pentester.land· Aug 9, 2023· by Jeffrey Knockel, Zoë Reichert, Mona Wang

“Please do not make it public” - Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping

Open Original Article ↗
Target Program: Tencent
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cryptographic issues#Padding oracle attack#Windows#Android#iOS