In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network eavesdropper to decrypt sensitive communications sent by the app, including revealing all keystrokes being typed by the user. Following our disclosure of these vulnerabilities, Sogou released updated versions of the app that identified all of the issues we disclosed.
Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.
I’m not trying to change the subject from China to the US, I’m trying to point out that the example of Tiananmen Square is not the best example to use as a distinguishing factor for China vs the US when there are numerous examples of the US commuting similar atrocities throughout its history.
The current and active oppression and genicide of the Uyghurs.
The brutal silencing of political and ideological ‘dissidents’.
The openly dystopian social credit system being developed.
The suppression of free speech and self-expression.
There is a long list of examples to pull from that set China apart from the US.
I’m not trying to change the subject from China to the US, I’m trying to point out that the example of Tiananmen Square is not the best example to use as a distinguishing factor for China vs the US when there are numerous examples of the US commuting similar atrocities throughout its history.
The current and active oppression and genicide of the Uyghurs.
The brutal silencing of political and ideological ‘dissidents’.
The openly dystopian social credit system being developed.
The suppression of free speech and self-expression.
There is a long list of examples to pull from that set China apart from the US.
“China’s Orwellian Social Credit Score Isn’t Real”
https://foreignpolicy.com/2018/11/16/chinas-orwellian-social-credit-score-isnt-real/
“China’s Social Credit System Is Actually Quite Boring – A supposedly Orwellian system is fragmented, localized, and mostly targeted at businesses”
https://foreignpolicy.com/2021/09/15/china-social-credit-system-authoritarian/