×
Python

Google Lays Off Staff From Flutter, Dart and Python Teams (techcrunch.com) 28

Ahead of its annual I/O developer conference in May, Google has decided to lay off staff across key teams like Flutter, Dart, Python and others. "As we've said, we're responsibly investing in our company's biggest priorities and the significant opportunities ahead," said a Google spokesperson. "To best position us for these opportunities, throughout the second half of 2023 and into 2024, a number of our teams made changes to become more efficient and work better, remove layers, and align their resources to their biggest product priorities. Through this, we're simplifying our structures to give employees more opportunity to work on our most innovative and important advances and our biggest company priorities, while reducing bureaucracy and layers." TechCrunch reports: The company clarified that the layoffs were not company-wide but were reorgs that are part of the normal course of business. Affected employees will be able to apply for other open roles at Google, we're told. [...] Though Google didn't detail headcount, some of the layoffs at Google may have been confirmed in a WARN notice filed on April 24. WARN, or the California Worker Adjustment and Retraining Notification Act, requires employers with more than 100 employees to provide 60-day notice in advance of layoffs. In the filing, Google said it was laying off a total of 50 employees across three locations in Sunnyvale.

On social media, commenters raised concerns with the Python layoffs in particular, given the role that Python tooling plays in AI. But others pointed out that Google didn't eliminate its Python team; it replaced that team with another group based in Munich -- at least according to Python Steering Council member Thomas Wouters in a post on Mastodon last Thursday.

AI

In Race To Build AI, Tech Plans a Big Plumbing Upgrade (nytimes.com) 25

If 2023 was the tech industry's year of the A.I. chatbot, 2024 is turning out to be the year of A.I. plumbing. From a report: It may not sound as exciting, but tens of billions of dollars are quickly being spent on behind-the-scenes technology for the industry's A.I. boom. Companies from Amazon to Meta are revamping their data centers to support artificial intelligence. They are investing in huge new facilities, while even places like Saudi Arabia are racing to build supercomputers to handle A.I. Nearly everyone with a foot in tech or giant piles of money, it seems, is jumping into a spending frenzy that some believe could last for years.

Microsoft, Meta, and Google's parent company, Alphabet, disclosed this week that they had spent more than $32 billion combined on data centers and other capital expenses in just the first three months of the year. The companies all said in calls with investors that they had no plans to slow down their A.I. spending. In the clearest sign of how A.I. has become a story about building a massive technology infrastructure, Meta said on Wednesday that it needed to spend billions more on the chips and data centers for A.I. than it had previously signaled. "I think it makes sense to go for it, and we're going to," Mark Zuckerberg, Meta's chief executive, said in a call with investors.

The eye-popping spending reflects an old parable in Silicon Valley: The people who made the biggest fortunes in California's gold rush weren't the miners -- they were the people selling the shovels. No doubt Nvidia, whose chip sales have more than tripled over the last year, is the most obvious A.I. winner. The money being thrown at technology to support artificial intelligence is also a reminder of spending patterns of the dot-com boom of the 1990s. For all of the excitement around web browsers and newfangled e-commerce websites, the companies making the real money were software giants like Microsoft and Oracle, the chipmaker Intel, and Cisco Systems, which made the gear that connected those new computer networks together. But cloud computing has added a new wrinkle: Since most start-ups and even big companies from other industries contract with cloud computing providers to host their networks, the tech industry's biggest companies are spending big now in hopes of luring customers.

Communications

FCC Fines Wireless Carriers $200 Million For Sharing Customer Data (lightreading.com) 20

The Federal Communications Commission has fined the nation's largest wireless carriers for illegally sharing access to customers' location information without consent and without taking reasonable measures to protect that information against unauthorized disclosure. From a report: Sprint and T-Mobile -- which have merged since the investigation began -- face fines of more than $12 million and $80 million, respectively. AT&T is fined more than $57 million, and Verizon is fined almost $47 million. "Our communications providers have access to some of the most sensitive information about us. These carriers failed to protect the information entrusted to them. Here, we are talking about some of the most sensitive data in their possession: customers' real-time location information, revealing where they go and who they are," said FCC Chairwoman Jessica Rosenworcel. "As we resolve these cases" which were first proposed by the last Administration -- the Commission remains committed to holding all carriers accountable and making sure they fulfill their obligations to their customers as stewards of this most private data."
Social Networks

What Happened After India Banned TikTok? (apnews.com) 112

What happened after India banned TikTok? The move "mostly drew widespread support" notes the Associated Press, in a country "where protesters had been calling for a boycott of Chinese goods since the deadly confrontation in the remote Karakoram mountain border region." "There was a clamour leading up to this, and the popular narrative was how can we allow Chinese companies to do business in India when we're in the middle of a military standoff," said Nikhil Pahwa, a digital policy expert and founder of tech website MediaNama. Just months before the ban, India had also restricted investment from Chinese companies, Pahwa added. "TikTok wasn't a one-off case. Today, India has banned over 500 Chinese apps to date."

At the time, India had about 200 million TikTok users. And the company also employed thousands of Indians.

TikTok users and content creators, however, needed a place to go — and the ban provided a multi-billion dollar opportunity to snatch up a big market. Within months, Google rolled out YouTube Shorts and Instagram pushed out its Reels feature. Both mimicked the short-form video creation that TikTok had excelled at. "And they ended up capturing most of the market that TikTok had vacated," said Pahwa.

TikTok is also banned in Nepal and Somalia, according to Mashable, and the Associaterd Press adds that it's now also banned in Pakistan, Nepal and Afghanistan "and restricted in many countries in Europe."

Their article concludes that "for the most part, content creators and users in the four years since the ban have moved on to other platforms." They quote one frequent TikTok user as saying they just switched to Instagram after the ban, and "It wasn't really a big deal."
Transportation

Boeing Accused of Retaliating Against Two Engineers in 2022 (reuters.com) 51

Reuters reports that America's Federal Aviation Administration "is investigating a union's claims that Boeing retaliated against two employees who in 2022 insisted the planemaker re-evaluate prior engineering work on 777 and 787 jets."

The employees' union "said the two unidentified engineers were representatives of the FAA, which delegates some of its oversight authority and certification process to Boeing workers." The FAA noted on Tuesday that in 2022 it boosted oversight of planemakers by protecting aviation industry employees who perform agency functions from interference by their employers. A December 2021 Senate report found "FAA's certification process suffers from undue pressure on line engineers and production staff."

"Boeing can tell Congress and the media all it wants about how retaliation is strictly prohibited," said SPEEA Director of Strategic Development Rich Plunkett. "But our union is fighting retaliation cases on a regular basis, and, in this specific case, Boeing is trying to hide information that would shed light on what happened...."

Last week, Boeing quality engineer whistleblower Sam Salehpour, who raised questions about Boeing widebody jets, told senators he was told to "shut up" when he flagged safety concerns. He has said he was removed from the 787 program and transferred to the 777 jet due to his questions.

Boeing has "zero tolerance for retaliation," according a statement quoted by Reuters, in which the company says they "encourage our employees to speak up when they see an issue. After an extensive review of documentation and interviewing more than a dozen witnesses, our investigators found no evidence of retaliation or interference. We have determined the allegations are unsubstantiated."

The union's version of the story? "After nearly six months of debate, the two engineers, with backing from the FAA, prevailed. Boeing re-did the required analysis." The two engineers were still Boeing employees, however, and Boeing management was not pleased. When they came up for their next performance reviews, the two engineers received identical negative evaluations... Even after the manager of the two engineers admitted that he had rated them both poorly at the request of the 777 and 787 managers who had been forced to resubmit their work, Boeing refused to change the engineers' performance evaluations.

At this point, one of the engineers left in disgust; the other filed a formal "Speak Up" complaint with Boeing.

Supercomputing

Europe Plans To Build 100-Qubit Quantum Computer By 2026 (physicsworld.com) 27

An anonymous reader quotes a report published last week by Physics World: Researchers at the Dutch quantum institute QuTech in Delft have announced plans to build Europe's first 100-quantum bit (qubit) quantum computer. When complete in 2026, the device will be made publicly available, providing scientists with a tool for quantum calculations and simulations. The project is funded by the Dutch umbrella organization Quantum Delta NL via the European OpenSuperQPlus initiative, which has 28 partners from 10 countries. Part of the 10-year, 1 billion-euro European Quantum Flagship program, OpenSuperQPlus aims to build a 100-qubit superconducting quantum processor as a stepping stone to an eventual 1000-qubit European quantum computer.

Quantum Delta NL says the 100-qubit quantum computer will be made publicly available via a cloud platform as an extension of the existing platform Quantum Inspire that first came online in 2020. It currently includes a two-qubit processor of spin qubits in silicon, as well as a five-qubit processor based on superconducting qubits. Quantum Inspire is currently focused on training and education but the upgrade to 100 qubits is expected to allow research into quantum computing. Lead researcher from QuTech Leonardo DiCarlo believes the R&D cycle has "come full circle," where academic research first enabled spin-off companies to grow and now their products are being used to accelerate academic research.

The Internet

Court Upholds New York Law That Says ISPs Must Offer $15 Broadband (arstechnica.com) 47

The U.S. Court of Appeals for the 2nd Circuit overturned a prior district court decision, lifting the injunction that blocked New York's law mandating that ISPs offer $15 broadband plans to low-income families. Ars Technica reports: The ruling (PDF) is a loss for six trade groups that represent ISPs, although it isn't clear right now whether the law will be enforced. For consumers who qualify for means-tested government benefits, the state law requires ISPs to offer "broadband at no more than $15 per month for service of 25Mbps, or $20 per month for high-speed service of 200Mbps," the ruling noted. The law allows for price increases every few years and makes exemptions available to ISPs with fewer than 20,000 customers.

"First, the ABA is not field-preempted by the Communications Act of 1934 (as amended by the Telecommunications Act of 1996), because the Act does not establish a framework of rate regulation that is sufficiently comprehensive to imply that Congress intended to exclude the states from entering the field," a panel of appeals court judges stated in a 2-1 opinion. Trade groups claimed the state law is preempted by former Federal Communications Commission Chairman Ajit Pai's repeal of net neutrality rules. Pai's repeal placed ISPs under the more forgiving Title I regulatory framework instead of the common-carrier framework in Title II of the Communications Act.

2nd Circuit judges did not find this argument convincing: "Second, the ABA is not conflict-preempted by the Federal Communications Commission's 2018 order classifying broadband as an information service. That order stripped the agency of its authority to regulate the rates charged for broadband Internet, and a federal agency cannot exclude states from regulating in an area where the agency itself lacks regulatory authority. Accordingly, we REVERSE the judgment of the district court and VACATE the permanent injunction."

GNOME

GNOME Foundation To Focus On Fundraising After Years Running A Deficit (phoronix.com) 38

The GNOME Foundation, a non-profit organization supporting the GNOME desktop environment, has been operating at a deficit for several years, depleting its financial reserves. Robert McQueen, the foundation's president, has announced plans to increase fundraising efforts in a new blog post.

McQueen adds: As you may be aware, the GNOME Foundation has operated at a deficit (nonprofit speak for a loss -- ie spending more than we've been raising each year) for over three years, essentially running the Foundation on reserves from some substantial donations received 4-5 years ago. The Foundation has a reserves policy which specifies a minimum amount of money we have to keep in our accounts. This is so that if there is a significant interruption to our usual income, we can preserve our core operations while we work on new funding sources. We've now "hit the buffers" of this reserves policy, meaning the Board can't approve any more deficit budgets -- to keep spending at the same level we must increase our income.
Android

Android TVs Can Expose User Email Inboxes (404media.co) 29

Some Android-powered TVs can expose the contents of users' email inboxes if an attacker has physical access to the TV. Google initially told the office of Senator Ron Wyden that the issue, which is a quirk of how software is installed on these TVs, was expected behavior, but after being contacted by 404 Media, Google now says it is addressing the issue. From the report: The attack is an edge case but one that still highlights how the use of Google accounts, even on products that aren't necessarily designed for browsing user data, can expose information in unusual ways, including TVs in businesses or ones that have been resold or given away.

"My office is mid-way through a review of the privacy practices of streaming TV technology providers. As part of that inquiry, my staff discovered an alarming video in which a YouTuber demonstrated how with 15 minutes of unsupervised access to an Android TV set top box, a criminal could get access to private emails of the Gmail user who set up the TV," Senator Ron Wyden told 404 Media in a statement.

Google

Encrypted Email Service Files DMA Complaint Claiming It Vanished from Google Search (theregister.com) 18

Tutao, known for the encrypted email service Tuta Mail, has filed a Digital Markets Act (DMA) complaint to the EU over an alleged de-ranking in Google Search. From a report: Google Search rankings are all too familiar to search engine optimization (SEO) specialists charged with ensuring web pages rise to the top of search results. In the case of Tutao's products -- Tuta Mail and Tuta Calendar -- all was going well until the beginning of March 2024, when the company claims tuta.com was abruptly de-ranked in Google Search. Rather than being displayed as a search result of thousands of keywords, the count dropped to the hundreds, the developer alleges.

Matthias Pfau, co-founder of Tuta Mail, said: "This reduction in Google Search took us by surprise as we did not change anything on our website during that time. We tried to reach out to Google about this issue, but were met with radio silence." Google denies the claims. It told The Reg: "Search ranking updates absolutely do not aim to preference Google products, or any other particular website. The email provider in question is easily accessible globally on Search. We appreciate the feedback and will look into how we can ensure Search continues to return the most helpful, relevant results."

Tuta Mail's Pfau claims a change in results mean that when a user searches for "encrypted email," Tuta's products no longer show up. However, he went on to allege that if you search for "Tuta" or "Tutanota," the company appears in the results.

Windows

Windows 11 Will Display Watermark If Your PC Does Not Support AI Requirements (tomshardware.com) 94

An anonymous reader shares a report: With Windows 11 24H2 all geared up to have AI-intensive applications, Microsoft has added a code that will warn you if your PC does not meet the hardware requirements, according to code dug up by Twitter/X sleuth Albacore. The warning will be displayed as a watermark so you know that you cannot use certain AI-powered built-in apps because of an unsupported CPU.
Transportation

Honda To Spend $11 Billion On Four EV Factories In North America (arstechnica.com) 137

Jonathan M. Gitlin reports Ars Technica: Honda announced today that it will spend $11 billion to expand its electric vehicle manufacturing presence in North America. The Japanese automaker already has a number of factories in the US, Mexico, and Canada, and it's this last one that will benefit from the expansion, with four EV-related plants planned for Ontario. Honda says it has begun evaluating requirements for what it's calling an "innovative and environmentally responsible" EV factory and a standalone EV battery plant in Alliston, Ontario, which is already home to Honda's two existing Canadian manufacturing facilities.

Additionally, the automaker wants to set up another two sites as joint ventures. One will be a plant that processes cathode active materials and their precursors -- the various elements like nickel and manganese that are combined with lithium in lithium-ion batteries -- set up in a partnership with POSCO Future M, a South Korean battery material and chemical company. (POSCO is already working with General Motors on another joint venture battery precursor material facility in Betancour, Quebec, that is supposed to become operational in 2026.) A second joint venture will be a partnership with Asahi Kasei, which will manufacture battery separators, the material that keeps the anode and cathode apart. The locations of these two joint ventures have not yet been announced.

Honda thinks it will be able to start making EVs in Ontario in 2028 and says the assembly plant will have the capacity to build 240,000 EVs per year. Meanwhile, the battery plant is planned to have an annual output of 36 GWh.

Intel

TSMC Unveils 1.6nm Process Technology With Backside Power Delivery (tomshardware.com) 44

An anonymous reader quotes a report from Tom's Hardware: TSMC announced its leading-edge 1.6nm-class process technology today, a new A16 manufacturing process that will be the company's first Angstrom-class production node and promises to outperform its predecessor, N2P, by a significant margin. The technology's most important innovation will be its backside power delivery network (BSPDN). Just like TSMC's 2nm-class nodes (N2, N2P, and N2X), the company's 1.6nm-class fabrication process will rely on gate-all-around (GAA) nanosheet transistors, but unlike the current and next-generation nodes, this one uses backside power delivery dubbed Super Power Rail. Transistor and BSPDN innovations enable tangible performance and efficiency improvements compared to TSMC's N2P: the new node promises an up to 10% higher clock rate at the same voltage and a 15%-20% lower power consumption at the same frequency and complexity. In addition, the new technology could enable 7%-10% higher transistor density, depending on the actual design.

The most important innovation of TSMC's A16 process, which was unveiled at the company's North American Technology Symposium 2024, is the introduction of the Super Power Rail (SPR), a sophisticated backside power delivery network (BSPDN). This technology is tailored specifically for AI and HPC processors that tend to have both complex signal wiring and dense power delivery networks. Backside power delivery will be implemented into many upcoming process technologies as it allows for an increase in transistor density and improved power delivery, which affects performance. Meanwhile, there are several ways to implement a BSPDN. TSMC's Super Power Rail plugs the backside power delivery network to each transistor's source and drain using a special contact that also reduces resistance to get the maximum performance and power efficiency possible. From a production perspective, this is one of the most complex BSPDN implementations and is more complex than Intel's Power Via.
Volume production of A16 is slated for the second half of 2026. "Therefore, actual A16-made products will likely debut in 2027," notes the report. "This timeline positions A16 to potentially compete with Intel's 14A node, which will be Intel's most advanced node at the time."
Businesses

Alphabet Shares Jump 14% On Earnings Beat, First-Ever Dividend (cnbc.com) 94

Alphabet has reported first quarter results that topped analysts' estimates with soaring profits in its cloud division. It also announced its first-ever dividend. CNBC shares the results: Earnings per share: $1.89 vs. $1.51 per share expected by LSEG
Revenue: $80.54 billion vs. $78.59 billion expected by LSEG

Wall Street is also watching several other numbers in the report:

YouTube advertising revenue: $8.09 billion vs. $7.72 billion expected, according to StreetAccount.
Google Cloud revenue: $9.57 billion vs. $9.35 billion expected, according to StreetAccount.
Traffic acquisition costs (TAC): $12.95 billion $12.74 billion expected, according to StreetAccount.

Alphabet's revenue increased 15% from $69.79 billion a year earlier, the fastest rate of growth since early 2022. Alphabet said its board approved a cash dividend of 20 cents per share to be paid on June 17, to stockholders of record as of June 10. The company said it "intends to pay quarterly cash dividends in the future."

Ubuntu

Ubuntu 24.04 LTS 'Noble Numbat' Officially Released (9to5linux.com) 34

prisoninmate shares a report from 9to5Linux: Canonical released today Ubuntu 24.04 LTS (Noble Numbat) as the latest version of its popular Linux-based operating system featuring some of the latest GNU/Linux technologies and Open Source software. Powered by Linux kernel 6.8, Ubuntu 24.04 LTS features the latest GNOME 46 desktop environment, an all-new graphical firmware update tool called Firmware Updater, Netplan 1.0 for state-of-the-art network management, updated Ubuntu font, support for the deb822 format for software sources, increased vm.max_map_count for better gaming, and Mozilla Thunderbird as a Snap by default.

It also comes with an updated Flutter-based graphical desktop installer that's now capable of updating itself and features a bunch of changes like support for accessibility features, guided (unencrypted) ZFS installations, a new option to import auto-install configurations for templated custom provisioning, as well as new default installation options, such as Default selection (previously Minimal) and Extended selection (previously Normal)."

The Internet

FCC Votes To Restore Net Neutrality Rules (nytimes.com) 54

An anonymous reader quotes a report from the New York Times: The Federal Communications Commission voted on Thursday to restore regulations that expand government oversight of broadband providersand aim to protect consumer access to the internet, a move that will reignite a long-running battle over the open internet. Known as net neutrality, the regulations were first put in place nearly a decade ago under the Obama administration and are aimed at preventing internet service providers like Verizon or Comcast from blocking or degrading the delivery of services from competitors like Netflix and YouTube. The rules were repealed under President Donald J. Trump, and have proved to be a contentious partisan issue over the years while pitting tech giants against broadband providers.

In a 3-to-2 vote along party lines, the five-member commission appointed by President Biden revived the rules that declare broadband a utility-like service regulated like phones and water. The rules also give the F.C.C. the ability to demand broadband providers report and respond to outages, as well as expand the agency's oversight of the providers' security issues. Broadband providers are expected to sue to try to overturn the reinstated rules.

The core purpose of the regulations is to prevent internet service providers from controlling the quality of consumers' experience when they visit websites and use services online. When the rules were established, Google, Netflix and other online services warned that broadband providers had the incentive to slow down or block access to their services. Consumer and free speech groups supported this view. There have been few examples of blocking or slowing of sites, which proponents of net neutrality say is largely because of fear that the companies would invite scrutiny if they did so. And opponents say the rules could lead to more and unnecessary government oversight of the industry.

Communications

Net Neutrality is About To Make a Comeback (theverge.com) 37

The Federal Communications Commission is set to vote to restore net neutrality on Thursday in the latest volley of a yearslong game of political ping-pong. From a report: The commission is expected to reclassify internet service providers (ISPs) -- e.g., broadband companies like AT&T and Comcast -- as common carriers under Title II of the Communications Act. That classification would open ISPs up to greater oversight by the FCC. The vote is widely expected to go in favor of reinstating net neutrality since FCC Chair Jessica Rosenworcel, a Democrat, controls the agency's agenda. Rosenworcel moved forward with the measure after a fifth commissioner was sworn in, restoring a Democratic majority on the panel. Net neutrality proponents say that oversight can help ensure fair access to an open internet by upholding principles like no blocking or throttling of internet traffic. Opponents, including industry players, fear it could halt innovation and subject ISPs to onerous price regulations. Update FCC Votes To Restore Net Neutrality.
Transportation

Ford Just Reported a Massive Loss on Every Electric Vehicle It Sold (cnn.com) 158

Ford's electric vehicle unit reported that losses soared in the first quarter to $1.3 billion, or $132,000 for each of the 10,000 vehicles it sold in the first three months of the year, helping to drag down earnings for the company overall. From a report: Ford, like most automakers, has announced plans to shift from traditional gas-powered vehicles to EVs in coming years. But it is the only traditional automaker to break out results of its retail EV sales. And the results it reported Wednesday show another sign of the profit pressures on the EV business at Ford and other automakers.

The EV unit, which Ford calls Model e, sold 10,000 vehicles in the quarter, down 20% from the number it sold a year earlier. And its revenue plunged 84% to about $100 million, which Ford attributed mostly to price cuts for EVs across the industry. That resulted in the $1.3 billion loss before interest and taxes (EBIT), and the massive per-vehicle loss in the Model e unit. A price war among EVs for about a year and a half has made profitability very difficult said Ford CFO John Lawler. He said while Ford has removed about $5,000 in cost on each Mustang Mach-E, "revenue is dropping faster than we can take out the cost." In 2023, Ford Model e reported a full-year EBIT loss of $4.7 billion on sales of 116,000 EVs, or an average of $40,525 per vehicle, just more than a third of the first quarter loss.

The Almighty Buck

Airlines Required To Refund Passengers For Canceled, Delayed Flights (go.com) 77

Department of Transportation Secretary Pete Buttigieg announced new rules for the airline industry that will require airlines to automatically give cash refunds to passengers for canceled and significantly delayed flights. They will also require airlines to give cash refunds if your bags are lost and not delivered within 12 hours.

"This is a big day for America's flying public," said Buttigieg at a Wednesday morning news conference. According to Buttigieg, the new rules are the biggest expansion of passenger rights in the department's history. ABC News reports: Airlines can no longer decide how long a delay must be before a refund is issued. Under the new DOT rules, the delays covered would be more than three hours for domestic flights and more than six hours for international flights, the agency said. This includes tickets purchased directly from airlines, travel agents and third-party sites such as Expedia and Travelocity.

The refunds must be issued within seven days, according to the new DOT rules, and must be in cash unless the passenger chooses another form of compensation. Airlines can no longer issue refunds in forms of vouchers or credits when consumers are entitled to receive cash. Airlines will have six months to comply with the new rules.

The DOT said it is also working on rules related to family seating fees, enhancing rights for wheelchair-traveling passengers for safe and dignified travel and mandating compensation and amenities if flights are delayed or canceled by airlines. Buttigieg said the DOT is also protecting airline passengers from being surprised by hidden fees -- a move he estimates will have Americans billions of dollars every year. The DOT rules include that passengers will receive refunds for extra services paid for and not provided, such as Wi-Fi, seat selection or inflight entertainment.

Encryption

Almost Every Chinese Keyboard App Has a Security Flaw That Reveals What Users Type (technologyreview.com) 78

An anonymous reader quotes a report from MIT Technology Review: Almost all keyboard apps used by Chinese people around the world share a security loophole that makes it possible to spy on what users are typing. The vulnerability, which allows the keystroke data that these apps send to the cloud to be intercepted, has existed for years and could have been exploited by cybercriminals and state surveillance groups, according to researchers at the Citizen Lab, a technology and security research lab affiliated with the University of Toronto.

These apps help users type Chinese characters more efficiently and are ubiquitous on devices used by Chinese people. The four most popular apps -- built by major internet companies like Baidu, Tencent, and iFlytek -- basically account for all the typing methods that Chinese people use. Researchers also looked into the keyboard apps that come preinstalled on Android phones sold in China. What they discovered was shocking. Almost every third-party app and every Android phone with preinstalled keyboards failed to protect users by properly encrypting the content they typed. A smartphone made by Huawei was the only device where no such security vulnerability was found.

In August 2023, the same researchers found that Sogou, one of the most popular keyboard apps, did not use Transport Layer Security (TLS) when transmitting keystroke data to its cloud server for better typing predictions. Without TLS, a widely adopted international cryptographic protocol that protects users from a known encryption loophole, keystrokes can be collected and then decrypted by third parties. Even though Sogou fixed the issue after it was made public last year, some Sogou keyboards preinstalled on phones are not updated to the latest version, so they are still subject to eavesdropping. [...] After the researchers got in contact with companies that developed these keyboard apps, the majority of the loopholes were fixed. But a few companies have been unresponsive, and the vulnerability still exists in some apps and phones, including QQ Pinyin and Baidu, as well as in any keyboard app that hasn't been updated to the latest version.

Slashdot Top Deals