The Citizen Lab

Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers In this report, we examine cloud-based pinyin keyboard apps from nine vendors (Baidu, Honor, Huawei, iFlyTek, OPPO, Samsung, Tencent, Vivo, and Xiaomi) for vulnerabilities in how the apps transmit user keystrokes. Our analysis found that eight of the nine apps identified contained vulnerabilities that could be exploite

[sarutoru]

University of Toronto

[ukky3]

また FinFisherと RCSについては、Citizen Labが詳細な調査レポートを多数公開しています。