In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network eavesdropper to decrypt sensitive communications sent by the app, including revealing all keystrokes being typed by the user. Following our disclosure of these vulnerabilities, Sogou released updated versions of the app that identified all of the issues we disclosed.
Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.
i use trime on android and the default takes quite a while to get used to. for example, the symbol key that is usually on the bottom left corner is now a language switching key and the symbol key is one tiny key beside it. custom configuration seems like a pain and i haven’t done it. one of the defaults however comes with a menu that lets you type all sorts of symbols including greek, russian, japanese, IPA and mathematical operators. haven’t sen fcitx5 for android though
edit: currently using fcitx5 android and i can say just go with this. everything comes right out of the box (no screwing around with config files) and has all the features trime has and more (i can even type unicode! ☻). only feature i would miss is that trime types both round brackets at once and places your cursor in the middle whereas fcitx5 android needs you to type them individually.
i use trime on android and the default takes quite a while to get used to. for example, the symbol key that is usually on the bottom left corner is now a language switching key and the symbol key is one tiny key beside it. custom configuration seems like a pain and i haven’t done it. one of the defaults however comes with a menu that lets you type all sorts of symbols including greek, russian, japanese, IPA and mathematical operators. haven’t sen fcitx5 for android though
edit: currently using fcitx5 android and i can say just go with this. everything comes right out of the box (no screwing around with config files) and has all the features trime has and more (i can even type unicode! ☻). only feature i would miss is that trime types both round brackets at once and places your cursor in the middle whereas fcitx5 android needs you to type them individually.