Almost every Chinese keyboard app has a security flaw that reveals what users type


by MIT Technology Review

MIT Technology Review— Almost all keyboard apps used by Chinese people around the world share a security loophole that makes it possible to spy on what users are typing.  The vulnerability, which allows the keystroke data that these apps send to the cloud to be intercepted, has existed for years and could have been exploited by cybercriminals and…

TechRadar—Over a billion users could be at risk from keyboard logging app security flaw. Most Chinese mobile manufacturers used vulnerable keyboards which relayed keystrokes in plain text.

TechSpot—Nearly all Chinese keyboard apps have encryption flaws, exposing millions of users to keylogging. Researchers recently discovered severe encryption flaws in cloud-based pinyin input software from eight companies that could allow eavesdropping. Although there is no evidence that the vulnerabilities are actively being exploited, earlier incidents make this a potentially serious issue.Read Entire Article

Tech Times—Nearly All Keyboard Apps With Chinese Characters Can Collect Your Personal Credentials. Mobile users should beware that keyboard apps with Chinese characters could capture their keystrokes, paving the way for their login data to be stolen without them knowing.