News for hackers. Stuff that matters.
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @12:53PM (#15295869)
I really hope that we can accept turnabout as fair play. At some point, China is going to have technology that America wants and I hope that we can pilfer it.

On the flipside though, industrial espionage is a wealth transfer that reduces inequality. I recently purchased tires for my car - I got some Chinese ones that were 1/2 the price of the other tires and the Chinese tires are shockingly fine. I don't know how they'd get the price and quality without benefiting from industrial espionage.

Perhaps something more ideal would be to opensource everything that's been stolen. It'd encourage companies to take security seriously and it would reduce the value of the stolen property.

Lastly, I kind of wonder how much of this problem is due to companies insisting on removing dependencies from certain people / groups. Think of all the documentation people create 'in case you get hit by a bus tomorrow'. When my grandpa worked, it sounds like it was fine to have undocumented things so long as people knew about it (e.g watch out for that machine, it's sensitive to humidity and here's how to reset it). Now, I'm sure some middle manager would insist that the 'operational knowledge' be documented and stored somewhere that becomes that much more lucrative for a thief.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by chisleu on Wednesday September 20, 2017 @12:59PM (#15295936)
> ... I hope that we can pilfer it.

Steal and steal alike? No thanks.

> I don't know how they'd get the price and quality without benefiting from industrial espionage.

They engineer their internal economy to keep cheap labor at near starvation levels of subsistence.

> Perhaps something more ideal would be to opensource everything that's been stolen.

Robin Hood arguments are vapid. Stealing is often costly. Hackers aren't free, although the Chinese government does basically quarantine anyone with any chops.

> Now, I'm sure some middle manager would insist that the 'operational knowledge' be documented and stored somewhere that becomes that much more lucrative for a thief.

Actually, all levels of management want information to be there because you don't want to lose enormous sums of money if someone leaves and doesn't document the location of encryption keys before taking a secret job and disappearing into Asia or eastern Europe.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by ajross on Wednesday September 20, 2017 @03:59PM (#15297646)
> They engineer their internal economy to keep cheap labor at near starvation levels of subsistence.

The first clause is true enough, the latter seems to be missing a ton of context, given y'know, the actual famine this same government caused two generations ago.

Low wages being a growth engine may not be fair or uniformly beneficial. Compared to the desperation of the cultural revolution it's sort of a paradise. Things are getting better, not worse.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @01:20PM (#15296129)
They engineer their internal economy to keep cheap labor at near starvation levels of subsistence.

But that doesn't explain how the tires are so good. Building a good tire is very, very difficult. I'd say that my cheap chinese tires are comparable with state of the art tires from 2002/2003, that requires much more expertise than a dozen good engineers can provide. In my opinion, the tires' performance is evidence that they use someone else's technology.

Robin Hood arguments are vapid. Stealing is often costly. Hackers aren't free, although the Chinese government does basically quarantine anyone with any chops.

But stealing is worth it and the right robin hood arrangement could reduce the expected value of industrial espionage. Weigh the costs and benefits yourself.

Actually, all levels of management want information to be there because you don't want to lose enormous sums of money if someone leaves and doesn't document the location of encryption keys before taking a secret job and disappearing into Asia or eastern Europe.

And there's the rub, how many people would leave their company if they had the company's commitment to stable employment? About once a year I sign something that verifies I understand that I'm an at-will employee, do you think that garners my loyalty?

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by toss1 on Wednesday September 20, 2017 @01:45PM (#15296395)
>industrial espionage is a wealth transfer that reduces inequality

yeah, the worst kind of reduction in inequality -- stealing the work product legitimately earned by the developer.

Someone going into your house and stealing all your electronics, and publishing your code also reduces inequality, I suppose you're ok with that?

>...1/2 the price of the other tires and the Chinese tires are shockingly fine Just because you aren't able to discern the difference between your cheap Chinese tires and real ones doesn't mean that there is no difference. Perhaps they are adequate to the task of your daily driving, or perhaps the difference will only appear when they delaminate/burst/tear off the bead/fail to grip/etc. at the wrong moment and you find yourself in the ditch or in oncoming traffic.

I'm continuously surprised at how credulous the HN readership is about counterfeit/stolen/copied technology (perhaps have a look at my post in my current field of expertise regarding counterfeit carbon bicycles, not unlike tires in complexity [0]). Perhaps HN readers have a bias from experiencing digital copies as 100% reliable, but in the manufacturing world, there are myriad opportunities to introduce bad variables. It's certainly remarkable that the Chinese company has produced a minimally usable tire, but I wouldn't trust my life to it without a lot more testing (for a yard truck, sure, but on the road...).

[0] https://news.ycombinator.com/item?id=10333244

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @02:05PM (#15296612)
yeah, the worst kind of reduction in inequality -- stealing the work product legitimately earned by the developer.

I'd say that a "people's revolution" is worse but that's political.

Someone going into your house and stealing all your electronics, and publishing your code also reduces inequality, I suppose you're ok with that?

You wouldn't download a car... the mechanism of IP theft usually isn't taking something tangible, it's duplicating something. If you take my phone, it means I can't use my phone. If you copy my journal, I can still use my journal. They're categorically different.

but in the manufacturing world, there are myriad opportunities to introduce bad variables. It's certainly remarkable that the Chinese company has produced a minimally usable tire, but I wouldn't trust my life to it without a lot more testing

So I hope their IP theft team was good enough. But tires have to pass DOT certification so they meet some minimum standard.

I'm glad to live in a country where I can decide what's right for me and you can decide what's right for you.

But the knife of quality variability cuts both ways, sometimes major manufacturers have issues. The top of the line tires (Pilot Power 3) I recently put on my motorcycle we recalled [0]. Thank goodness they didn't fail on me, but I might have been better served by crappy tires than my defective Pilot Power 3 tires. Unless you have some analytical way to evaluate the specific tires you're putting on your vehicle, you have to take a leap of faith. It's not unlike handmade carbon bicycles - some of them have issues even from the best manufacturer, the quality difference is a measure of degree, not a binary function.

FWIW, this Chinese tire manufacturer also makes FAA certified tires for airplanes so they have demonstrated the capability to make tires for demanding applications.

[0]: https://www.consumeraffairs.com/tire-recalls

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by toss1 on Wednesday September 20, 2017 @05:36PM (#15298527)
>If you copy my journal, I can still use my journal. They're categorically different.

maybe sub-categorically different, but not completely different.

If I steal your journal, you lose a key property of it -- its privacy. If your journaling your life as a thief, you could lose your freedom, if you're journaling your life as a spy, you may die. But sure, you haven't lost your ability to use your journal!

More importantly, if you have spent your time, effort, and savings do develop a new valuable process, and I steal it, sure you can still use it, but you LOSE the ability to use all of the profits that MY company now gains by selling products made of that same process. You lose your market advantage, you lose sales, you lose income.

I watched this happen with a small high-performance engine producer who had their engines made in Taiwanese factory. They saw some identical models that were basically being made by their factory & sold out the back door. They called their factory and they stopped the sales. But the competitor now had a large enough bankroll to hire another factory to make similar designs. AAANND now, they have a half-priced competitor, much lower quality, but similar specs, and they can do less R&D.

So, NO, your justifications that 'they can still use the thing that they had/have' are, to put it bluntly, merely bullshit justification for theft.

And it seems that you just said it was OK to take and publish your code under my name? Care to publish your IP addr and credentials so we can freely access your journals and code to publish for ourselves (presuming that you produce something of value)?

> quality variability cuts both ways yes, virtually every manufacturer has an occasional problem. The good ones have fewer, address them proactively, and don't wait to be forced by the govt regulators. Hope your Chinese guys are the former, but I wouldn't bet on it.

Happy that your tire guys pass DOT and some FAA certs on their products; that is indeed a good sign. Still doesn't justify IP theft tho.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by valuearb on Thursday September 21, 2017 @12:39AM (#15300637)
The engine designs could have been copied by someone not in the supply chain. They could be reversed engineered by simply purchasing one.

If your business can be copied by the people who actually make your products, you have no barriers to competition, and thats a terrible business.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by toss1 on Thursday September 21, 2017 @12:18PM (#15304985)
No. Copying the designs and hiring out a production run is orders of magnitude more capital-intensive than "simply purchasing one" of the units already in production.

For the reverse-engineering, you must first purchase some units, then produce your own accurate measurements & drawings, then find a manufacturer or setup your own factory, and then pay for tooling, all BEFORE you make unit #1. This is far more complex & costly than "simply purchasing one".

For the thieves, all of those expenses had already been paid by the original designer. They merely bought their units at the marginal cost of production.

This eliminated the startup cost for the competitor's business. The seed capital and IP investment they would have needed was replaced by the theft. They then bootstrapped the stolen knowledge and new profits into their own production.

And the oritinal company is surviving and outpacing the theiving Chinese competitor, disproving your contention that 'they have no business'.

More generally, there isn't any business where you wouldn't be able to compete if you could buy the finished product out the back door of the factory at the marginal cost of production. If we could buy Apple or Samsung products out the back door of their factory at the marginal cost of production, we could certainly make a lot of profit very fast. Yet I see no viable argument they have no business model.

Seriously, stop trying to justify theft.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by valuearb on Thursday September 21, 2017 @01:34PM (#15305709)
I'm not trying to justify theft, I'm trying to get you to think about their business model and how good it actually is.

What is the engine designers key competitive advantage or advantages? What is their IP?

Foxconn could ship iPhone X's out the back of the factory and sell them itself as "FoxPhone X"s. What stops Foxconn from doing that, that didn't stop the engine designers outsourcers?

What did the engine designers do wrong, that they should have done differently?

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by toss1 on Friday September 22, 2017 @09:58AM (#15312187)
Glad you're not ok w/ theft & are looking for improving biz models.

Their biz model is pretty good, as evidenced by the fact that they're still going strong despite the theft.

Their IP is primarily the engine designs for high power-weight ratios, reliability, manufacture-ability, etc. They sell to military and high-performance hobbyists.

Foxcon is probably stopped only by the threat of Apple's large legal dept and the likelihood that they'd lose their biggest contract, probably be put out of biz, executives possibly executed for making an international incident/harming the PRC (it's China...).

Basically, compared to a startup who is a small customer of a foundry/machine shop, Apple stops Foxconn with threat of enormous power.

IMO, what this biz should have done differently is found a way to build in US or MX with a more trusted manufacturer.

Or, if they had no choice but China, split the work between multiple unrelated suppliers so that no one supplier has any surplus or ability to create it. e.g., buy the materials at Source A, provide to Source B for with requirement to produce X cast parts, take those cast parts to machine shop w/req to produce X machined parts and ship all bad parts for inspection. Preferably ship each intermediate step to your own agent for inspection and shipping to next step, partly for verification, and partly to prevent supply chain from making knock-offs.

I know one of my Swiss suppliers had some of their material mfg in China just for the Asia market, I expressed skepticism, and they said, "oh, no, we're making sure they have nothing -- we send them only the pre-made chemicals ready to mix & pour, and their only job is to pour/cure/cut. They have no idea what they are mixing, and it'd be nearly impossible to reverse engineer".

In short, take more serious steps to protect IP.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @11:06PM (#15300310)
If your journaling your life as a thief, you could lose your freedom, if you're journaling your life as a spy, you may die. But sure, you haven't lost your ability to use your journal!

Though to be fair, I'd lose my freedom or life because of what I did, not because of the thief.

More importantly, if you have spent your time, effort, and savings do develop a new valuable process, and I steal it, sure you can still use it, but you LOSE the ability to use all of the profits that MY company now gains by selling products made of that same process. You lose your market advantage, you lose sales, you lose income.

I'm well aware of the cost, though it's unclear whether society is strictly worse off. I imagine a lot of IP theft is Pareto superior - that shouldn't affect the calculus of whether or not we prosecute it, and I'm simply arguing about what could be.

So, NO, your justifications that 'they can still use the thing that they had/have' are, to put it bluntly, merely bullshit justification for theft.

Under my system, it wouldn't be theft. It'd be business as usual. It might even be better than the current status quo that asks rights holders to perform a lot of work to get their rights catalogued but doesn't do a ton for rights holders when their work is infringed upon. How much does a patent cost? Too much. How much does it cost to get an injunction at the WTO? If you have to ask, you can't afford it.

And it seems that you just said it was OK to take and publish your code under my name? Care to publish your IP addr and credentials so we can freely access your journals and code to publish for ourselves (presuming that you produce something of value)

If turn about is fair play. You can publish my code under your name if you permit others to do the same.

The status quo is that IP laws exist and there are mechanisms to enforce it - those mechanism seem underutilized. If I had any authority in the United State or the WTO, I'd CHIMP OUT at what China's doing. Especially if I were in America and controlled a police force, I'd immediately start rattling the sabers. I'd arrest every Chinese person in America with affiliations to the Communist Party and I'd take the passport of every Chinese student (though I'd probably offer them U.S citizenship if they renounced their Chinese citizenship and really do a brain drain). I'd put the communist party affiliated people in bad conditions and use not-quite-tortue to force concessions out of China all while pounding them with an unrelenting cyber attack, very aggressive maneuvers in the South Chinese sea, and construction an iron dome of missile defense systems in every US aligned nation in Southeast Asia. What their doing is nothing short of economic acts of war and I would respond in kind.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by toss1 on Thursday September 21, 2017 @12:26PM (#15305052)
Well, we agree about the economic acts of war, but not about IP theft.

Open source is great, but your original argument would say that it's OK not only for me to copy and republish your works, but also to close-source it under my name.

It'd also be OK for me to take your journal, edit it a bit, and publish it. Then you might die because of my editing rather than your actions.

No question, IP rights as constructed are often abused. We might also note that SpaceX is not using patents, but trade secrets because of this. And just because it's not patented, doesn't mean that Elon would not be justifiably pissed if the secrets got stolen.

Stealing is still stealing, and we need to understand that just because part of the bundle of rights to some IP still remain behind (e.g., the original copy remains), that something valuable hasn't been stolen.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by toss1 on Wednesday September 20, 2017 @05:36PM (#15298529)
yes, I'd agree that a "People's Revolution" is a worse kind of inequality reduction.
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by natch on Wednesday September 20, 2017 @01:04PM (#15295986)
>I don't know how they'd get the price and quality without benefiting from industrial espionage.

It’s OK to not know how, but that doesn’t mean there wasn’t a legit path to that knowledge for them. Having a theory doesn’t mean the theory is the only explanation.

Definitely industrial espionage happens all the time but another thing that also happens is that western companies hook up with Chinese partners and give over their know-how in exchange for dubious benefits like limited access to the Chinese market.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @01:29PM (#15296213)
You're not wrong but if it were that easy to make tires with the level of quality that my tires have, I'd expect to see options from countries that aren't known for industrial espionage. As it is, the only decent cheap tires are from China. If you can source cheap Thai tires, you'll find that they're inferior to the Chinese tires.

Does China have a comparative advantage in tire technology over Thailand? Probably. Why? Probably because of industrial espionage. If it were that easy to make decent cheap tires, you'd probably see other places doing it.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by natch on Wednesday September 20, 2017 @10:03PM (#15300033)
China’s market size is much bigger even accounting for the fact that it’s more of a potential market size than an actual one (1.4 billion population for China versus 66 million population for your example of Thailand.... a 20x difference so that should answer your question about why not Thailand.)

That makes makes western companies do remarkable things in China. Not just partnering, but also opening branches in China and training up local staff with the latest techniques. Before long the leading edge technology is being developed in China, not elsewhere. This isn’t a made up scenario; it’s what has been happening for a couple of decades and now it’s getting pretty hard to ignore.

Tim Cook (Apple) said: “The U.S., over time, began to stop having as many vocational kind of skills,” Cook explained. “I mean, you can take every tool and die maker in the United States and probably put them in a room that we’re currently sitting in. In China, you would have to have multiple football fields.”

So the skills move there, the techniques move there, and pretty soon it should no longer be surprising that they also have the ability to make stuff well there.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by cat199 on Wednesday September 20, 2017 @01:59PM (#15296542)
Actually, if you could source cheap Thai tires, the factory would probably be bought out by a multinational who could too, and the rebranded product would then sold at the higher world price...

https://www.michelin.com/eng/michelin-group/organization/fac...

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @02:11PM (#15296656)
They're not Thai tires. They're Michelin tires made in Thailand.

If the Thai tire technology were world class, Michelin wouldn't be able to add value to the Thai factory.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by virtuabhi on Wednesday September 20, 2017 @01:08PM (#15296015)
What kind of thinking is this - Let them steal now so we can steal from them later? WTF. Also keep the 50% of the tire cost you "saved" to get a new set of tires after 6 months.
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by stale2002 on Wednesday September 20, 2017 @02:06PM (#15296617)
It's not an undefensible argument.

What do you think all the stuff about "information wants to be free", Aaron swartz ect is about?

It is about ending intellectual property laws, and all laws that keep information and science and innovation locked up.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @01:16PM (#15296086)
It's humanitarian - we'd be better off if more technology was more available.
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by rconti on Wednesday September 20, 2017 @03:47PM (#15297538)
Out of curiosity, how do you know the tires you bought are good? What metrics are you using for analysis?

I primarily buy performance tires and will avoid the hell out of Chinese tires, but I legitimately am curious about what metrics you're using. We all know there are ways to measure dry and wet grip, compliance, cold weather performance, longevity, resistance to drying/cracking/aging, but I'm not really familiar with any studies that try to compare Chinese brands with more traditional brands. I'm sure they're out there, though.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @04:50PM (#15298117)
I care about noise and fuel efficiency. I'm getting roughly the same milage as I got on my eco rated goodyears, my car is 5 db quieter at 70 mph. My old tires used to start squealing on clover leafs at ~40 mph (with lackadaisical line selection) and my new tires don't squeal at 40 mph. I've never taken a clover leaf faster so I don't know the limits, and I get the impression that these tires would wear fast if you drove aggressively, they seem to really dislike any sort of scrub but they have a 50k mi warranty and the tire shop gave me a fair price on tire replacement certificates so they can't be all bad.

I haven't tested these tires in the cold and I don't intend to - I have a winter wheel / tire set with WS80 Blizzacks. The chinese tires seem to struggle with rain but not to the point of reduced safety (at least compared to my old tires).

Lastly, the side wall seems to flex in a very predictable way, I was very surprised by that. The tires are 225/60r16s so the side wall is relatively tall, and the suspension in my car is somewhat imbalanced, the weight transfer can sometimes be abrupt and my old goodyears would flex dramatically and suddenly, these new tires flex very progressively and it's easy to feel what's going on even though my steering isn't particularly communicative (it's a 2001 Toyota hydraulic system). I think it's because my car has double wishbone suspension at all 4 corners and the suspension controls the camber of the wheel very well throughout the suspension stroke.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by rconti on Wednesday September 20, 2017 @06:35PM (#15298974)
Thanks! Cloverleaf and noise comparison based on worn old tires though I assume? These days tires last so damn long it's hard to compare like-for-like, I know. Every time I get new tires I'm amazed at how quiet they are. Especially as I've owned certain tires that howl like banshees when worn. (then again, I wear them down too much in the dry season).
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @10:55PM (#15300261)
Yeah, compared to my old worn tires. However, I had those tires for 40k miles - they were always noisy but their grip deteriorated progressively.

I'm not optimistic about the life of these tires - the warranty is for 40k and most people say they're toast by 50k, my parents exclusively get Michelins and they get about 70k-90k miles out of their tires (although they drive relatively light cars and they drive slowly). I'm not sure the total cost of ownership is as dramatic as the initial price difference but as I've stated prior, I felt confident enough to roll the dice.

Do you think it's fair to say that performance tires just get noiser and noiser? I have a friend with an Evo X and he runs really nice tires but for the last 2k miles, they're like banshees. I don't know how he tolerates it but he also rides a CBR600RR without a helmet or ear plugs (though I repeat myself...) so he's made of stubborn stuff.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by rconti on Thursday September 21, 2017 @03:35PM (#15306648)
I think it just depends on the tire. The specific one I'm thinking of is the Dunlop Star Spec.
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by gicadin on Wednesday September 20, 2017 @01:19PM (#15296113)
50% cheaper tires may not necessarily 50% worse tires than the competitor. It could be that 99% of tires between the companies are near identical, but the likely hood of a serious defect is higher in the cheaper tire ( due to less quality control resulting from cheaper prices and/or lower standards ). Or it can mean less tolerance at the extremes( heat/cold).

Higher price can mean mean price gauging (like you are refering) but it can also mean straight up higher quality, reliability(consistency), or it can or many other things.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @01:25PM (#15296175)
I bought the tires for their value proposition, not their absolute performance. The tires are strictly inferior to the Michelins but I can live with that. If one pops, I can swap it out for a spare in 10 minutes, tops.

FWIW, I buy top of the line tires for my snow tires and motorcycle tires.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by walshemj on Wednesday September 20, 2017 @01:41PM (#15296348)
assuming you don't have a blow out at 80 and kill yourself just hope you don't take anyone else with you
Re:Medical Device CEO Catches Stranger After Hours, Promptin... by alexanderstears on Wednesday September 20, 2017 @01:45PM (#15296396)
Have you ever had a blowout in a car? They don't happen like that.

Besides, you're not making this statement to everyone else who has an elevated risk factor - tires are more likely to fail as they age, tires are more likely to fail when they're not properly inflated, or etc. Why single me out? Go lecure the stancenation crowd about their risk factors. Additionally, I carry very good insurance and I drive a lighter car. From a utilitarian perspective, you'd be better off checking truck tires.

I'd rather have my tires than 10 year old Goodyears. In fact, I got my tires because one of my 10 year old tires blew out. My car is safer now than it was prior to installing the Chinese tires.

Re:Medical Device CEO Catches Stranger After Hours, Promptin... by firemancoder on Wednesday September 20, 2017 @03:08PM (#15297169)
Are we seriously tire-shaming people on here now? That can happen with any tire, any time, anywhere. And people have blowouts on the freeway all the time it doesn't send you flying into oncoming traffic.