1823

Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.

you are viewing a single comment's thread
view the rest of the comments
[-] Diabolo96@lemmy.dbzer0.com 137 points 1 year ago* (last edited 1 year ago)

The people here acting like their Gboard doesn't do the same is so funny.

Edit : never used nor installed tiktok.

[-] PaigePalisade 119 points 1 year ago

It probably doesn't though. Obviously it's closed source making it harder to tell what's actually happening, but there's nothing stopping security analysts from looking at network usage and such. I would imagine that Google doesn't install a keylogger on every Android phone, not out of the goodness of their hearts, but because they don't want the bad publicity and lawsuits when it would inevitably be discovered.

[-] vox@sopuli.xyz 46 points 1 year ago* (last edited 1 year ago)

they do collect usage stats by default though.
which include typed sentences passed through their ai model and words usage counts.
it can all be turned off and gboard seems to respect these options. it doesn't access online services unless requested with these options off.

[-] avidamoeba@lemmy.ca 7 points 1 year ago* (last edited 1 year ago)

If you mean by "collect usage stats" train their AI model on-device and send the training result to Google, then yes. If you mean that the actual words get sent to Google's servers, then no. There was a study shared recently that looked into this. Only metadata about what's typed is sent. That's not nothing of course, but it's not what Tencent does at all.

E: Found it.

[-] PaigePalisade 1 points 1 year ago* (last edited 1 year ago)

Thank you for this. This is much more reasonable of a privacy critique than falsely claiming Google is using a keylogger. I heard Grammarly was doing something similar and deleted my account. I'm changed the settings, but will continue using Gboard because I like the combined emojis.

[-] GenderNeutralBro@lemmy.sdf.org 59 points 1 year ago

If you have any evidence that it does, it would be big news. Please share.

[-] knock@lemmy.world 17 points 1 year ago

I mean he's not wrong, but also not really the same thing. Gboard does send a substantial amount of data about the things you typed to google. It is supposedly anonymous, but they do this to get anylitics, and they use this data to improve the suggestions given to you.

There has been at least one article where someone intercepted the data leaving from Gboard and found it's either unencrypted or just hashed into something like base64. This was a while back so things hopefully changed.

While google does try not to phone home users passwords, how can you tell what is and isent private?

[-] Diabolo96@lemmy.dbzer0.com 3 points 1 year ago

Even if i had it, do you honestly think i would waste my life to be completely forgotten and left to rot for disclosing it like Snowden. Yep, no one will ever reveal anything after that shit show.

[-] An_Ugly_Bastard@lemmy.world 19 points 1 year ago

The big issue is Google isn’t owned by the state.

[-] ShovelLiz@lemmy.zip 29 points 1 year ago

I mean... Does It change anything? They are owned by a board of directors that want profits over anything else

[-] ZeroHora@lemmy.ml 7 points 1 year ago

Of course it change, at least the authorities have to buy from companies with public money instead of getting for free.

[-] Diabolo96@lemmy.dbzer0.com 17 points 1 year ago

Man, Snowden wasted his entire life to tell you USA literally spy on everything you do and when caught their answer was : yeah, so what you gonna do about it, maybe you should do the same.

[-] MonkderZweite@feddit.ch 12 points 1 year ago

Instead they are about to be their own state.

Btw, companies are absolutistic by default.

[-] echo64@lemmy.world 4 points 1 year ago* (last edited 1 year ago)

no they are just compelled by the state and secret courts which is totally different obviously

[-] sndrtj@feddit.nl 3 points 1 year ago

They are the state at this point. So same thing.

[-] avidamoeba@lemmy.ca 9 points 1 year ago* (last edited 1 year ago)
[-] Diabolo96@lemmy.dbzer0.com 3 points 1 year ago* (last edited 1 year ago)

Did you read it ? Can you share the part with relevant info. I tried to read it but it kept going abouts how Gboard and the Microsoft keyboard both gather huge amount of data and yet that both are opaque and you can't know what data is sent to the server backend.

Also, ever heard of 5,9 and 14 eyes ?

[-] Squirrel@thelemmy.club 7 points 1 year ago

Oh shit, Google is sending my stuff to China?

[-] Diabolo96@lemmy.dbzer0.com 1 points 1 year ago

It depends. Ever heard of databrokers ?

[-] avidamoeba@lemmy.ca 1 points 1 year ago* (last edited 1 year ago)

Google doesn't sell to data brokers. Not yet at least. They have a competitive advantage they will lose if they sold their data (our data) to third parties, especially third party resellers. If/when they begin circling the drain, that may change.

[-] KuroiKaze@lemmy.world 1 points 1 year ago

Total false take, don't just say your suspicions like they are facts.

this post was submitted on 10 Aug 2023
1823 points (100.0% liked)

Technology

58125 readers
3466 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS