCP ≠ China or the Chinese people.

              The CCCP = Western Taiwan

          • SlopppyEngineer@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            2
            ·
            1 year ago

            “Yes, but history…” they will say.

            And in history China used to be the opium export market of the Brits so by historic rules it has to be that again. I guess they’ll say “but that’s different”.

          • miserablegit@lemmynsfw.com
            link
            fedilink
            English
            arrow-up
            11
            arrow-down
            14
            ·
            1 year ago

            Tbf, it was theirs - until it wasn’t. At this point, it is a bit like the British were insisting that the US was theirs.

            • ylph@lemmy.world
              link
              fedilink
              English
              arrow-up
              29
              arrow-down
              1
              ·
              edit-2
              1 year ago

              The history of Taiwan is quite a bit more complex than that, but the PRC (current government in mainland China) has never controlled Taiwan - it was never theirs.

              Taiwan was a Japanese colony from 1894 until 1945 when Japan was forced to hand it over to the ROC (the successor government to the Qing dynasty, which was the last time you could argue China controlled the island - the Qing managed to almost fully colonize it before losing it to the Japanese, although a lot of the mountainous parts of Taiwan were still mostly autonomous at that time and inhabited by aboriginal Taiwanese who continued to resist the Qing rule)

              The ROC takeover of the island is also seen as another colonization by many Taiwanese as well - the descendants of the Qing era colonists who were mostly Hokkien speakers from Fujian, while the ROC migration in 1949 was mostly Mandarin speakers from wider China, who fairly brutally imposed their rule over the island (see 4 decades of martial law, etc.)

              ROC managed to reform itself over time, and Taiwan is now a vibrant democratic country which is forging its new national identity where most people would prefer to be left alone to control their own affairs.

              • miserablegit@lemmynsfw.com
                link
                fedilink
                English
                arrow-up
                14
                arrow-down
                5
                ·
                1 year ago

                “Taiwan” was never the administrative centre of China, come on. Some of the Chinese ruling classes fled there after the revolution. It’s like saying the capital of Germany was always Bonn.

        • AfricanExpansionist@lemmy.ml
          link
          fedilink
          English
          arrow-up
          5
          arrow-down
          1
          ·
          1 year ago

          There’s a bunch of Taiwanese people who would welcome Chinese rule. I don’t know why… The CPC sucks my balls

        • RoundSparrow @ .ee@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          Imagine being in Taiwan and having full access to information about China and the west and still shilling for China. Those types of people should be looking for a dominatrix, not a political philosophy…

          That’s kind of the history of humanity regarding religion. To some degree when the religious prophets were alive it make sense, but hundreds of years later it’s a story book (or oral tradition) and people still strive for the authority.

          We haven’t really had that many teachers like Carl Sagan who describe the history and our favoring of authority - inability to question them. It’s pretty weird, as they often aren’t attractive or good speakers, but you see people just accept almost anything they say. I mean in the USA I witnessed so many people who would trust Rush Limbaugh and Alex Jones kind of blindly, and there is some mechanism at play that humanity in total seems to keep engaging.

      • Hype@lemm.ee
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        3
        ·
        1 year ago

        Been using lemmy for a few days and I am already feeling the need to do just that.

        • CrypticCoffee@lemmy.ml
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          How so? I’ve been using since the API blackout and not seen any content from either instance.

      • PersnickityPenguin@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        2
        ·
        1 year ago

        mainland Taiwan

        You must mean West Taiwan. Sadly they refuse to acknowledge the authority of Taiwans government.

    • Alien Nathan Edward@lemm.ee
      link
      fedilink
      English
      arrow-up
      27
      arrow-down
      11
      ·
      1 year ago

      No one is saying Google massacred protestors, but if you’re gonna be against keyboard apps spying on you it should be irrelevant who they’re spying for. Criticizing shitty things American companies do doesn’t make you a China shill and calling everyone who does it a China shill is intellectually dishonest.

    • gmtom@lemmy.world
      link
      fedilink
      English
      arrow-up
      61
      arrow-down
      54
      ·
      edit-2
      1 year ago

      I mean, ill always say that China is worse than the US. But you can find plenty of examples of the US doing awful things to its people too.

      Like the MOVE bombing https://en.wikipedia.org/wiki/1985_MOVE_bombing

      or The Tusla Massacre that involved law enforcement bombing black neighbourhoods https://en.wikipedia.org/wiki/Tulsa_race_massacre

      Or any of the countless of times cops perpetrated mass violence against black people during the civil war era and cracked down harshly on protests.

      Or when the did the same to anti-war protestors during the vietnam war.

      Or the numerous times they experimented on their own citezens such as MK ultra, The Tuskegee Syphilis Experiment, or any of the dozens upon dozens of radiation experimentation, like when almost 1000 pregnant mothers were injected with radioactive iron, causing many miscarriages and cancers(and thats not the only time they injected pregnant mothers with radioctive material to see if it fucked up the baby), or when inserting radium rods up the nostrils of school children and then observing how their health declined, or when they dosed hundreds of inuit with radioactive iodine to see its affects on the thyroid.

      Like I dont think this makes China’s atrocities any more excusable, but the reverse is true to. The US really isnt much better than China.

      • Stahlreck@feddit.ch
        link
        fedilink
        English
        arrow-up
        38
        arrow-down
        13
        ·
        1 year ago

        The US really isnt much better than China.

        The world ain’t just good or bad and there’s various degrees of “bad”. The fact that many US people can even talk about this stuff makes them already just ever so slightly better for many outsiders. This is how it is, neither country is “good” but they align more with western ideals than an authoritarian state which for many of us is bad by default…which it is of course. :)

      • bloodfart@lemmy.ml
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        1 year ago

        Don’t forget operation sea spray! Next time you laugh at someone talking about chemtrails remember the us government actually did chemtrails!

      • TheHighRoad@lemmy.world
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        11
        ·
        edit-2
        1 year ago

        As bad as those two linked incidents were, they weren’t exactly government sanctioned. Police sanctioned, sure, and the government should do more to reign that shit in, but comparing them to Tiennamen is disingenuous at best.

        The Chinese government hates letting its citizens have a voice.

        • June@lemm.ee
          link
          fedilink
          English
          arrow-up
          41
          arrow-down
          7
          ·
          1 year ago

          I tend to lean into accepting that ‘the US government has done some pretty horrific shit too’ camp, but I don’t do it as a way to shill for China, because fuck that authoritarian place. But it is dumb not to recognize massacres like Kent State, Tulsa, or the systematic genocides of First Nations peoples.

          Tiananmen Square really isn’t the best example to use as an example of how China isn’t like the US. There’s plenty of much more insidious dystopian shit happening in China every day to use than that.

          • SnowdenHeroOfOurTime@unilem.org
            link
            fedilink
            English
            arrow-up
            13
            arrow-down
            13
            ·
            1 year ago

            this article isn’t about the US. I believe there is a reason so many in so many threads like that do what you’re doing and worse. THE TOPIC IS NOT THE US, STOP TRYING TO MAKE IT THAT WAY

            • archomrade [he/him]@midwest.social
              link
              fedilink
              English
              arrow-up
              18
              arrow-down
              3
              ·
              1 year ago

              Jesus Christ, this thread is cursed.

              Circling back to the article: it would be easier to name software that doesn’t collect your data and send/sell it to your respective government. The point being made in this thread is that it isn’t just a China problem. If you think you’re safe from government observation just because you don’t live in China, I have bad news for you.

              • SnowdenHeroOfOurTime@unilem.org
                link
                fedilink
                English
                arrow-up
                3
                arrow-down
                10
                ·
                1 year ago

                If you think you’re safe from government observation just because you don’t live in China

                I think you know without doubt that this is something NO ONE ever ever ever said. You know this. And yet still – you want to make this about the united states. Maybe you can explain a way that this got brought up without China shills infecting the thread?

                Because the article is not about the US. It’s not.

                • archomrade [he/him]@midwest.social
                  link
                  fedilink
                  English
                  arrow-up
                  11
                  arrow-down
                  2
                  ·
                  1 year ago

                  I didn’t mention the US.

                  The article makes it sound like it’s UNUSUAL that a phone app is spying on its users and sending user data to the government. It’s not an exception, it’s the rule. People pointing this out are doing you a favor, because the article’s framing would otherwise lead you to believe this is a China problem and not a tech problem.

            • hark@lemmy.world
              link
              fedilink
              English
              arrow-up
              18
              arrow-down
              4
              ·
              1 year ago

              I think it’s a response to how there are so many CHINA BAD articles. You could take each article as isolated, but there is the idea of manufacturing consent and it’s how people develop negative feelings towards particular things after seeing so many negative articles about them.

              • HikingVet@lemmy.sdf.org
                link
                fedilink
                English
                arrow-up
                3
                arrow-down
                5
                ·
                1 year ago

                Well, you can post all the bad shit the US has done.

                China IS A BAD ACTOR on the international, national, regional, and Municipal levels. The whole state apparatus is corrupted.

                • hark@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  arrow-down
                  5
                  ·
                  1 year ago

                  It’s a lot more quick for me to point out that it’s not unique to China. The way you phrase the second part of your post is as if China is unique in this sort of corruption. The US is just as corrupt, plus it has a lot more influence around the world thanks to the sheer amount of resources it controls.

            • June@lemm.ee
              link
              fedilink
              English
              arrow-up
              13
              arrow-down
              8
              ·
              1 year ago

              I’m not trying to change the subject from China to the US, I’m trying to point out that the example of Tiananmen Square is not the best example to use as a distinguishing factor for China vs the US when there are numerous examples of the US commuting similar atrocities throughout its history.

              The current and active oppression and genicide of the Uyghurs.

              The brutal silencing of political and ideological ‘dissidents’.

              The openly dystopian social credit system being developed.

              The suppression of free speech and self-expression.

              There is a long list of examples to pull from that set China apart from the US.

        • gmtom@lemmy.world
          link
          fedilink
          English
          arrow-up
          10
          arrow-down
          12
          ·
          1 year ago

          Do you even know what the word shill means?

          Like wtf do you think I’m trying to sell?

            • gmtom@lemmy.world
              link
              fedilink
              English
              arrow-up
              10
              arrow-down
              7
              ·
              1 year ago

              Thats not really a thing you sell and I literally start my comment with

              I mean, ill always say that China is worse than the US

              So it seems you really just cant cope with the fact that the US is a bad guy as well.

              • SnowdenHeroOfOurTime@unilem.org
                link
                fedilink
                English
                arrow-up
                4
                arrow-down
                8
                ·
                1 year ago

                ideas are sold every day. maybe there is a reason you want to focus on the US instead? hmm weird no that can’t be true at all.

      • gnuhaut@lemmy.ml
        link
        fedilink
        English
        arrow-up
        17
        arrow-down
        28
        ·
        1 year ago

        Imagine thinking China is worse than the US when the US killed something like a million Iraqis, and that’s just one of the many war the US was waging in the last 30 years while China checks notes attacked nobody in that timeframe.

    • PersnickityPenguin@lemm.ee
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      2
      ·
      1 year ago

      Sir this is a Wendy’s

      Or more specifically, a thread about a phone keyboard.

      But it is true that Google and Microsoft phone home with your key strokes. That’s how they develop their predictive typing and autocorrect.

    • purahna@lemmygrad.ml
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      11
      ·
      1 year ago

      If you can’t see the fundamental intertwining of Google (or any other fortune 500 company) and the US State, then you should really start looking harder. Lobbyists, revolving door membership, corruption, tax writeoffs, corporate power being used to influence day-to-day life, really, US companies’ control over the US state is pretty similar to the Chinese State’s control over Chinese Companies. I just don’t think corporations should be in charge like y’all seem to.

    • XIIIesq@lemmy.world
      link
      fedilink
      English
      arrow-up
      22
      arrow-down
      31
      ·
      edit-2
      1 year ago

      That’s false equivalence.

      China killing protesters and silencing dissidents does not make it OK for Google or anyone else to spy on you.

    • Shaggy0291@lemmygrad.ml
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      25
      ·
      1 year ago

      The troops advanced into central parts of Beijing on the city’s major thoroughfares in the early morning hours of 4 June and engaged in bloody clashes with demonstrators attempting to block them, in which many people – demonstrators, bystanders, and soldiers – were killed.

      Here’s a video of an interview with Chai Ling recorded on May 28, 1989 with reporter Philip Cunningham. Chai Ling was arguably the most influential leader of the student protesters at Tiananmen Square. In the interview she openly wishes for the soldiers to massacre the students after her instrumental role in blocking attempts by other activists to move the protest back to campuses, all while refusing to sacrifice herself.

      Notable quotes from this interview include:-

      “You, the Chinese are not worth my struggle. You are not worth my sacrifice”

      “The students keep asking what shall we do next? What can we accomplish? I feel so sad, because how can I tell them what we’re actually hoping for is bloodshed - for the moment when the government has no choice but to brazenly butcher the people?”

      “Only when the square is awash with blood will the people of China open their eyes. Only then will they really be united”

      “If we allow the [protesters] movement to collapse on its own, then the government will be able to wipe out all the leaders of the movement”

      Upon being asked if she will stay in the square herself after urging the students to stay she simply responded, “No, I won’t”.

      When the Tiananmen Square incident erupted in violence on June 3rd, Chai Ling escaped from Beijing by train. She was eventually smuggled to Hong Kong via Operation Yellowbird, an MI6/CIA led initiative to extract dissidents who they hoped would form the nucleus of a “Chinese democracy movement in exile”. To my knowledge, no details exist about how and when she made contact with them. She was subsequently invited to study at Princeton on a full scholarship due to her pivotal role in the Tiananmen protests. She studied Politics and International Relations there, eventually picking up an MBA from Harvard. Today, she runs an internet company called Jenzabar that she founded with her husband, the lawyer Robert Maginn, a long time associate of the Republican party, having even served as the chairman of the Massachusetts Republican party between 2011 and 2013. Their company serves more than 1300 higher education institutions worldwide, whom they provide with ERP software.

  • nomadjoanne@lemmy.world
    link
    fedilink
    English
    arrow-up
    170
    arrow-down
    19
    ·
    edit-2
    1 year ago

    Didn’t swiftpad or whatever its called send every key pressed to Microsoft?

    Not a China shill. China is horrible. Microsoft less so as they don’t commit genocide in slow motion. But still, I think this sort of thing is more common than we think.

    Use FOSS.

  • Goodie@lemmy.world
    link
    fedilink
    English
    arrow-up
    110
    arrow-down
    1
    ·
    1 year ago

    It’s stories like this that don’t surprise me as much as make me ask: How the fuck do you store and process this much data to get anything useful out of it.

    • toofpic@lemmy.world
      link
      fedilink
      English
      arrow-up
      64
      ·
      1 year ago

      You just save the first 50 digits typed after some email is typed, and you have all the passwords you need!

      • Goodie@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        2
        ·
        1 year ago

        This only applies if a username is a email

        And if it is then what happens when people actually email someone? Autocorrect during login?

        • ultimate_question@lemmy.world
          link
          fedilink
          English
          arrow-up
          11
          ·
          edit-2
          1 year ago

          I don’t think they’re saying that method would yield 100% clean data but it would give you all the “necessary” data with the absolute bare minimum storage requirement. At some point people will log into their email and for most people if you have their email password you have the password they use for everything

        • WarmSoda@lemm.ee
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago

          They weren’t describing a use case for every single type of situation.

    • WarmSoda@lemm.ee
      link
      fedilink
      English
      arrow-up
      44
      arrow-down
      2
      ·
      1 year ago

      I could be wrong, and this is a generalization of any country you can name, but my impression is data is stored on everyone so when they decide someday to look you up they already have all the data collected. It’s not really processed until needed.

      • TheEntity@kbin.social
        link
        fedilink
        arrow-up
        7
        ·
        1 year ago

        Did you ever see how an average person types? It’s not the amount of data that is the problem. We have too much dumb data!

      • Steeve@lemmy.ca
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        The real answer is compute power. At the moment it’s very expensive to run the computations necessary for big LLMs, I’ve heard some companies are even developing specialized chips to run them more efficiently. On the other hand, you probably don’t want your phone’s keyboard app burning out the tiny CPU in it and draining your battery. It’s not worth throwing anything other than a simple model at the problem.

  • thorbot@lemmy.world
    link
    fedilink
    English
    arrow-up
    82
    arrow-down
    7
    ·
    1 year ago

    Oh wow, who would have ever thought they’d do that? What a fucking surprise.

  • punseye@lemmy.world
    link
    fedilink
    English
    arrow-up
    75
    arrow-down
    8
    ·
    1 year ago

    As if other keyboard apps are any different, I don’t think Microsoft bought SwiftKey just for fun?!

  • kicksystem@lemmy.world
    link
    fedilink
    English
    arrow-up
    59
    arrow-down
    2
    ·
    1 year ago

    I don’t get it? Why are they talking in the article about not using the right type of encryption. The problem isn’t the encryption, but the fact that it is sending your keystrokes to the mothership, right?

  • Diabolo96@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    138
    arrow-down
    99
    ·
    edit-2
    1 year ago

    The people here acting like their Gboard doesn’t do the same is so funny.

    Edit : never used nor installed tiktok.

    • Paige (she/her)@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      120
      arrow-down
      8
      ·
      1 year ago

      It probably doesn’t though. Obviously it’s closed source making it harder to tell what’s actually happening, but there’s nothing stopping security analysts from looking at network usage and such. I would imagine that Google doesn’t install a keylogger on every Android phone, not out of the goodness of their hearts, but because they don’t want the bad publicity and lawsuits when it would inevitably be discovered.

      • voxel@sopuli.xyz
        link
        fedilink
        English
        arrow-up
        44
        arrow-down
        2
        ·
        edit-2
        1 year ago

        they do collect usage stats by default though.
        which include typed sentences passed through their ai model and words usage counts.
        it can all be turned off and gboard seems to respect these options. it doesn’t access online services unless requested with these options off.

        • Avid Amoeba@lemmy.ca
          link
          fedilink
          English
          arrow-up
          8
          ·
          edit-2
          1 year ago

          If you mean by “collect usage stats” train their AI model on-device and send the training result to Google, then yes. If you mean that the actual words get sent to Google’s servers, then no. There was a study shared recently that looked into this. Only metadata about what’s typed is sent. That’s not nothing of course, but it’s not what Tencent does at all.

          E: Found it.

      • knock@lemmy.world
        link
        fedilink
        English
        arrow-up
        17
        arrow-down
        4
        ·
        1 year ago

        I mean he’s not wrong, but also not really the same thing. Gboard does send a substantial amount of data about the things you typed to google. It is supposedly anonymous, but they do this to get anylitics, and they use this data to improve the suggestions given to you.

        There has been at least one article where someone intercepted the data leaving from Gboard and found it’s either unencrypted or just hashed into something like base64. This was a while back so things hopefully changed.

        While google does try not to phone home users passwords, how can you tell what is and isent private?

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        30
        ·
        1 year ago

        Even if i had it, do you honestly think i would waste my life to be completely forgotten and left to rot for disclosing it like Snowden. Yep, no one will ever reveal anything after that shit show.

    • SnowdenHeroOfOurTime@unilem.org
      link
      fedilink
      English
      arrow-up
      50
      arrow-down
      19
      ·
      1 year ago

      I’m going to guess you’re one of the people who defends tiktok and compares it to every other social media app by saying the US government is basically the same as the Chinese government

      • PopOfAfrica@lemmy.one
        link
        fedilink
        English
        arrow-up
        12
        arrow-down
        8
        ·
        1 year ago

        I don’t think this post is a defence of China, its a damning of the invasive governments, which the US also has.

        It’s a warning that we are one step away from China, and should do something about it.

        • prole@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          1
          ·
          1 year ago

          No it’s not a “warning,” it’s just boring old whataboutism.

          The first part of your comment is like a textbook example of the fallacy.

          • assassin_aragorn@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            ·
            1 year ago

            It seems to be a very common fallacy in geopolitics to believe that a rival of the US must automatically be morally better. You see plenty of “left wing” imperialism defenses that blame Ukraine for the invasion and insist they should give up and do whatever Russia wants them to do.

            It’s apparently disappointingly complex for some people to believe that X can oppose Y and both of them can be horrible bastards. They can’t take criticism of China or Russia because they automatically see an implicit “America better” that’s not really there.

              • assassin_aragorn@lemmy.world
                link
                fedilink
                English
                arrow-up
                4
                ·
                1 year ago

                Absolutely, yeah. I’d like to think I’m able to give a more objective take since I got into TikTok late, but I honestly don’t know that I do.

        • Diabolo96@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          4
          ·
          edit-2
          1 year ago

          It seems people can’t understand this. Am not American so i have an outside view that’s free from any patriotic feeling and the spoon fed propaganda since childhood.

      • linearchaos@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        2
        ·
        1 year ago

        Not op, I know for sure that China’s been trying to grab as much intelligence as possible going as far as installing sniffing type software in network controllers and servers, and grabbing keystrokes from a keyboard is absolutely despicable and something they would do to grab more intelligence.

        The thing I have trouble figuring out is why in the hell people would care about TikTok. What signal intelligence is coming from my wife swiping through 14,000 cat and home organization videos.

        Location is turned off The app is sandboxed It’s not allowed to access the camera or the speaker without giving some minor notification that they’re on and people would notice.

        I totally get the China will do bad if they can but I fail to see the ultimate danger of TikTok.

        • Dark Arc@social.packetloss.gg
          link
          fedilink
          English
          arrow-up
          7
          ·
          edit-2
          1 year ago

          From “the olden times” (Reddit link):

          The type and scale of the data that TikTok collects is different than other Chinese apps.

          There will be replies that talk about advanced ML and predictive algorithms. There will be replies that talk about potential hacks the app can use to bypass iOS or Android policy. That’s a threat, sure, but we don’t even need to go there. We can just focus on the basic data that companies like Google, Meta and TikTok explicitly tell us that they collect in their privacy policy.

          Every time you open TikTok, you should assume that the Chinese government knows exactly where you are at that moment, because the app gives them access to your location through GPS. If you use the app frequently, they not only have time and location data, but they know your travel patterns too!

          They know who you interact with and who those people interact with. They know what kinds of content you like and what you dislike. They can use this information to intentionally feed you with disinformation in ways that make you more likely to believe it.

          The misinformation feed attack risk is not unique to TikTok. Others have already been misused in this exact way. The important difference is that when information is housed by companies like Meta and Google which are incorporated in the US, its use and storage is subject to US regulation. We can simply disallow use and storage of data and practices that we don’t approve of.

          If you’ve done something illegal or embarrassing on TikTok, it could be used to compromise you for a foreign nation’s interest. If you are a 20 year old wild child, they won’t have any interest in doing anything with that information right now. In a few decades, if TikTok continues its dominance in social media, China will have compromising information on an uncomfortably high number of powerful leaders and politicians. You don’t even have to do something obvliviously stupid like say something racist or admit to a crime in a DM. For example, with just location data they can know if a politician cheated on their spouse and with whom! Imagine a politician publicly saying that they did not meet with some business leader or politician about some scandalous thing. Well, in a world where everyone has TikTok, the Chinese government knows if that’s a lie or not. In theory Verizon/Meta/Apple wouldn’t know that since that data is purported to be anonymized. Even if they did have that information, it’s hard to imagine any US tech company using it for their own interest. A US company would likely not survive that kind of act - it would be corporate suicide. On the other hand, it is hard to imagine a foreign adversary NOT engaging in that type of blackmail when given the opportunity.

          Now consider companies like Tencent. How can information on League of Legends play sessions can be used to blackmail a politician, manipulate an election or foment widespread social unrest? It might be possible, but it’s not easy to think of how it could be done. With TikTok, it’s blindingly obvious how all of those things could happen.

          Most other Chinese apps don’t collect anywhere near as much personal and sensitive information. The ones that do collect the same level of sensitive data, like Tencent’s QQ, aren’t used by enough people where it would be realistic to speculate that this information can be used in a similarly widespread and extremely damaging way. Even then, the US government should seriously think through the damage that could be done with the information QQ collects by assuming the Chinese government has complete access to all collected data and hostile intent. With TikTok, you don’t need to spend more than a few seconds thinking about this to frighten yourself.

        • SnowdenHeroOfOurTime@unilem.org
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          3
          ·
          1 year ago

          I don’t know what you mean by sandboxed but I’m pretty sure it cannot be as private as it seems, even if you’re using a VPN. But regardless, 99.99% of tiktok users are not taking steps to protect their data. hundreds of billions of data points that help an authoritarian government know how people think is nothing to shrug at.

          • linearchaos@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            1 year ago

            Mobile apps aren’t in the wild west anymore. They don’t get access to the other apps and can’t wander around unlimited on your device without clear permission. If you say no location, they don’t get location. It used to be different, but apple and google are on the same page now and they don’t let apps abuse you without clear permission anymore.

            Even pulling your IP and giving them a vague city level location, They’re correlating that with liking 30 second random content videos and music. This isn’t even the level of intelligence you 'd get from FB or Youtube people aren’t searching tictok to see how to use software or edit code or how public infrastructure works. You’re getting organziation, cat videos, kids coming home from the dentist saying crazy things. I just don’t really see it as a big deal.

            • SnowdenHeroOfOurTime@unilem.org
              link
              fedilink
              English
              arrow-up
              2
              arrow-down
              2
              ·
              1 year ago

              you say all this and trillions of dollars still ride on their ability, which we very much knows exists, to stitch together billions of datapoints to know things about their users.

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        31
        ·
        1 year ago

        I will now answer any questions that boils down to “but we’re the good guys” to “not American”

        • SnowdenHeroOfOurTime@unilem.org
          link
          fedilink
          English
          arrow-up
          28
          arrow-down
          9
          ·
          1 year ago

          What the fuck are you talking about? This has nothing to do with America, the problem here is you’re falsely equating a horrifyingly authoritarian government and basically writing it off as the “sAmE aS gOoGlE”

          • Diabolo96@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            24
            ·
            edit-2
            1 year ago

            I don’t know. What i read on Wikileaks made me believe they’re not that different you know. Go read it, it will open your mind.

            • SnowdenHeroOfOurTime@unilem.org
              link
              fedilink
              English
              arrow-up
              24
              arrow-down
              8
              ·
              1 year ago

              How many times has the US military ever murdered 900+ protestors in broad daylight then censored it from all media and imprisoned anyone who talks about it decades later?

              Educate yourself. Jesus fucking Christ.

              For the record I don’t need to read more about the US government corruption, that’s known. The fact that you’re comparing the two is disturbing af

              • Landrin201@lemmy.ml
                link
                fedilink
                English
                arrow-up
                7
                arrow-down
                4
                ·
                1 year ago

                Several in fact. Most famously they bombed Tulsa oklahoma when black people there got too wealthy. But now multiple states are banning the teaching of it, alongside banning the teaching of our genocide of the Native Americans.

                We do most of our murder of innocent people these days abroad though which isn’t really much better, but most Americans are apparently completely fine with children being murdered so long as they aren’t white and they aren’t here, or they aren’t in an American school being shot by one of their peers.

              • Diabolo96@lemmy.dbzer0.com
                link
                fedilink
                English
                arrow-up
                10
                arrow-down
                8
                ·
                1 year ago

                Starting with the native American or i don’t count it ? I don’t know ? Is shooting a bus full of kids and laughing about it saying they’ll grow up to be terrorist anyway isn’t that far off and this is the tip of the iceberg buddy. USA is good at hiding murdering brown people by prefixing the word terrorists.

              • echo64@lemmy.world
                link
                fedilink
                English
                arrow-up
                5
                arrow-down
                4
                ·
                1 year ago

                if you wanted to make this a whataboutism is bad argument i’d be with you, but you’re still toeing the line of “oh but it’s okay when america does bad stuff, it’s not the same”

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        6
        ·
        edit-2
        1 year ago

        Did you read it ? Can you share the part with relevant info. I tried to read it but it kept going abouts how Gboard and the Microsoft keyboard both gather huge amount of data and yet that both are opaque and you can’t know what data is sent to the server backend.

        Also, ever heard of 5,9 and 14 eyes ?

        • Avid Amoeba@lemmy.ca
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 year ago

          Google doesn’t sell to data brokers. Not yet at least. They have a competitive advantage they will lose if they sold their data (our data) to third parties, especially third party resellers. If/when they begin circling the drain, that may change.

      • ShovelLiz@lemmy.zip
        link
        fedilink
        English
        arrow-up
        30
        arrow-down
        7
        ·
        1 year ago

        I mean… Does It change anything? They are owned by a board of directors that want profits over anything else

      • Diabolo96@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        19
        arrow-down
        3
        ·
        1 year ago

        Man, Snowden wasted his entire life to tell you USA literally spy on everything you do and when caught their answer was : yeah, so what you gonna do about it, maybe you should do the same.

      • echo64@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        5
        ·
        edit-2
        1 year ago

        no they are just compelled by the state and secret courts which is totally different obviously

      • Hazdaz@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        arrow-down
        17
        ·
        1 year ago

        I love how people overlook this part. You get all the knuckledraggers who want to claim the US is somehow just as bad as China is.
        The anti-American sentiment in here is obnoxious.

        • SnowdenHeroOfOurTime@unilem.org
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          13
          ·
          1 year ago

          I’ve never thought that the knuckledraggers were anti-american. I think they are anti-intellectual. Using tiktok is more important to them than the future of humanity.

          • Hazdaz@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            3
            ·
            edit-2
            1 year ago

            Some of the knuckledraggers are. I guess I should have added that a lot of the edgel0rds like to rustle some feathers by posting anti-American views.

  • sugarfree@lemmy.world
    link
    fedilink
    English
    arrow-up
    39
    arrow-down
    1
    ·
    1 year ago

    These findings underscore the importance for software developers in China to use well-supported encryption implementations such as TLS instead of attempting to custom design their own.

    lol.

    • PutangInaMo@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      1 year ago

      And this is the only point of the article. Idk what all these other comments are on about, but this article is outlining lack of standardized protocols that made the software vulnerable to network eavesdropping.

      This doesn’t point to a big CCP conspiracy, it’s just bad design.