本帖最後由 eo38cl 於 2017-11-8 20:34 編輯
最初發現的網民係話軟件所傳輸的資料,係每個鍵的按鍵次數統計,唔係Tom's Hardware 所講的 keylogger:
https://www.reddit.com/r/pcmaste ... /dph76ge/?context=3
The data itself looks more like statistics for key usage, rather than a keylogger, but it's still sketchy. I did mention that later in the /csg/ thread. The same data can be found in appdata folders of drivers in a text file, so it's not like they're hiding it. You can just add a block rule in Windows Firewall and it's enough to stop all connections attempts to Alibaba servers. The software will still work fine (not that you actually need it).
I'm actually quite disappointed by TomsHardware that they didn't bother to do some research themselves and just slapped in a few links (the other post on reddit is also just my image).
Also I hope that it won't discourage other people from buying cheap mech keyboards/mice - they're still a valid choice if you don't have a huge budget
Tom's Hardware 已修改原先講法:
"However, in a closer look, it seems that the Cloud Driver software doesn't send the key presses to the Alibaba server but only how many times each key has been pressed.
Assuming no malicious intent, it's possible that the keyboard maker wanted this sort of data in order to see the lifetime of its keyboard's keys or see which keys it needs to make more durable." |