Google reportedly arguing cutting Huawei off from Android threatens US security
theverge.com
theverge.com
I second this is not about US security but about Google losing their mobile market share.
As over time Google is planning on abandoning its Linux roots and moving it to what was called Fuschia.
Processing payments costs real money. Who should subsidize it to make it free for publishers?
Blackberry in mobile OS share had it for a while, though I'm sure you'd argue that it doesn't exist anymore, but you had asked about ever, not just right now. Video game consoles are another example, with the Nintendo, Xbox, Playstation.
In just about every market there exists two natural economic leaders - the quantity (a.k.a. cost) and the quality leaders. There are market leaders other than the natural two who can arise through other means, such as ecosystem lock-in, tech patents, brand exclusivity, or some other method.
Ctrip (20 years old) doesn't have a consequential business outside of China, where Booking and others are dominant. Ctrip's business is firewalled inside of China.
Facebook, WhatsApp, Instagram dominate globally, while eg WeChat has stagnated outside of China. WeChat's growth started to flatline about three years ago. Within another year they'll go entirely flat on growth (stalled at just over a billion monthly active users, most of which are in China and a few other countries).
Spotify and Apple own the global streaming music business. China's competitors are heavily domestic.
Netflix, Amazon and Disney (+Hulu) will own the global streaming movies & TV business.
Almost nobody outside of China listens to or can understand Chinese music, movies or TV shows. Outside of China it's a small market for their media content. This is a fundamental that can't be overcome, the world is not going to learn Mandarin.
On video gaming, China can never compete because there's a vast amount of content the Chinese Government will simply never allow. They barely allow their own video game giants like Tencent to function properly within China, it's a nightmare. The gaming segment will continue to be dominated by the US, Europe and Japan. As in the other cases, China's gaming companies are hamstrung by their system. The best they can do is buy foreign assets and try to operate them outside of China.
When it comes to social, China can never compete due to their extreme speech, cultural & political controls. There can be no global Chinese equivalent of Twitter, Snapchat, Pinterest, Reddit, Facebook, Instagram, Imgur, et al. China's regressive approach is so extreme they've banned joke apps - that one ban probably wipes out a third of the social media landscape in terms of usage. You never have to worry about a Chinese company competing with you if you're eg Imgur or Twitter.
There is some potential for shopping & goods trade, however even mighty Alibaba has struggled in their quest for expanding outside of the domestic Chinese market.
These two sentence are also not intrinsically linked. Just because there has been protectionism does not mean that the China apps are automatically worse. In fact, a bunch of features of weibo and we chat have found their way to Twitter and WhatsApp. (One example are voice messages which were a core part of wechat from the start. They were important to get people in rural areas or older people to use the app, due to the difficulties of typing Mandarin, especially dialects.)
There is little reason to expect companies that have had multi-national success not to succeed in China if it weren't for protectionism; while there are certainly examples of poor execution, you'd have to be blind to think that was the reason for every such case, or even a significant portion thereof.
Same was true for micro computers all throughout the 80s and up to mid 90s.
Games consoles, cars, TVs, laptop OEMs, enterprise cloud hosting providers, etc.
So plenty of counter examples.
Here's a partial list of major server operating system vendors over the years: IBM, Sun, HP, Red Hat, Novell, Microsoft ...
Everyone one of those has existed since at least the 1990s and it's rare for the largest individual vendor to have more than 30% share at any given time.
The key to maintaining this is common interfaces. You write against POSIX or Qt or Java and it runs on most systems even though they're all different vendors.
But all of that stuff comes from the little guys. All the Unix vendors got together to create POSIX because then developers get access to more users by targeting POSIX than Win32, even though Windows at the time had more market share than any individual Unix. Sun creating Java allowed developers with mostly Windows customers to write their Windows applications in Java, which then gave them Mac and a dozen other platforms for free, including Sun Solaris, which the developer probably wouldn't have targeted on its own.
The phone hardware vendors could take a page out of that book and create their own modern POSIX for mobile to replace the Google-specific APIs on Android. Heck, they would only need one implementation of it, the same as all the old Unix vendors have largely standardized on Linux today.
Well, that IF is how you end your own argument.
In China, most of us don't give a deep thought on privacy and personal .* (personal freedom, personal rights etc). Because of this, I don't believe people here would build an OS to protect people's privacy and many other rights. You just don't have the base and market to do that here.
I think even if HongmengOS is not just a smoke, the best they could do is probably just a "better" Android "knock off". So I personally don't give that OS any high hope.
But I do have a little hope of course. As a Chinese myself, my hope is that their OS can be fully open sourced, so tech communities can learn how to build a OS from them, and maybe later fork it to fit people's own needs (for example: add privacy focused features).
My another hope is, maybe in the future, more and more (small) phone manufacturers will start to build phones that could run multiple OSs, like what Purism is trying to do. That way user will have more freedom in terms of choice.
Don't know which of my hope is likely to come true, we'll see. (I guess Purism is a better bet because they are making progress as we speak)
Under current policy, threats to US industry are threats to national security. That is why Canadian steel was listed as a national security threat. They aren't quiet about these things any more. Cutting into US market share is now openly described as a security threat.
Sure, maybe policy-wise, but common-sense wise the argument doesn't hold up at all. Google's minimal loss from business with Huawei is nothing compared to Huawei compromising the 5G infrastructure of the US.
If the US is so concerned, can't they just ban them from 5G infrastructure? Why is it necessary to fork Android?
The US dropped its steel tariffs against Canada and imports ~$325 billion in goods from Canada (equal to ~19% of their economy). Canadian steel represents <2% of that.
Meanwhile the US is going to allow Infineon to buy Cypress, an important US semiconductor company.
The US will have roughly a $21.x trillion economy at the end of 2019. The scale of non-China tariffs is entirely trivial, meaningless. So far there has been very little in the way of actual hits and targeting from tariffs - on the grounds of national security or otherwise - outside of the trade conflict with China.
The response misses the point that the US is saber-rattling to keep other countries in line. China is the only country to actually challenge the US, so now the US has to show everyone who’s boss.
Certain industries. Usually industries that are critical to the functioning of the economy, or that have been concentrated in hostile or semi-hostile nations without alternatives in friendly countries.
Policy, like everything else in life, is a lot more complicated than the internet likes to portray.
Note that I’m not attempting to assert a truth, moral, or effectiveness value for this argument.
The argument that Canada might cut off US access to steel is not plausible. The fact that the Trump administration is using the phrase "national security" to try to wring economic and political concessions out of Canada is transparent.
Almost all other countries seem to be okay with Huawei and any potential Chinese security threat.
I've not once in my life had someone ask for an iMessage, and Venmo I've only heard about online. The last time I sent an SMS was probably a decade ago.
Currently I live in LINE-land. 90% of my communication is on LINE. Among friends abroad, everyone has Facebook messenger but it's nobody's preferred method, rather a fallback. WhatsApp is popular among friends in Europe (Sweden/Spain). Don't know anyone who's mentioned Telegram/Signal.
It hasn't caught on as much in the US.
1. https://www.messengerpeople.com/global-messenger-usage-stati...
2. https://www.messengerpeople.com/global-messenger-usage-stati...
1. https://www.messengerpeople.com/global-messenger-usage-stati...
2. https://www.messengerpeople.com/global-messenger-usage-stati...
1. https://www.messengerpeople.com/global-messenger-usage-stati...
2. https://www.messengerpeople.com/global-messenger-usage-stati...
WhatsApp is the one you needed to mention, if you have that then you are locked into a phone number based service.
Apps can go to PWA mode, if you think of the business case for a third party app going PWA then it is a good one - ease of adoption as no need to install.
If Huawei wanted to they could host videos and offer better monetisation to content creators. If you get notifications that your favourite channels have new stuff does it matter what logo is at the top of the page?
If the deal was a good one to upload the entire back catalogue to HuaweiTube then it could work. People already are used to uploading their blog post to half a dozen different places, no reason why people could not do this with video painlessly on Huawei 5G.
People who release stuff early on Patreon could be customers for this.
If HuaweiTube also allowed you to do images - as per Instagram and messaging all in one neat service (treating images as single frame videos and audio as video with no pictures) then it could be a better service.
I think that WhatsApp is the rub, people can go to the web version of Facebook on a Huawei phone, they don't need the app.
Regardless of the shitty things YouTube's done, there's a reason it's still so popular.
We also really need to preserve the back catalogue. There's so much invaluable stuff only on YouTube.
YouTube isn't massively integrated into other services, if you had one platform that did email, video hosting, Patreon things and still image things then I think it could work.
If the on-boarding is with your device, as per how it is with Android then why could it not work?
The goal posts change all the time. Because MicroSoft failed at it doesn't mean they would fail if they did the same today. Or if some other player did.
gonna drop this here.
https://blog.erratasec.com/2014/03/we-may-have-witnessed-nsa...
It’s extremely hypocritical of the US to panic when other countries act the same, and sets up a direct and prominent precedent for all counties to ban American tech.
This is pretty disingenuous. You are ignoring a ton of history behind China, its authoritarian nature, and how Chinese companies are far more an extension of the PRC than US companies are of the US Government.
All companies are a threat to the national security of other countries so long as they are beholden to the government they are in. But as others have said, the severity of the threat changes drastically. You can be almost certain that Huawei, via the PRC, would compromise US 5G infrastructure given the chance. You might be reasonably more skeptical of a US company doing the same to another country.
Finally, your Wikipedia link contradicts your own post:
> [The CLOUD Act] provides mechanisms for the companies or the courts to reject or challenge these if they believe the request violates the privacy rights of the foreign country the data is stored in.
In fact, there is nothing here that would lead one to believe that the companies can be forced to hand over data on citizens from other countries. The legislation here pertains to the data of US citizens.
In China, the companies are the puppies; in US, the government is the puppy. This is probably a very fundamental difference.
All these mechanics are still there, those agencies are still running. I can’t imagine taking rose colored glasses and think the US and China are that different when the proverbial shit hits the fan.
We're not. People on HN like to rehash the past to bolster their arguments about the present, but they rarely mean anything.
It's like how any time someone mentions Chinese IP theft, someone bring up something about steam engines from 200 years ago. The sins of the fathers ought not be visited upon the sons.
Since historical arguments don't work for you here's proof of Australia bugging one of the poorest nations on Earth in the midst of an oil trade deal and passing along the information to a huge. The minister in charge at the time now works for that company with a very lucrative salary.
The only reason we know this is because a high ranking agent first complained internally about limited resources being diverted away from anti-terror work in Indonesia. He then complained to the Intel Ombudsman and was again ignored. Then he went public. He's now had a trial going on for a decade, his lawyer is also being tried for taking on the case.
https://www.smh.com.au/politics/federal/prosecution-of-witne...
This idea only works if all parties believe in it. I don't think the majority of people on this planet believe groups should be able to go on economic crime sprees that affect large swathes of populations then allow rich offspring to live comfortably with zero economic consequences.
I can see why this would be a desirable outcome for some but this feedback loop needs to remain intact to stop shenanigans.
But my argument is not about distant past.
I think the US is not caught into widespread IT theft and other public scandals partly because it has experienced agencies with good operational knowledge.
And partly because no one has been pushing the US enough to get into overt intelectual “war” against a country, but I feel we’re getting closer everyday. The day a country gets enough ahead of the US, we’ll get back to a public “us vs them” stance with stealing IP from that country becoming basically a patriotic feat, because you know, they’re the “ennemy”.
After all we've learned about NSA spying, I find it amazing when Americans go on about Chinese spying, especially given that Huawei, as yet, has not been caught spying on its customers.
https://www.bloomberg.com/news/articles/2019-04-30/vodafone-...
In that sense, Huawei is no different from an American company. It's simply a different government applying the pressure.
So, it's OK to do it then? The U.S. should pretend they don't exist?
> So, it's OK to do it then? The U.S. should pretend they don't exist?
The US should provide evidence for whatever claims it makes about Huawei. All there is, at the moment, is evidence-free innuendo. You don't use the power of the state to destroy a major company on the basis of pure speculation.
The Bloomberg claim of a backdoor, which you linked, is even more absurd. The "backdoor" was Telnet, which Huawei used during the initial configuration of the Vodafone equipment. Vodafone said to Bloomberg, "There is absolutely no truth in the suggestion that Huawei conceals backdoors in its equipment."
https://www.makeuseof.com/tag/linux-smartphone-operating-sys...
https://itsfoss.com/librem-linux-phone/
https://www.zdnet.com/article/linus-torvalds-on-android-the-... [2011]
ARM is not an architecture. Images have to be customized for every single device. Google has the power with the OHA to force all phones to use standard drivers, devicetree or UEFI (like Microsoft did), but they don't. Now we have 100s of forked kernels and no way to boot a mainline kernel on ARM devices (although PostmarketOS is trying to work on fixing this).
I wrote about this a while back:
A true national security risk of the highest caliber
Google can probably tell me how many bowel movements I had last week although I haven't gotten any such emails from Google Toilet Timeline.
Yet.
If they give access to intel data to other countries then it can be a competitive offer compared to Google Android.
I’m a bit dubious that Google is actually making that argument, given how obvious the consequences are.
A large portion of Google's implicit argument (that they'll never make to the public, but are probably making to the Trump administration) is that it's better for the dominant mobile phone operating system to be written by an American company with American values, subject to U.S. laws, than have Huawei fork it and potentially end up with the dominant mobile operating system controlled by a Chinese company with Chinese values and subject to Chinese laws.
I would love to be a fly on the wall where the actual trade negotiation strategies are being considered. There is a very popular and simplistic notion that this trade war is nothing more than uninformed and random actions on behalf of the whims of a delusional, unintelligent President, that there are no "adults" involved whatsoever. I suspect the reality is very much different than that.
https://www.politico.com/story/2018/05/22/china-japan-lighth...
As China figures out how to deal with Robert Lighthizer, US President Donald Trump’s top trade negotiator, Beijing has turned to an unexpected rival for advice – Japan.
A diplomatic source who has dealt with Lighthizer said Chinese officials and academics have reached out in recent months to foreign diplomats and former officials of American trading partners for wisdom on handling the US trade representative.
The irony of China looking to its neighbor and rival Japan for insight has been brought about by the pivotal role Lighthizer played in the US-Japan trade battles of more than three decades ago, with severe consequences for Japan.
“Lighthizer is tough and relentless in negotiations,” the source said. “Some Chinese officials and experts are looking for advice on how to deal with [him].”
As former US President Ronald Reagan’s deputy trade chief in the 1980s, Lighthizer negotiated two dozen trade agreements with foreign nations on a range of commodities, from steel to farm products.
When Japan’s trade surplus with the US was sparking a confrontation between the two countries, the former international trade lawyer pressured Japan to reduce steel and auto exports to the US by restricting its shipments of electronic and agricultural products with punitive tariffs and quotas.
Washington also launched a series of trade investigations against Japan, leading to the US dollar’s depreciation against the Japanese yen.
Japan’s economy went into a decade-long decline after an attempt to boost domestic consumption through the lowering of interest rates triggered a bubble economy built on inflated real estate and stock market prices that ultimately collapsed.
"the Services are provided by Google Ireland Limited (“Google”), a company incorporated and operating under the laws of Ireland"
to quote the terms of service. Providing any of my data to USA secret service would appear to be espionage, probably treason, and against EU law. I'll bet NSA have access to everything Google know (internally) about me.
The Chinese government probably have all details of my interactions with baidu or Ali Express too.
They look the same to me in this respect, only the Chinese aren't telling my government who they're allowed to do business with.
China is a dictatorship, has no independent judiciary/media, routinely kidnaps Chinese people (not even citizens) in foreign countries, is running the world's 're-education' centre where millions of journalists, Muslims etc are all being detained and is a police state unless anything in history.
US maybe stealing your data. But at least you can go to a court or deal with the media to advance your cause without fear of retribution.
China and USA are both doubtless spying on my country's population and accessing my PII/data as part of that.
I'm pretty sure my legal recourse against NSA is identical to that against the Chinese secret services, zilch.
Let's be realistic. Trump wants us to stop using Huawei _and_ use USA company produced comms equipment. A consideration of that is then USA can do what they're claiming China is doing. AFAICT you have a legal framework in place to enable just that.
What's most incredible to me is that GCHQ haven't endorsed the apparent false claims, which actually gives me some hope about UK (but equally could be meta-games on post-Brexit trade deals; or false flags; or whatever).
No US company is producing wireless comms equipment though - it's all European and Chinese
When you access services provided by Google Ireland Limited, you are dealing with a different entity, which last I checked controls a whole lot of money and employs some finance people, customer support, and SREs. Google Ireland is a wholly-owned subsidiary of Google Inc, and contracts with the latter to provide services to Europeans using software owned by Google Inc. Google Ireland follows EU and Irish law. All of this is irrelevant to Huawei, whose contract is with Google Inc to license technology within Android. It is also irrelevant to the U.S. government, who likely gets all the intelligence on Europeans that they need through their Five Eyes partnership with GCHQ, and is far more concerned about potential Chinese, Russian, or Middle Eastern adversaries than they are about Europeans anyway.
Man, now I really do want to see the original source material.
By Google's own logic like 95+% of Android phones could be considered a national security risk, because only a small percentage actually receives patches in time or at all.
that google is taking on the AT&T mantle should be no surprise.
Huawei will bring their own OS and Android will loose market share because of it.
That would be a more convincing national security argument.
Turns out that if you can compromise someone's phone, you have a window into everything that person does, sees, and hears; both online and off.
And other countries have security concerns with Huawei besides US so this isn't just about the trade war.
I'm not saying it's unjustified, but I like to put things into perspective when observing geopolitical developments, their impact and what really is going on..
The truth is that China will inevitably overtake the US as the largest economy in the world soon and that pisses the Americas off.. so now they want to stall the Chinese economy as much as possible, but being in China right now and seeing how they are literally not dependent on anyone but themselves I can promise that all efforts are wasted. I'm not a huge fan of the totalitarian communist government in China, but so far I have not felt threatened by them, whereas I feel my personal freedom and privacy has been violated constantly by the US and US companies.
Why those phones will be less secure and therefore easily hacked? Which kind of argument is that?
How a huawei phone with a forked android is any less secure than any 2-year old android phone from $randomanufacturer (not longer receiving any OS update at all)?
> Huawei must raise 'shoddy' standards, says senior UK cybersecurity official
> GCHQ technical director says he hasn’t seen anything that reassures him company is taking necessary security steps
https://www.theguardian.com/technology/2019/jun/07/huawei-mu...
Huawei's drivers, which is what led GCHQ to probe into Huawei's code and write a rather uncharitable report on what their coding practices look like [1], are not. Admittedly, as members of the public we can only take their word for it that they found shoddy code by any reasonable standard. But if the latter is true and any indicator of how they'll maintain their own fork of Android, it's doesn't inspire much confidence.
https://www.theregister.co.uk/2019/03/28/hcsec_huawei_oversi...
Some of it. Certainly not many of the hardware drivers. There's a reason that updates are dependent on hardware vendors and mobile network operators and that most phones don't have fully functional Lineage builds.
The thing about exploits is that it only takes one. It doesn't matter if Huawei adds another one when there are already thousands to choose from.
Google is trying to move Android to a more secure footing with Titan, Play Protect, verified boot, etc like ChromeOS. If Huawei becomes the dominant Android phone manufacturer, there is the possibility for things to be worse than they are today.
This seems like a weird argument, I get the gist but it kinda focuses on an after effect that i'm not sure should wag the dog.
No, common.. the reason Google thinks its a bad idea to block Android it's because the Chinese don't care. They just fork Android yes, and that's it. Congratulations, you brexited yourself out of the Smartphone-OS market in China. Where you once had integration and some influence, you are now removing yourself as a dependency.
That's hilarious, a fourth party in speculating about what might have been said in private as reported by a paywalled publication, you know: journalism!
I work in telco and can assure you that Huawei is a security concern especially given the changing landscape of technology (more complex, more containerised architectures) which allows for more attack vectors.
People keep forgetting that China is a dictatorship, has no independent judiciary/media and a long pattern of IP theft, hacking etc.
a) why exactly is google qualified to comment on national security?
this either means they are verbally overstepping their bounds, know more than they should about secret+ programs, or are processing their vast data in a security-relevant way on the scope of a nation state
b) phones being hacked != compromised telecom infrastructure
c) if android fragmentation leads to less security on a national level, then by extension, google has monopoly or at least cartel level influence
probably more..
Would we allow a US company to circumvent sanctions on selling technology to refine nuclear material to Iran on the grounds that they might blow themselves up and poison US allies or Americans abroad?
That's the legal context I'd view this argument in.
Our tech companies should not be lining up to lick the boots of a hostile economic power. I can't even believe this is socially acceptable and am relieved it's starting to become legally unacceptable.
Huawei needs to be completely shut out of the U.S. market and Google should be ashamed for working with China. This is a net benefit to U.S. security.
Many U.S. companies have been afraid to report Chinese IP theft due to fears about retaliation and stock price: https://www.npr.org/2019/04/12/711779130/as-china-hacked-u-s...
Years back when I was still freelancing, I worked with a U.S. firm who sold specialized lightweight cases for a popular sporting product. Their Chinese manufacturer stole the tech, ignored the patent, sold the same product to the U.S. market at half the price and put my client out of business.
These claims are not unfounded or unsubstantiated. There has been an ongoing pattern of abuse from China for decades and until recently nobody in our government was giving a shit about it.
If they are not under your jurisdiction, there's a limit on what can be done. Even if you win, your tech is already in other people's hands.
> We, the US and other nations, run by the laws.
On paper. Other nations don't do as much enforcement as you think – if at all.
That's pretty straight forward, someone from the US exchanges information with someone who has a Huawei phone who is outside the US, someone who has imported a Huawei phone, or someone who is travelling / working in the US and has one. Which given that it's the number 1/2 phone maker in the world, is pretty likely
In the case of Huawei, the US government's concerns mostly seem to be about Huawei possibly spying on the devices they sell. On the other hand, there doesn't seem to be any particular basis for concern about allowing them to use US software such as android. Therefore, from the perspective of the security threat that is the putative basis for blacklisting Huawei, the fact that Huawei is now blocked from using Android is merely an incidental side effect.
(Of course, if the real goal is to hold Huawei hostage as a means to negotiate a trade deal, then threatening to destroy their smartphone business by blocking them from using Android may be precisely what is really intended.)