"many of them use Signal" - where is this conclusion come from? They have WeChat. I've never seen any of my Chinese friends using Signal.
I'll file this under "security tips". Signal should probably give its users tips for communicating securely - but that's at least one degree separate from "warn users about insecure IMEs".<p>Additionally, if you're already using a chinese phone, why does it matter whether <i>your IME</i> is compromised? Doesn't the CCP already have its nose in all of the manufacturers' OSes already? Maybe Signal should warn about that as well.<p>I'm all for helping people communicate securely, something Signal should be very interested in, but the hyper focus on IMEs is confusing.
Some years ago, the Japanese government send out warnings and restriction on usage of Baidu's IME. It was one of the early ones to sync to the cloud for better predictions.<p><a href="https://www.techrepublic.com/blog/asian-technology/japanese-government-warns-baidu-ime-is-spying-on-users/" rel="nofollow">https://www.techrepublic.com/blog/asian-technology/japanese-...</a>
I'm not sure the headline reflects the discussion issue...It is anecdotal on how many Chinese users are using Signal, but the concern is that so many use third-party keyboards it could be compromising the secure nature of Signal (and the discussion is advocating for users to be made aware of the risks of using third party keyboards with Signal)
I remember a few days ago there was a post on hackernews to stop being mean to the people that worked at signal. The Twitter user linked in that article is railing into signal devs and she calls them assholes that don’t care about what happens outside of western society.<p><a href="https://twitter.com/RealSexyCyborg/status/1197695376200880128?s=20" rel="nofollow">https://twitter.com/RealSexyCyborg/status/119769537620088012...</a>
Im confused .. people are debating wether it's good to track what keyboard people use but instead of tracking which keyboard peoeple use, would it be not simpler for signal to basically build their own integrated keyboard and deactivate the android default one ?
Why a keyboard application code even needs access to the internet? Could the OS just not allow it in the first place? I honestly don't fully understand why it's a Signal's problem in any way.