Breaking Network Crypto in Popular Chinese Keyboard Apps
Exposes flawed custom network encryption in popular Chinese IME keyboard apps that allow network eavesdroppers to intercept keystrokes from 800 million users.
Summary
Cloud Predictive Chinese IME Architecture
Popular Chinese Input Method Editor (IME) keyboards transmit keystroke telemetry to cloud servers to provide character prediction and candidate suggestions for complex scripts.
Flaws in Proprietary Network Encryption
Security analysis of leading Chinese keyboard applications revealed that vendors routinely roll their own custom cryptographic protocols rather than standard TLS implementations.
Systematic Keylogging Exploitation
Cryptanalytic attacks against Sogou IME, Baidu IME, and iFlytek IME demonstrated that passive network eavesdroppers can completely decrypt live keystroke streams from over 800 million active users.
Advocating for HTTPS Everywhere
Remediating systemic keyboard vulnerabilities requires the global mobile ecosystem to mandate standard TLS encryption across all OEM keyboard components.
Related talks
War Stories·39 min
Joseph Cox
Investigates the FBI's undercover operation running the encrypted phone app Anom, detailing the platform backdoor and law enforcement network compromise.
Presentations Social Engineering·18 min
Marte Løge analyzes Android lock patterns, demonstrating how demographic and psychological traits make user unlock gestures predictable.
Hack Glasgow·51 min
Engineers explore architecture and security mechanisms for 2026: Lauren Spokes - The Forensic War on Privacy Advances: Mobile Phones.