In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could...
Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.
"Your keyboard may occasionally capture ‘snippets’ of your typing. This includes short phrases, plus data about the keypresses you made to type the words, and whether you deleted or changed anything. These snippets are captured anonymously and you do not need to be signed in to share them."