News for hackers. Stuff that matters.
Re:WeChat confirms it makes all private user data available ... by virmundi on Friday September 22, 2017 @01:58PM (#15314302)
I'm glad we cleared the air on that. Now we can go back to using the service without all the stupid conspiracy theories that they do this. Surveillance is the norm in China. They do the same thing with IP from foreign firms [1].

1 - http://money.cnn.com/2017/08/14/news/economy/trump-china-tra...

Re:WeChat confirms it makes all private user data available ... by colordrops on Friday September 22, 2017 @03:53PM (#15315225)
Wait, so even correct conspiracy theories are stupid? Man, conspiracy theorists can't catch a break.
Re:WeChat confirms it makes all private user data available ... by Naritai on Friday September 22, 2017 @04:29PM (#15315518)
It's more akin to holding a conspiracy theory that Apple/Google/etc. exist primarily to make money.
Re:WeChat confirms it makes all private user data available ... by thaumasiotes on Friday September 22, 2017 @06:51PM (#15316626)
Heh. I remember reading that some people feel that Confucius Institutes are really intended to try to project Chinese culture onto other countries. This would have been less stupid if doing that wasn't openly in the mission statement.
Re:WeChat confirms it makes all private user data available ... by drusepth on Friday September 22, 2017 @03:37PM (#15315094)
Lenovo is a Chinese company. I'm typing this from a Thinkpad. Would it also be the norm for Lenovo to collect/share information from my laptop with the Chinese government?
Re:WeChat confirms it makes all private user data available ... by deadmetheny on Friday September 22, 2017 @04:00PM (#15315282)
A company that's been caught multiple times installing spyware on laptops[1]? My bet would be on 'absolutely'

[1] http://thehackernews.com/2015/09/lenovo-laptop-virus.html

Re:WeChat confirms it makes all private user data available ... by fhood on Friday September 22, 2017 @03:57PM (#15315254)
Isn't lenovo the one that got caught putting spyware in the bios?
Re:WeChat confirms it makes all private user data available ... by gruez on Friday September 22, 2017 @06:36PM (#15316518)
Not really spyware in bios, more like acpi data, that when detected by windows, gets auto executed by windows
Re:WeChat confirms it makes all private user data available ... by didibus on Friday September 22, 2017 @03:46PM (#15315164)
Possibly, I know the company I work at avoids Lenovo laptop because of that.
Re:WeChat confirms it makes all private user data available ... by skellera on Friday September 22, 2017 @11:35PM (#15317942)
The US government will not use Lenovo. You can interpret that as a possibility.
Re:WeChat confirms it makes all private user data available ... by linkmotif on Friday September 22, 2017 @11:19PM (#15317893)
Yeah why anyone who values their privacy uses Lenovo beats me. If it’s Chinese, it’s spying on you. Otherwise they wouldn’t be operating in China.
Re:WeChat confirms it makes all private user data available ... by philipov on Friday September 22, 2017 @05:59PM (#15316237)
I can't recommend buying a Lenovo laptop.
Re:WeChat confirms it makes all private user data available ... by narrator on Friday September 22, 2017 @03:08PM (#15314876)
Stupid conspiracy theories? Are they stupid if they're right?
Re:WeChat confirms it makes all private user data available ... by shallot_router on Friday September 22, 2017 @04:33PM (#15315549)
They're stupid if they're just saying something everyone already knows. It'd be like saying "the US government assassinates civilians with unmanned airborne vehicles" or something.
Re:WeChat confirms it makes all private user data available ... by akvadrako on Friday September 22, 2017 @08:21PM (#15317197)
It's borderline. Even if all the people in the know know it, it wasn't accepted as fact when it was't convenient. Or rather, politicians could pretend it wasn't real / a problem.
Re:WeChat confirms it makes all private user data available ... by skygazer on Friday September 22, 2017 @08:29PM (#15317242)
Well, perhaps stupid in that calling them conspiracy theories is a mark of ignornace, when they'd be better termed as uncontested and easily supported public facts, or something.
Re:WeChat confirms it makes all private user data available ... by mcbits on Friday September 22, 2017 @09:26PM (#15317470)
So to be clear, when someone calls an easily supported public fact a "conspiracy theory" to dismiss it, "stupid" should be applied to them, not to the so-called conspiracy theory.
Re:WeChat confirms it makes all private user data available ... by virmundi on Friday September 22, 2017 @03:21PM (#15314981)
The comment was tongue in cheek. Of course they do this.
Re:WeChat confirms it makes all private user data available ... by benevol on Friday September 22, 2017 @02:46PM (#15314691)
> Surveillance is the norm in China.

And in the US. And in Europe. And in Russia. And...

Re:WeChat confirms it makes all private user data available ... by Hnrobert42 on Friday September 22, 2017 @03:11PM (#15314900)
No. Surveillance is far more pervasive in China. Equating the US law and Chinese law is not only incorrect, it is dangerous. The US largely surveils citizens of other countries for terror threats and espionage. China largely surveils its own citizens to suppress dissent. Conflating the two leads people to just shrig their shoulders if/when the US crosses the line.
Re:WeChat confirms it makes all private user data available ... by riffic on Friday September 22, 2017 @03:27PM (#15315005)
>for terror threats and espionage

Well, officially this, but for many other reasons as well:

https://en.wikipedia.org/wiki/Parallel_construction

Re:WeChat confirms it makes all private user data available ... by fatjokes on Friday September 22, 2017 @05:12PM (#15315846)
I'd say the main difference is that if the US wants to screw you, they'll dig up convoluted laws and imprison you with bureaucracy. The Chinese just say "fuck you, you're in prison because I say so". I still prefer the US way, because of the higher barrier to entry.
Re:WeChat confirms it makes all private user data available ... by baddox on Friday September 22, 2017 @05:28PM (#15315985)
There are downsides to the US way too, like having huge numbers of Americans who refuse to believe that their government would ever do anything like that, and if they do, the citizen must have deserved it.
Re:WeChat confirms it makes all private user data available ... by vtange on Friday September 22, 2017 @06:27PM (#15316467)
..As opposed to the even larger number of Chinese who just accept that their government is the way to go and also believe you deserve it equally, if not more?
Re:WeChat confirms it makes all private user data available ... by fatjokes on Friday September 22, 2017 @10:48PM (#15317777)
Uh... citation needed?

A lot of Chinese I know might support their government because they are working to further Chinese interests. But I generally don't hear them trying to export their system of government.

Americans on the other hand...

Re:WeChat confirms it makes all private user data available ... by seanmcdirmid on Saturday September 23, 2017 @01:01AM (#15318216)
You should read more chinese media. There are articles talking about how India and African countries would benefit from Chinese-style government and economic system. This is totally just finger wagging, however.
Re:WeChat confirms it makes all private user data available ... by seanmcdirmid on Saturday September 23, 2017 @12:55AM (#15318193)
This is how Trump got everything he wanted and a judge never said no? Wait, no, that's not right. Who is this singular US power-unchecked person you are referring to?
Re:WeChat confirms it makes all private user data available ... by zaroth on Friday September 22, 2017 @08:16PM (#15317167)
Something something FISA something Manafort something something downvotes.
Re:WeChat confirms it makes all private user data available ... by whazor on Friday September 22, 2017 @03:45PM (#15315150)
To give some more examples: traveling over roads, train, air you need to ID yourself in China. The same for having a mobile phone connection. In European Union, you barely get checked and you have anonymous sim cards.
Re:WeChat confirms it makes all private user data available ... by otakucode on Friday September 22, 2017 @04:06PM (#15315320)
To travel over road, train, air in the US you also must ID yourself. To get a mobile phone you have to ID yourself (and sign in-person for the package if a phone is delivered to you) in the US.
Re:WeChat confirms it makes all private user data available ... by mullen on Friday September 22, 2017 @04:18PM (#15315421)
> To travel over road, train, air in the US you also must ID yourself.

No you don't. If I drive a car, I have to have license and show that if asked by the police but that is a requirement of driving. If I am a passenger, I don't have to have an ID. I can take an airplane flight without an ID, that has been shown time and time again. Taking the train and ID'ing yourself might be condition of being able to use a train, not law.

If I am out and about, I don't have to show the military my ID, I don't have to show security guards my ID and if I am not accused of a crime, I don't have to show the police my ID. Try that in China.

> To get a mobile phone you have to ID yourself (and sign in-person for the package if a phone is delivered to you) in the US.

Not true. I bought a T-Mobile SIM card with cash and activated it at home and I could have put anything into the address information. I have never once shown my ID when dealing with my T-Mobile account. Try doing that in China.

Re:WeChat confirms it makes all private user data available ... by thaumasiotes on Friday September 22, 2017 @06:54PM (#15316652)
> I bought a T-Mobile SIM card with cash and activated it at home and I could have put anything into the address information. I have never once shown my ID when dealing with my T-Mobile account. Try doing that in China.

That's not hard to do in China (well, your SIM card would be China Mobile or China Unicom, not T-Mobile), unless they've made some drastic changes in the last couple of years. But since I've seen the claim that you had to provide ID to buy a SIM card made at times where I knew it was currently false, I strongly suspect it's still false.

Re:WeChat confirms it makes all private user data available ... by jk2323 on Friday September 22, 2017 @10:48PM (#15317773)
I think they made the changes. I once had such an "over the counter" sim card but later changed to a monthly contract with my passport. But I remember seeing on the expat magazines "last chance to keep your SIM card active". At one point you had to provide ID or they just turned off the service.
Re:WeChat confirms it makes all private user data available ... by anonexpat on Saturday September 23, 2017 @03:38AM (#15318679)
Correct. I signed up with China Unicom last week, was required to use my passport, and was only allowed a single SIM card. Anonymity is nearly impossible.
Re:WeChat confirms it makes all private user data available ... by z2 on Friday September 22, 2017 @06:05PM (#15316286)
We've all got anecdotes, so here's mine. I was asked for ID each time I wanted to modify my AT&T account with a rep, and as such I produced one in the form of driver's license. At a major city hotel late at night, I produced my ID to a security guard who otherwise would not let me in with just my room key. At an airport security check, being over 18, I produced a government-approved ID to board the flight.

Maybe there are ways around all this, just like how in China, I bought a monthly subscription (not just pre-paid) China Unicom SIM at an official outlet using cash with no ID, and took many train and bus rides with just a ticket in hand.

Re:WeChat confirms it makes all private user data available ... by kurthr on Friday September 22, 2017 @06:32PM (#15316496)
I don't know when you did this, but you can't buy a ticket on a train (not subway) in China without providing identification in any city someone would recognize (Beijing, Shanghai, Shenzhen, Xiamen, Chongqing, etc.). As a foreigner, if you exit any of those cities in a car, you must notify the authorities (which is a pain when the Factory is just outside... but the manufacturer will let you know before they let you stay).

This has been largely true for the last 10 years. The same is true for any bus that crosses provincial boundaries. That includes every major Chinese train station (excluding HK/TW) in every city most people can name. If someone else bought you a ticket, they put a fake (probably western) ID on it or they did a favor of using your ID without telling you (that's why they ask for your Passport#). Even the standard electronic purchase stalls only print out a ticket if you provide a China ID, or in a small number of cases a Passport. Everywhere else you have to stand in line to provide ID to the ticketing agent.

All patrons of a hotel must provide an ID (even if you are a non-paying guest) to check in. If it is a foreign ID, they must photocopy it and provide it to the authorities (including your visa information). If you stay at an AirBnB, you must check in at the local Police Station with your Passport/Visa. Not doing so is a crime punishable by imprisonment and revocation of your visa!

Re:WeChat confirms it makes all private user data available ... by kelnos on Friday September 22, 2017 @06:57PM (#15316668)
That isn't the same thing, and your anecdotes don't really mean anything; the parent's anecdotes act as a counterexample, which is all that is necessary to prove that ID isn't necessary, even if it's generally or often used.

AT&T is requiring you to show ID as a security measure, not because the US gov't requires it. You're talking about them using your ID for authentication, to protect you from someone impersonating you to make unwanted changes to your account. This does not preclude you from being able to walk into an AT&T (or T-Mobile) store and get an activated SIM card with cash and without showing ID.

Ditto for the hotel security guard check. If they had required your ID at check-in for any purpose other than authenticating you against their reservation record, then that would be a problem. If you could walk into the hotel without a reservation and pay for a room with cash without flashing ID, then the parent's point stands. (And even if you couldn't, this may just be a particular hotel's policy, which is fine. The point being made is that the government is not requiring this. There are plenty of hotels in the US that are perfectly happy with anonymous money.)

As for flights, there's definitely more government involved with ID'ing you, but you can absolutely fly without ID. You just need to go through extra security screening, which is a pain, but works just fine.

My experience in China is over a decade old, so I won't comment on that.

Re:WeChat confirms it makes all private user data available ... by gwright on Friday September 22, 2017 @06:19PM (#15316410)
Proving identity to an AT&T rep or a hotel security guard in order to validate authorization to access your account or room is not the same thing as the government demanding your identity in order to go from place to place.

Yes, they both involve proving your identity but that is where the similarity ends.

Re:WeChat confirms it makes all private user data available ... by mullen on Monday September 25, 2017 @02:52PM (#15332948)
> We've all got anecdotes, so here's mine. I was asked for ID each time I wanted to modify my AT&T account with a rep, and as such I produced one in the form of driver's license.

This is a security precaution to edit your account. It's a good thing and this is also not part of a condition of setting up the account.

> At a major city hotel late at night, I produced my ID to a security guard who otherwise would not let me in with just my room key.

Same thing as above. You have to show ID as part of security for the Hotel and it is not required by law.

> At an airport security check, being over 18, I produced a government-approved ID to board the flight.

You don't have to produce ID to fly. Again, this has been shown time and time again.

Re:WeChat confirms it makes all private user data available ... by nemothekid on Friday September 22, 2017 @04:19PM (#15315432)
>To get a mobile phone you have to ID yourself (and sign in-person for the package if a phone is delivered to you) in the US.

You can buy a prepaid phone and minutes with cash in the US. I bought an Android phone and a minutes with a prepaid card just a month ago (with a credit card, but if I could have used cash), and activated it without giving any personal information.

Re:WeChat confirms it makes all private user data available ... by vel0city on Friday September 22, 2017 @05:18PM (#15315888)
You can buy and load data/minutes on SIM cards in the US with cash without an ID. I've had cell phones delivered from many different vendors without requiring signing for the package upon delivery, plus pre-paid phones are available for purchase with cash all over the place without the need to hand over personal information.

I can ride the light rail all over my city through buying a pass with cash. I can ride in the car between all 48 contiguous states without needing an ID. Going through TSA checkpoints or leaving/entering the country are the only forms of travel which require an ID or filing a form essentially equivalent to an ID.

Re:WeChat confirms it makes all private user data available ... by emmelaich on Friday September 22, 2017 @08:14PM (#15317157)
I bought a phone in the USA with cash, no id required. It seemed to be the norm.

As in, I was fully expecting to at least show a credit card or passport, but there was never any hint of that at all.

Re:WeChat confirms it makes all private user data available ... by toephu2 on Friday September 22, 2017 @04:20PM (#15315438)
@mullen how do you fly from California to NY without an ID? How do you get past TSA?
Re:WeChat confirms it makes all private user data available ... by strictnein on Friday September 22, 2017 @04:23PM (#15315465)
Re:WeChat confirms it makes all private user data available ... by rrix2 on Friday September 22, 2017 @05:29PM (#15315989)
(replying to sibling comment)

> Well that is an exception to the rule rather than the norm.

It is? I've literally never given my ID on SFBART or Amtrak, what modes of travel besides being the driver of a car have you had to have a form of state or national ID?

Re:WeChat confirms it makes all private user data available ... by paradite on Saturday September 23, 2017 @01:10AM (#15318248)
I think you misread the meaning of my comment, see https://news.ycombinator.com/item?id=15318245
Re:WeChat confirms it makes all private user data available ... by riffic on Friday September 22, 2017 @08:24PM (#15317214)
Amtrak may require ID upon demand:

https://www.amtrak.com/passenger-identification

Re:WeChat confirms it makes all private user data available ... by paradite on Friday September 22, 2017 @05:17PM (#15315882)
Well that is an exception to the rule rather than the norm.

In China, you can also get temporary ID from train stations and airports if you misplaced it.

It is really funny for me to see comments like this used to show US being better than China, when all I see is the act of shooting yourself in the foot - "We don't need ID to travel, because we can exploit the exception made for losing or misplacing ID."

If you really want to compare the ability to exploit the system, I doubt US citizens can beat Chinese citizens.

Re:WeChat confirms it makes all private user data available ... by kelnos on Friday September 22, 2017 @07:09PM (#15316761)
> Well that is an exception to the rule rather than the norm.

It's a little disingenuous to compare the US and China in this way. In the US, air travel is literally the only form of transportation where an ID is (by convention) required. It is absolutely the norm when you are traveling in the US by car (as a passenger), bus, or train that you never show any form of ID, ever.

> In China, you can also get temporary ID from train stations and airports if you misplaced it.

I think it's telling that it's even possible to get a temp ID in China from so many places if you've misplaced yours. That tells me that having your ID at all times in China is a necessity, and not having it can cause you problems. In the US, if you lose your ID, it's annoying, but it's not a big deal to be without an ID for a while.

> If you really want to compare the ability to exploit the system, I doubt US citizens can beat Chinese citizens.

Ultimately you want to not have to exploit the system. In that it's just not necessary, because the system is fair, or at least there are efficient legal remedies when it's unfair. Obviously neither the US nor China have such great systems, but, again, I find it telling that the need to exploit the system is so great in China that it's so commonplace and everyone is so good at it. So I find your statement about that kinda sad, not a good thing.

Re:WeChat confirms it makes all private user data available ... by KGIII on Friday September 22, 2017 @08:33PM (#15317256)
It is expensive, but you don't need ID when you charter. The TSA isn't even involved. Usually, there isn't even any security at all.

Obviously, this is only true if you stay in the country.

Re:WeChat confirms it makes all private user data available ... by paradite on Saturday September 23, 2017 @12:58AM (#15318205)
I agree with your points, but I don't think you are replying to the points that I made directly. I was specifically referring to the TSA rule on verifying identity without ID and its intention, not on car, trains, or how prevalent the requirement of ID is in China. My point is, in terms of ID requirements for air travel, there is not much difference between the two country.

Then again, I am totally used to people getting angry when I say China is not necessarily worse than US in some aspect regardless of right or wrong.

If you really want to be genuine, try to read my comments with a fresh state of mind and see what I am trying to convey.

Edit: maybe you also interpreted my comment wrongly? https://news.ycombinator.com/item?id=15318245

Re:WeChat confirms it makes all private user data available ... by kelnos on Saturday September 23, 2017 @05:28AM (#15318947)
Yes, I did, my apologies. I did indeed think you were talking about all forms of travel.
Re:WeChat confirms it makes all private user data available ... by paradite on Saturday September 23, 2017 @01:09AM (#15318245)
Ah, now I understand why the downvotes. I mean "not having ID and going through identity verification process" is considered an exception by TSA when boarding the plane, not a norm.

I didn't mean to say "not requiring an ID" is an exception to all forms of travel in the US. So please stop downvoting me if you understand what I mean.

Re:WeChat confirms it makes all private user data available ... by paradite on Friday September 22, 2017 @04:35PM (#15315559)
Re:WeChat confirms it makes all private user data available ... by benevol on Friday September 22, 2017 @03:18PM (#15314947)
> The US largely surveils citizens of other countries for terror threats and espionage.

You're kidding, of course.

Re:WeChat confirms it makes all private user data available ... by agumonkey on Friday September 22, 2017 @03:28PM (#15315019)
There's a massive cultural shift though, at lease from where I stand (Europe). US kinda like the idea of free speech. China doesn't. I had chat with Chinese people that went all anxious after they started to emit the slightest critic about their country. USA are probably tapping into everything since 20 years but so far it didn't turn into a way to shut off or kill people.
Re:WeChat confirms it makes all private user data available ... by bgee on Friday September 22, 2017 @05:50PM (#15316164)
> I had chat with Chinese people that went all anxious after they started to emit the slightest critic about their country.

They are wrong, but it's a common misbelief. China government wants to censor posts that initialize collective action, not criticism. See this quantitive study from Harvard[0].

[0]: https://gking.harvard.edu/publications/how-censorship-china-...

Re:WeChat confirms it makes all private user data available ... by adventured on Friday September 22, 2017 @08:19PM (#15317186)
China likes to aggressively censor pretty much everything that even remotely criticizes the party or its history.

"A Chinese star TV anchor is facing "severe punishment" over jokes he made about Mao Zedong, state media report. A video of Bi Fujian singing a parody song at a private banquet and insulting the former Chinese leader in strong language was posted online in April."

http://www.bbc.com/news/world-asia-china-33844095

Re:WeChat confirms it makes all private user data available ... by agumonkey on Friday September 22, 2017 @06:24PM (#15316438)
Allow me some thin paranoia, if people start criticizing, they're halfway through organizing collective action.
Re:WeChat confirms it makes all private user data available ... by balladeer on Friday September 22, 2017 @09:29PM (#15317486)
I would say not equating Chinese and US surveillance is rather dangerous. Not the extent but the capability and willingness (and track record?), clearly exhibited by instances that they can and they will. They both surveil their own citizens and of course citizens of other country's. Or maybe because USA is better at it? Doing it and getting away with it most of the time?

Besides "largely" the keyword here as an artificial differentiation only leads to some kind of general denial (by its own citizens) that works in the favour of USA's surveillance machinery.

Re:WeChat confirms it makes all private user data available ... by chibg10 on Saturday September 23, 2017 @01:21AM (#15318283)
My issue with this is that, in the US, PRISM was shut down--whereas in China that would never happen. The US by no means has a perfect or even necessarily good track record, but the people in charge are still accountable to the public and that makes a world of difference.
Re:WeChat confirms it makes all private user data available ... by jhugg on Friday September 22, 2017 @03:10PM (#15314887)
Sigh... yes, but the difference between systems that do E2E encryption and WeChat is pretty dramatic.

It's not clear the government of any country can freely read your Signal or iMessage messages they way China can read your WeChat messages.

Re:WeChat confirms it makes all private user data available ... by low_battery on Friday September 22, 2017 @06:42PM (#15316573)
Oh they are totally not in the same league.
Re:WeChat confirms it makes all private user data available ... by seanmcdirmid on Saturday September 23, 2017 @12:53AM (#15318187)
As if the issue was black and white rather than various shades of grey. China definitely is of a shade much darker than the USA.
Re:WeChat confirms it makes all private user data available ... by d0mine on Friday September 22, 2017 @07:41PM (#15316945)
Unrelated: why would you call something that is confirmed to be true a conspiracy theory?

Holocaust denial is a conspiracy theory. Mass survilance is a fact of life.

Re:WeChat confirms it makes all private user data available ... by nullnilvoid on Friday September 22, 2017 @03:04PM (#15314837)
Surveillance is everywhere. Go ask Edward Snowden about PRISM program by NSA
Re:WeChat confirms it makes all private user data available ... by linkmotif on Friday September 22, 2017 @11:23PM (#15317903)
Whaaaat? What a perspective. Are you... from China, perhaps? 🇨🇳 Privacy is a wonderful thing. I’m so glad it’s a value people still fight for in the West.
Re:WeChat confirms it makes all private user data available ... by dang on Saturday September 23, 2017 @12:52AM (#15318182)
Nationalistic comments, which this and your previous comment smack of, are not welcome on HN. Please don't post like this here.