In this report, we analyze the Windows, Android, and iOS versions of Tencent’s Sogou Input Method, the most popular Chinese-language input method in China. Our analysis found serious vulnerabilities in the app’s custom encryption system and how it encrypts sensitive data. These vulnerabilities could allow a network eavesdropper to decrypt sensitive communications sent by the app, including revealing all keystrokes being typed by the user. Following our disclosure of these vulnerabilities, Sogou released updated versions of the app that identified all of the issues we disclosed.
Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping.
What’s the deal with Android “keyboards”? Why is it just an app that you can install? And why can it have more functionality/permissions from the OS beyond just being a local keyboard? As an iOS user this is very bizarre and foreign to me.
I feel like every time the topic of Android keyboards (again, why is this a thing?) comes up it’s some kind of big spyware thing. Seems like most every app on Android and iOS is spyware anyway, of course.
there are more than 1 keyboard when you go shopping for physical keyboards… is that bizarre and foreign? different keyboards on android have different features and customizability just like real keyboards.
3rd party keyboards exist for iOS - I used to use them too. Keyboards can access every app that you use a keyboard in, so basically everything from your passwords to credit card can be logged. There’d be a popup warning about it on installation that everyone ignores.
But the native keyboard does adopt parts of other good apps + lack of substantial development in said apps (looking at you, Swiftkey iOS). Once the native keyboard added slide to type + spacebar navigation years back, third party keyboards lost their lustre for me lol.
Technically Apple could log all our keypresses too. It’s just a matter of whether that sort of data is worth it for them to collect, or are they prioritising security with their current focuses on privacy features in newer updates.
You can sorta increase keyboard size by going into accessibility settings > display to increase text size as a whole.
As for additional number line on iPhones, not possible without third party keyboard afaik, but there’s a couple tricks (link to reddit comment) to speed up typing numbers. iPad has the number line in their keyboard.
I’m just used to not having these features in exchange for generally much better integration of autofill passwords etc. I have an android tablet to compare with & it’s a pain to have to switch over to a dedicated keyboard to access my passwords & back because swiftkey borks it most of the time (I use keepass as a password manager). The keyboard also auto-detects those pesky SMS OTPs, which is a small convenience but surprisingly satisfying to not have to flip apps/squint at the number in my notifs to slowly input it. Pros & cons I guess.
My iPad Pro has a persistent number line. iPad Air does not. It’s maddening. I tried swiftkey and hated it. iOS also constantly botches my typing and it’s infuriating. That said, Android is not preferable IMO.
Doesn’t the iOS keyboard have all kinds of apps tied to it and do more than just a keyboard? Also can’t iOS users install 3rd party keyboards like Gboard on iOS just like Android? I’m not sure what the deal is, but having more than one option is good for everyone.
The iOS keyboard definitely has integrations that I never use, but I am just learning that you can, in fact, download wholesale keyboard apps on iOS as well. Skimming them through, they have a ridiculous number of installs (judging by the number of reviews) and atrocious privacy policies. The last part is concerning! 😅
I think the origins of this was back at the inception of Android when the default keyboard didn’t have slide technology, so at that time I think it made reasonable sense that you could bring your own keyboard app, now that Gboard is full featured it probably wouldn’t hurt to lock it down, but it also depends on if every vendor doesn’t provide their own keyboard app that is horrible to use and sets that as the only keyboard option.
As an iOS user, I’ll just say “slide to type” is better than “hammer thumbs”. Until the iOS keyboard gets that on all platforms, 3rd party is my go-to.
I see. I don’t use iOS devices often but I’ve never used an iPad with slide to type. After a quick search it’s because I’m not using the floating keyboard I guess?
It appears to be so - I personally don’t have an iPad to check. Strange decision to omit it in that particular mode given it’s a parallel to iPhone keyboards, so I’d have to assume it was a deliberate omission. User experience (too many grandparents triggering it by accident)? Who knows.
Now we know we have to pinch it to make it float and then slide that way. TIL!
But if you’re using a newer iPhone, definitely able to slide as long as the owner haven’t turned it off.
What’s the deal with Android “keyboards”? Why is it just an app that you can install? And why can it have more functionality/permissions from the OS beyond just being a local keyboard? As an iOS user this is very bizarre and foreign to me.
I feel like every time the topic of Android keyboards (again, why is this a thing?) comes up it’s some kind of big spyware thing. Seems like most every app on Android and iOS is spyware anyway, of course.
there are more than 1 keyboard when you go shopping for physical keyboards… is that bizarre and foreign? different keyboards on android have different features and customizability just like real keyboards.
3rd party keyboards exist for iOS - I used to use them too. Keyboards can access every app that you use a keyboard in, so basically everything from your passwords to credit card can be logged. There’d be a popup warning about it on installation that everyone ignores.
But the native keyboard does adopt parts of other good apps + lack of substantial development in said apps (looking at you, Swiftkey iOS). Once the native keyboard added slide to type + spacebar navigation years back, third party keyboards lost their lustre for me lol.
Technically Apple could log all our keypresses too. It’s just a matter of whether that sort of data is worth it for them to collect, or are they prioritising security with their current focuses on privacy features in newer updates.
I want exactly the iOS keyboard layout except larger letter keys, and a dedicated number line on top on ALL my devices
Unfortunately no easy way about it :(
You can sorta increase keyboard size by going into accessibility settings > display to increase text size as a whole.
As for additional number line on iPhones, not possible without third party keyboard afaik, but there’s a couple tricks (link to reddit comment) to speed up typing numbers. iPad has the number line in their keyboard.
I’m just used to not having these features in exchange for generally much better integration of autofill passwords etc. I have an android tablet to compare with & it’s a pain to have to switch over to a dedicated keyboard to access my passwords & back because swiftkey borks it most of the time (I use keepass as a password manager). The keyboard also auto-detects those pesky SMS OTPs, which is a small convenience but surprisingly satisfying to not have to flip apps/squint at the number in my notifs to slowly input it. Pros & cons I guess.
My iPad Pro has a persistent number line. iPad Air does not. It’s maddening. I tried swiftkey and hated it. iOS also constantly botches my typing and it’s infuriating. That said, Android is not preferable IMO.
Doesn’t the iOS keyboard have all kinds of apps tied to it and do more than just a keyboard? Also can’t iOS users install 3rd party keyboards like Gboard on iOS just like Android? I’m not sure what the deal is, but having more than one option is good for everyone.
The iOS keyboard definitely has integrations that I never use, but I am just learning that you can, in fact, download wholesale keyboard apps on iOS as well. Skimming them through, they have a ridiculous number of installs (judging by the number of reviews) and atrocious privacy policies. The last part is concerning! 😅
I think the origins of this was back at the inception of Android when the default keyboard didn’t have slide technology, so at that time I think it made reasonable sense that you could bring your own keyboard app, now that Gboard is full featured it probably wouldn’t hurt to lock it down, but it also depends on if every vendor doesn’t provide their own keyboard app that is horrible to use and sets that as the only keyboard option.
As an iOS user, I’ll just say “slide to type” is better than “hammer thumbs”. Until the iOS keyboard gets that on all platforms, 3rd party is my go-to.
Slide-to-type is available on the default iOS keyboard, at least in English. In Settings search for Keyboard and it’s one of the options.
On all platforms?
Slide to type had been available since ios 13 for years now. What other platforms are you referring to besides iphones & ipads which both use ios?
I see. I don’t use iOS devices often but I’ve never used an iPad with slide to type. After a quick search it’s because I’m not using the floating keyboard I guess?
It appears to be so - I personally don’t have an iPad to check. Strange decision to omit it in that particular mode given it’s a parallel to iPhone keyboards, so I’d have to assume it was a deliberate omission. User experience (too many grandparents triggering it by accident)? Who knows.
Now we know we have to pinch it to make it float and then slide that way. TIL!
But if you’re using a newer iPhone, definitely able to slide as long as the owner haven’t turned it off.