A widely used Chinese language input app for Windows and Android has been found vulnerable to serious security flaws that could allow a malicious interloper to decipher the text typed by users.
The findings from the University of Toronto’s Citizen Lab, which carried out an analysis of the encryption mechanism used in Tencent’s Sogou Input Method, an app that has over 455 million monthly active users across Windows, Android, and iOS.
The vulnerabilities are rooted in EncryptWall, the service’s custom encryption system, allowing network eavesdroppers to extract the textual content and access sensitive data.
