News for hackers. Stuff that matters.
Re:Lenovo: Companies working in China may have to install lo... by Laforet on Wednesday September 19, 2018 @07:05PM (#18028371)
iCloud in China has been hosted by a local licencee for a while. People who care about privacy are at least aware that the backend is no longer secure.

While we are on the topic, Windows 10 binary for Chinese government contracts are compiled by a third party company based in China so certain features could be added/removed at code level without directly giving away the source code. It may only be a matter of time before this practice permeates into retail and OEM markets.

Re:Lenovo: Companies working in China may have to install lo... by _red on Wednesday September 19, 2018 @07:33PM (#18028498)
How do I, as a US citizen, know that Apple isn't replicating my data to this Chinese datacenter?

I know you will say "you have to trust them", but therein lies the problem. There is no way for consumers to verify anything about their data.

Re:Lenovo: Companies working in China may have to install lo... by justtopost on Wednesday September 19, 2018 @07:59PM (#18028633)
Exactly why I simply cannot trust their supposed 'commitment to privacy'. How could you take it seriously when they are willing to play ball with this clear human rights issue? It's madness.
Re:Lenovo: Companies working in China may have to install lo... by Laforet on Thursday September 20, 2018 @12:48AM (#18029855)
Short answer is we will never know for sure. There is no reason or incentive for Apple to duplicate your data and it certainly breaches an assortment of data protection laws. Nevertheless you data is always one error away from being sent all over the world. Recall the incident when Cloudflare leaked an unknown amount of information to the public, looks like they have suffered very little repercussion given the scope of the leak.

https://blog.cloudflare.com/incident-report-on-memory-leak-c...

Re:Lenovo: Companies working in China may have to install lo... by throwa9192018 on Wednesday September 19, 2018 @11:43PM (#18029597)
On another note, if I get my data on the Chinese datacenter, does this mean my country's government is unable to extract this information from Apple?

If they send a notice to Apple for my data, will Apple refer them to China instead?

Re:Lenovo: Companies working in China may have to install lo... by exikyut on Wednesday September 19, 2018 @09:55PM (#18029182)
My brain's being a bit pedantic/dense about wording, so I want to clarify - are you saying that Windows 10 builds destined for Chinese governmental use are shipped to China in source form?
Re:Lenovo: Companies working in China may have to install lo... by Laforet on Thursday September 20, 2018 @12:42AM (#18029837)
No. The source code is shipped to a system integrator based in China, vetted by both parties and under strict NDA, who then edit the code with required changes, compile and ship the binary to government users.

MS have, for a long time, allowed major customers to audit Windows source code on site but they are still forbidden from making copies. The whole setup is meant to avoid shipping source code directly.

Re:Lenovo: Companies working in China may have to install lo... by exikyut on Thursday September 20, 2018 @08:50PM (#18036456)
Thanks for the insight.

I'm guessing the on-site/NDA combination is intended to prevent another Mainsoft (and all the other leaks...) from happening.

I wonder if I stand a chance of turning up a copy of Chinese-governmental Windows 10. Would be awesome.

Re:Lenovo: Companies working in China may have to install lo... by krylon on Thursday September 20, 2018 @01:58AM (#18030100)
Why does Microsoft not make those changes themselves? Does the Chinese government not want them to know what changes they want?
Re:Lenovo: Companies working in China may have to install lo... by exikyut on Thursday September 20, 2018 @08:52PM (#18036459)
Well, obviously politics, burden of blame, and plausible deniability, and all that. Microsoft never made the changes themselves, they've no real idea what happened, they just sat in a corner of the room and glanced at the devs' screens once in a while to make sure they didn't look like they were stealing anything.