AppsGood and EVO

Security alert: A.I.type Keyboard sends all keystrokes in plain text to the cloud

A.i.typeWhat a beautiful day for one security hole to be fixed, and another one to be discovered. Luckily, the latest security breach will most likely only affect a small percentage of G&E readers: namely, those who are using A.I.type Keyboard on their HTC EVOs.

This third party keyboard purports to be the best at "psychically" predicting what you'll type next, speeding up the text input process on your Android phone. It does this by sending almost everything you type to servers in the cloud, which will process what you've input so far and throw back its best guess at what you'll type next.

The problem? It sends all of this to the cloud – everything you're typing – in unencrypted  plain-text, making it quite easy for snoopers on both ends to intercept.

This security hole was discovered by Artem Russakovskii, the same guy who discovered the massive HTC vulnerability that was officially fixed earlier today. As Artem says, "Let this serve as a wake-up call to both users placing trust in the cloud and developers who don't utilize even the most basic security and privacy standards … Remember, all cloud services are not created equal."

[Android Police]
Pocketables does not accept targeted advertising, phony guest posts, paid reviews, etc. Help us keep this way with support on Patreon!
Become a patron at Patreon!

John F

John was the editor-in-chief at Pocketables. His articles generally focus on all things Google, including Chrome and Android, although his love of new gadgets and technology doesn't stop there. His current arsenal includes the Nexus 6 by Motorola, the 2013 Nexus 7 by ASUS, the Nexus 9 by HTC, the LG G Watch, and the Chromebook Pixel, among others.

Avatar of John F