HNHacker News
TopNewBestAskShowJobs

abc-xyz

1,253 karma · joined October 24, 2017

清华
submissionscomments
abc-xyz··on Opera GX Gaming Browser
https://www.theverge.com/2019/4/3/18294030/tencent-xiaomi-ch...

https://github.com/996icu/996.ICU/pull/24891

abc-xyz··on Opera GX Gaming Browser
Qihoo 360, the Chinese company that brought Opera, recently showed the world why you should never trust Chinese hardware and software.

On the outside a browser seem harmless, but Qihoo 360, Alibaba, Tencent and all the other Chinese companies that operate popular browsers, kindly showed the world what they’re capable of when they decided to make the 966 GitHub repo inaccessible to everyone using the Chinese browsers (which many people are unknowingly doing since they come preinstalled with their cheap phones).

Just to be clear, they didn’t block GitHub as a whole, but they instead rewrote the content of a specific repo despite HTTPS being present. They could do the same with every website in the world, such as rewriting the content of Wikipedia articles, rewrite the content and websites returned in your Google search results, in your Facebook, YouTube feeds.. write fake NYTimes articles and modify the frontpage to link to them, or push the fake article to a specific group of users on social media, or rewrite Google Chrome’s download page to download a modified version that is bundled with malware. The possibilities are endless, and keep in mind that the companies themselves were willing to abuse this power to silence software developers complaining about long work hours.. imagine what the CCP would force them to do.

abc-xyz··on Seven 'no log' VPN providers accused of leaking 2TB of user data
It’s sad to think VPN logs might be accepted as a source of truth. They probably are in most countries, but they really shouldn’t be.

If your crime is downloading Frozen, and the authorities can’t find any trace of the movie on the device the logs claim was used, then it would be shameful if the logs alone were enough to convict the person.

abc-xyz··on Huawei 5G kit must be removed from UK by 2027
You probably wouldn’t see a browser as a security risk either. In a recent example, all the big Chinese browsers blocked or rewrote the content on GitHub’s 996 repo. Imagine if Chinese browsers became mainstream, then they could rewrite Wikipedia articles, insert their own links/propaganda in google results, Facebook feeds, change download links to include a version bundled with spyware, etc. They already demonstrated that they’re willing to do it with the GitHub repo.
abc-xyz··on Portland approves 10% cap on fees that food delivery apps can charge restaurants
The fact that your company’s product end up being represented by the store and its actions. Mistreating employees and customers, discrimination, bad customer service/return policy, terrible product placement, etc. There are so many ways a store can hurt your company’s reputation by association.
abc-xyz··on Portland approves 10% cap on fees that food delivery apps can charge restaurants
I’m pretty sure that in most countries, a store can’t just sell another company’s products without entering an agreement with them. This agreement allows the company to set a minimum and maximum price for the product.

Imagine you’re selling chocolate that you want people to associate with luxury/wealth. To achieve this you might want to limit resellers to be 5 star hotels and luxury stores rather than the 1 dollar store.

abc-xyz··on U.S. looking at banning Chinese social media apps, including TikTok
What makes you say Apple is well-known for refusing invasive government requests? They’ve gladly been handling over all iCloud data for Chinese users to the CCP (meaning many of its users were unknowingly sharing all their sensitive videos/pictures/text with the authoritarian government). They’ve also been banning foreign apps from the Chinese App Store, and have similarly banned foreign apps in other countries, such as India.
abc-xyz··on DuckDuckGo browser seemingly sends domains a user visits to DDG servers
For me the fact that they’re open source. This thread is a prime example of why it’s so important. We really have no idea what DuckDuckGo is doing because they’re closed source. For all we know they could be forwarding users’ IP to Microsoft/Yandex/etc.

If you want to market yourself as a champion of privacy, then the absolute minimum criteria should in my opinion be that your codebase is open source.

abc-xyz··on DuckDuckGo browser seemingly sends domains a user visits to DDG servers
They’re pulling info from all the other search engines, not just DuckDuckGo. FYI DuckDuckGo is also pulling their results from other search engines, the only difference is that DuckDuckGo aren’t being blocked/rate-limited by them, presumably because they’re paying for API access.

If you hosted your own instance then it would be a lot more reliable since the IP wouldn’t send a suspiciously high amount of requests.

As for your trust argument, I couldn’t disagree more. You choose to trust DuckDuckGo, who happens to be closed source, because of their branding. The same way people trust/trusted Google/Apple/etc. because of theirs. This thread is a perfect example why being open source is the most important thing for any privacy service (because otherwise this privacy leak likely wouldn’t have been discovered, and people wouldn’t have known that the company so carelessly violate people’s privacy and fail to correct it when people point it out.. it should really make you wonder what’s happening in the search engines codebase).

abc-xyz··on DuckDuckGo browser seemingly sends domains a user visits to DDG servers
Ask.Moe also support bangs (I know !g and !gt works, not sure about scholar). Searx doesn’t but I imagine they’d gladly accept a pull request for it.
abc-xyz··on DuckDuckGo browser seemingly sends domains a user visits to DDG servers
Also worth mentioning they're closed-source, US-based and for-profit. Why exactly do people trust them? Simply because they write a few articles/ads saying "privacy is important"?

If you're willing to sacrifice search quality for privacy, as in switching from Google to DuckDuckGo, then you might as well take a step further and switch from Google to Searx/Ask.Moe.

abc-xyz··on Whistleblower provides blocking orders for over 4000 websites in India
The government could technically do that (and worse) if they controlled the browser. China for instance have a few popular browsers (owned by Tencent, Alibaba, Xiaomi, and Qihoo 360) that made it impossible to either view a GitHub repo or perform certain actions, such as starring it. Imagine them rewriting Wikipedia articles to spread propaganda, or modify a download url to point to a cracked version that infect your device with RAT, etc).

I’m not familiar with the browser situation in India, but it’s yet another reason why we should recommend and support Firefox, and why we should avoid software and hardware from authoritarian countries.

abc-xyz··on iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
I do and I don’t think it’s an important distinction at all.

That being said, I of course know that the Chinese government didn’t force Apple to implement this privacy violating feature, and I know that the Chinese government didn’t force Apple to allow TikTok to abuse it. But many people see Apple as a privacy conscious company thanks to its marketing, and its good to remind people that for Apple, privacy is simply a marketing gimmick.

abc-xyz··on iOS14 reveals that TikTok may snoop clipboard contents every few keystrokes
Maybe the Chinese government forced Apple the same way that they’re forcing them to secretly share [Chinese] users [in China] most sensitive data with the government (photos, videos, notes and everything automatically backed up by iCloud).
abc-xyz··on Netgear 0-day vulnerability analysis and exploit
Slightly off-topic: any not-made-in-china router recommendations?
abc-xyz··on Zoom Acknowledges It Suspended Activists' Accounts at China's Request
> our Twitter and Facebook

Aren’t you a CCP member?

(Sorry in advance if you take offense to me assuming your nationality and political allegiance based on your comment history.)

abc-xyz··on GitHub is working on renaming default branch from “master”
> 4. If it prevents even a single black person from feeling more isolated in the tech community, feels like a no brainer to me!

Does/did slavery only affect black people?

It’s really tiresome to see companies and celebrities voice support for equality, freedom, human rights in America while staying quiet (and even telling people to keep politics away from their platform) when it comes to the Hong Kong protests.

abc-xyz··on DuckDuckGo, Google, and Android choice screens
People should get behind an open source solution, such as Searx (https://searx.space/) or Ask.Moe (https://ask.moe/).

I love DDG, but at the end of the day they’re for-profit, US-based and closed source.

abc-xyz··on Twitter suspended Indian dairy giant Amul for call to boycott Chinese goods
As per your article:

> “We have asked Twitter why it blocked our account,” Sodhi said. “We are waiting for the reply.”

Sounds like they suffered from more than a simple CAPTCHA before their login (in which case it also sounds absurd to publicly restrict the account).

Twitter says:

> “Safety and security of the accounts is a key priority for us and to ensure an account has not been compromised sometimes we require the account owner to complete a simple reCAPTCHA process,” a Twitter spokesperson said in a statement. “These challenges are simple for authentic account owners to solve, but difficult [or costly] for spammy or malicious account owners to complete.”

This makes no sense. It's a ~9 year old verified account with 250k followers, operated by one of the largest companies in India, with no unusual tweet activity.

abc-xyz··on The Brave web browser is hijacking links, and inserting affiliate codes
Waterfox sold-out to an ad company (which “has developed a pre-targeting platform that identifies and unlocks consumer intent across channels including social, native, email, search, market research and lead generation rather than relying solely on what consumers enter into search boxes.”)

The founder also claimed that Waterfox was never pivoted as a privacy-focused product.

abc-xyz··on Google Domains blocking all Gitbook URLS: post-mortem
I personally prefer Gandi, but also use name.com and Cloudflare - haven't heard any horror stories about either of those 3 registrars.
abc-xyz··on Google Domains blocking all Gitbook URLS: post-mortem
Namecheap dumping personal info without informing their customer (https://news.ycombinator.com/item?id=18063667), Namecheap threatening to shut down a site if the customer doesn’t delete two images posted there within 24 hours (https://news.ycombinator.com/item?id=14139288)
abc-xyz··on Zoom says it won’t encrypt free calls so it can work more with law enforcement
You really shouldn’t hold Apple to such high standards. Just look at what they’re doing with iCloud in China.
abc-xyz··on Two years in, GDPR defined by mixed signals, unbalanced enforcement
> Turns out... actually yeah.

That might be how you feel. For me, GDPR and the “Cookie Law” have been amazing, as they make it incredibly easy to detect which websites and businesses you should avoid.

I do however wish they’d be a lot more aggressive with the fines.

abc-xyz··on [dead]
Never heard of “PureTorrentDownloader” so I tried googling it. As far as I can tell, it doesn’t exist, and everything claimed in the article is a lie.
abc-xyz··on Jepsen: Dgraph 1.1.1
I love working with Dgraph but I hate DBA-related work. As a result I only use it for local projects. I’ve once experienced the data becoming inaccessible and being unable to restart the docker containers (which sadly happened before I began to regularly export data, but luckily with data that wasn’t too important), but I’ve otherwise only had positive experiences (micheldiz is great).

I’d probably use it for pet projects if they made it easier to automate backups to the cloud, and I’d use it for all projects if they offered a hosted solution.

abc-xyz··on China clamping down on coronavirus research, deleted pages suggest
I don’t know about you but I find it very concerning that mods of major subreddits like r/worldnews and r/coronavirus are censoring comments like:

> “Yeah but you can’t trust any of those numbers coming out of China. It’s gotta be way worse than they’re letting on”

abc-xyz··on China clamping down on coronavirus research, deleted pages suggest
Her name was Huang Yan Ling (黄燕玲) for anyone who might be interested in learning more about the potential patient 0. The evidence is very compelling and this video does a good job at presenting it: https://youtube.com/watch?v=bpQFCcSI0pU
abc-xyz··on China clamping down on coronavirus research, deleted pages suggest
Foreigners all over the world are likely to be targeted as long as they stand out. For instance, in China, Africans are being kicked out of their homes and forced to sleep on the street (because no hotel/apartment will accept them), countless stores, including a McDonald’s restaurant, are refusing to serve foreigners (blacks are in particular targeted).

Please be mindful that it’s not just Chinese or Asians being targeted, and that the racism foreigners are experiencing in China right now is far worse than what the Chinese are experiencing elsewhere.

abc-xyz··on China clamping down on coronavirus research, deleted pages suggest
There’s a lot of value in paying/blackmailing the moderators. You can clearly certain subreddits, such as r/worldnews, becoming increasingly pro-China. The mod team played a huge role in this, as they have been perma banning people who post a lot of anti-China comments. I’ve for instance had several accounts banned (one simply for sarcastically saying “Thanks China”) - there were also a thread on r/China where plenty of people mentioned they had been banned for similar reasons.

If you follow r/WatchRedditDie then you can see this anti-China censorship on a daily basis.. for instance, this is on the frontpage right now: https://i.imgur.com/RuHpkC5_d.jpg

← PreviousPage 6 of 11Next →