News for hackers. Stuff that matters.
Re:Google suspends some business with Huawei by cromwellian on Sunday May 19, 2019 @05:11PM (#19955547)
In a way, this helps Apple (and other Android vendors) and in a way, it hurts it. Huawei phones recently have shipped market leading cameras that blow pretty much all other Android and iPhone cameras out of the water. They took a commanding lead as a premium device manufacturer. Hurting their non-China markets gives breathing space to others.

However, if I were Apple, I'd be really worried about retaliation. Apple is wholly dependent on manufacturing in China and its supply chain, and even small disruptions could cause huge mounts of pain.

Re:Google suspends some business with Huawei by Despegar on Sunday May 19, 2019 @06:11PM (#19955851)
The last thing China wants during a trade war is to have the 3 million people in Apple's supply chain unemployed and angry.

This particular leverage is also why iMessage isn't blocked in China.

Re:Google suspends some business with Huawei by opportune on Sunday May 19, 2019 @07:27PM (#19956252)
iMessage isn't blocked in China because it doesn't need to be. China passed a law forcing Apple to put all Chinese users' iCloud data in a Chinese datacenter. Since Apple allows for account recovery, they store account keys in that datacenter. Anyone with privileged access to certain production resources in iCloud China should be able to access basically all Chinese users' data.

The one exception is apparently Apple's keychain as per https://blog.cryptographyengineering.com/2018/01/16/icloud-i.... But, if the hardware used to enforce the security is different in China, even that could be cracked.

Re:Google suspends some business with Huawei by xvector on Monday May 20, 2019 @09:10PM (#19966828)
IIUC if you disable iCloud backup of iMessages, you're safe here. This is because iMessage is E2EE enforced by the Secure Enclave when iCloud backup of iMessages is disabled.
Re:Google suspends some business with Huawei by shshhdhs on Sunday May 19, 2019 @07:12PM (#19956173)
More likely because Apple gave China the master encryption keys: https://techcrunch.com/2018/02/25/apple-moves-icloud-encrypt...
Re:Google suspends some business with Huawei by Despegar on Sunday May 19, 2019 @07:12PM (#19956181)
iMessage is end-to-end encrypted.
Re:Google suspends some business with Huawei by cromwellian on Sunday May 19, 2019 @09:14PM (#19956782)
If you really believe that China doesn't have a deal with Apple that nerfs this in China, I have a bridge to sell you.

China, a country which mandates spyware be installed on phones. Which uses deep packet inspection to block access to foreign websites, that bans VPNs in app stores. China, a country which forces the population of Xinjiang to install Jingwang (https://en.wikipedia.org/wiki/Jingwang_Weishi), a spyware app so they can grab your on-device files. Which has deployed facial recognition cameras in many cities. Which blocked access to Wikipedi because it switched to HTTPS.

That China, you think, is going to allow all of that to be circumvented just by buying an iPhone? Right. Chinese Government: "You're not allowed to use VPNs. But if you're in Xinjiang, and you need privacy, we recommend buying an iPhone, since it doesn't work with Jingwang, nor deep packet inspection. Just tell the police you have an iPhone, and we'll wave the usual regulations we impose on Android devices."

Last time I was in Xinjiang, people there had iPhones. No one believes iMessage would be snoop proof.

Re:Google suspends some business with Huawei by Despegar on Monday May 20, 2019 @12:49AM (#19957616)
It doesn't matter what you believe because Apple said that was the case in court filings during the FBI legal fight. Tim Cook reaffirmed that in an interview with Vice last fall.
Re:Google suspends some business with Huawei by cromwellian on Monday May 20, 2019 @05:17AM (#19958642)
What Apple says about what they do in the US, and what they do in China, are two different things. And what Tim Cook reaffirmed is irrelevant, what matters is how the iMessage protocol works.

As far as I can tell, the way iMessage works according to Apple's documentation, is that endpoints generate 1280-bit RSA encryption keys, hold the private keys on the device, but publish the public keys to a centralized IDS Directory Server. Note that their published security documents curiously don't say anything about man-in-the-middle mitigation, and indeed, MITM attacks against iMessage on IOS9 were publicly documented.

Now, what do you know about where the IDS servers are located in China, and who controls them? Because if Apple doesn't control them, and control them in a way that makes them impossible to spoof, then it is easy for the Chinese government to attack iMessage.

Thus, Tim Cook could say "We haven't put any backdoors into iMessage for the Chinese government and it is end to end encrypted" and it would be a true statement, but also Apple engineers could know full well the IDS in China could be subject to a MITM.

A plausible way this could happen, after Apple moved the iCloud keys to China, is that the Chinese government could request to intercept communications from a particular user, and the public keys of every recipient that user communicates with could be replaced with a MITM key so they can rely the messages and see the unencrypted content.

We don't know, but what we do know is that iMessage has been attacked with MITM before, and we know the PRC isn't going to let unbreakable encryption be sold to Uighurs in Xinjiang. It defies logic.

Re:Google suspends some business with Huawei by hu3 on Monday May 20, 2019 @05:10AM (#19958617)
So they said and you believed.
Re:Google suspends some business with Huawei by opportune on Sunday May 19, 2019 @08:02PM (#19956414)
iMessage is encrypted in transit and at rest. However, that doesn't matter if your attacker (the Chinese government) has the encryption keys
Re:Google suspends some business with Huawei by graeme on Sunday May 19, 2019 @08:38PM (#19956594)
The article refers to icloud encryption keys, not imessage keys.

If imessages are backed up to icloud, then the govt will have keys to see them. But if a user doesn't back up, I was under the impression not even apple could decrypt iMessages.

Re:Google suspends some business with Huawei by opportune on Sunday May 19, 2019 @08:51PM (#19956673)
Correct, for data that isn't backed up, you would need to have root access to the user's device.
Re:Google suspends some business with Huawei by chii on Sunday May 19, 2019 @09:13PM (#19956777)
i do believe rubber-hose decryption works wonders in china.
Re:Google suspends some business with Huawei by xvector on Monday May 20, 2019 @09:12PM (#19966834)
Not even root access would suffice. You'd need the user passcode.
Re:Google suspends some business with Huawei by cromwellian on Monday May 20, 2019 @05:20AM (#19958658)
iMessage (public) keys are "backed up" to IDS directory services. This is how Apple devices do key-exchange with one another. If there is no man-in-the-middle mitigation for IDS, then all the Chinese government needs to do is return spoofed keys for anyone you're communicating with. Remember, when you send messages to other people, you encrypt with THEIR key, not yours (on device). Your key is used for signatures and decrypting messages sent to you by them. THEIR Key comes from the cloud, and thus subject to attack if key exchange wasn't secure.
Re:Google suspends some business with Huawei by gsich on Sunday May 19, 2019 @07:25PM (#19956233)
Doesn't matter if you backup messages to icloud.
Re:Google suspends some business with Huawei by Despegar on Sunday May 19, 2019 @07:41PM (#19956320)
That's no different anywhere else in the world.
Re:Google suspends some business with Huawei by parliament32 on Tuesday May 21, 2019 @05:57PM (#19975528)
How do you think iMessages are "restored" when you lose your iPhone and get a new one?
Re:Google suspends some business with Huawei by Mikeb85 on Sunday May 19, 2019 @09:07PM (#19956745)
> The last thing China wants during a trade war is to have the 3 million people in Apple's supply chain unemployed and angry.

As an autocracy, China could easily compensate workers for any loss of work. But another obvious answer is that if Apple were banned in China, Huawei and Xiaomi would pick up the slack.

If China really wanted to, they could shut down all iPhone production for the immediate future.

Re:Google suspends some business with Huawei by stjohnswarts on Thursday May 30, 2019 @10:32PM (#20057822)
If China shut down apple then you would see company/capital flight from China like you've never before seen in history. The communist party is powerful but I doubt if they could handle a 20% spike in unemployment of some of the best jobs in the country.
Re:Google suspends some business with Huawei by fabianhjr on Sunday May 19, 2019 @06:23PM (#19955913)
Apple isn't the only company in China, plus they could buy-back or eminent domain closed factories and assign them to SOEs.

https://www.wikiwand.com/en/Foxconn#/Major_customers

Re:Google suspends some business with Huawei by ezconnect on Monday May 20, 2019 @07:10AM (#19959187)
Once the population boycott a brand or a country the Chinese propaganda and people really do boycott them. Read the news about South Korea and Japan trade wars. The Chinese even tried to burn down a Toyota factory.
Re:Google suspends some business with Huawei by tooltalk on Monday May 20, 2019 @06:57AM (#19959106)
Apple's been losing marketshare (and unit sales) while Chinese domestic companies' market share has been growing, so that balances things out. The world's #1 smartphone maker Samsung moved much (50%>) of their smartphone assembly operation out of China and hardly anyone noticed it.
Re:Google suspends some business with Huawei by noobermin on Monday May 20, 2019 @11:30AM (#19961390)
They could still hazard it.
Re:Google suspends some business with Huawei by Tsubasachan on Monday May 20, 2019 @02:45AM (#19958048)
The only thing the Chinese government has to do is explain that American imperialist white piggus are trying to destroy the Chinese people and they wouldn't even be lying for once.

Nationalism is a play card in every country.

Re:Google suspends some business with Huawei by rqs on Sunday May 19, 2019 @10:44PM (#19957138)
> However, if I were Apple, I'd be really worried about retaliation.

I think this view is too narrow. For the Chinese government, there is something more important than revenge. Why kick that cash machine out of your country if it still paying your people paid and make then happy?

I guess the retaliation will come in a different form, even something out of the trade section maybe, depends on what's on Xi's table.

Re:Google suspends some business with Huawei by costcopizza on Sunday May 19, 2019 @06:04PM (#19955813)
How much more expensive would an iPhone be that’s assembled in the US?
Re:Google suspends some business with Huawei by ChuckNorris89 on Sunday May 19, 2019 @06:13PM (#19955864)
Cost is not the reason all consumer electronics are made in China. Actually, manufacturing there is now more expensive than Estern Europe.

They build them there because all the supply chain is already there. In Shenzhen, the capacitors, resistors, PCBs and most chips are sourced in bulk from around the block. That's something no other country in the West or even East has and it's such a complex interconnected ecosystem that you can't replicate it anywhere else right now.

Most of the CNC, tooling and moulding craftsmen are there as well, the west has far too few left to be able to take over such volumes. Training so many can take years and that's assuming you even find enough people willing to be trained.

Re:Google suspends some business with Huawei by Waterluvian on Sunday May 19, 2019 @07:09PM (#19956159)
I've been watching a lot of videos on Shenzhen and it's just mental. There's basically same day delivery by bicycle or truck of anything your supply line might be running low on.

It's like their transport latency is so low and reliable that they don't need as much buffering. It's amazing to see what small and large quantity production lines can look like.

Re:Google suspends some business with Huawei by baybal2 on Sunday May 19, 2019 @07:51PM (#19956359)
> It's like their transport latency is so low

Reading this, I begin to scratch head hearing people complaining about factories being squeezed out towards boundaries of Shenzhen municipality.

I remember people thinking of that as some end of the world event.

Re:Google suspends some business with Huawei by shabirgilkar on Monday May 20, 2019 @03:46AM (#19958257)
Can you please share those links here
Re:Google suspends some business with Huawei by jerry_tk on Monday May 20, 2019 @04:56AM (#19958555)
Strange Parts YouTube channel offers some insights into Chinese electronics industry: https://www.youtube.com/channel/UCO8DQrSp5yEP937qNqTooOw
Re:Google suspends some business with Huawei by foldingmoney on Sunday May 19, 2019 @08:08PM (#19956447)
The bigger issue is that the nature of smart phone releases is that each time you want to bring out a new model, you need to employ a few tens of thousands of people for a relatively short time to assemble them. This isn't possible in most countries due to labour laws and/or shortage of workers.
Re:Google suspends some business with Huawei by panabee on Sunday May 19, 2019 @09:23PM (#19956818)
tesla is starting to automate car manufacturing and seems to be making progress. can you comment on the feasibility on automating smartphone manufacturing? do elements of smartphone manufacturing render automation intractable, or harder than car manufacturing?
Re:Google suspends some business with Huawei by foldingmoney on Sunday May 19, 2019 @11:43PM (#19957376)
As I understand it, the majority of individual smartphone components would be manufactured using automation, and the primary step that takes place in Shenzhen is someone physically putting all the pieces together. I couldn't make an informed comment on the feasibility or cost effectiveness of trying to automate this process as well (I'd guess it's fairly low due to the relative uniqueness of each phone model) but maybe someone else can.

And Tesla is well behind the major car manufacturers in using automation.

Re:Google suspends some business with Huawei by panabee on Monday May 20, 2019 @02:38AM (#19958017)
the car/tesla analogy was a mistake as it's secondary and evidently not true, but too late to edit the comment. thanks for sharing about smartphone manufacturing. it seems like foxconn is already moving toward this, though naturally slower than projected: https://qz.com/1312079/iphone-maker-foxconn-is-churning-out-...

can you recommend any sources for learning more about the state of automated CE/smartphone manufacturing, or this based on personal experience?

Re:Google suspends some business with Huawei by blago on Monday May 20, 2019 @02:32AM (#19957991)
“Yes, excessive automation at Tesla was a mistake,” Musk said via Twitter a few months ago. “To be precise, my mistake. Humans are underrated.”
Re:Google suspends some business with Huawei by ulfw on Monday May 20, 2019 @12:47AM (#19957605)
Wow. Look at Tesla go!

Why hasn't any other auto manufacturer thought of this?!

Re:Google suspends some business with Huawei by threeseed on Monday May 20, 2019 @01:20AM (#19957730)
The other auto makers are too busy rolling around in their billions in profit.

Tesla doesn't have this problem you see.

Re:Google suspends some business with Huawei by ulfw on Monday May 20, 2019 @01:58AM (#19957861)
Haha. Yes. That they really don't. Good point
Re:Google suspends some business with Huawei by tooltalk on Monday May 20, 2019 @10:13PM (#19967096)
This is ridiculous. You are making it sound like those suppliers are immovable and somehow only available in China. But let's face it, Apple is in China because of almost unlimited cheap, unskilled rural labor force that can't be found elsewhere. Samsung was also in same spot years ago, but found a much better deal in Vietnam years back and in fact moved much of their smartphone operation there (along with some 200+ subcontractors and suppliers). Unlike Samsung's AMOLED displays, Corning's Gorilla glasses, or SONY's cameras, there is nothing in China that can't be produced elsewhere.

Vietnam also has hundreds of thousands of CNC, toolings and craftmen to produce in Samsung's volume. This supply chain narrative is something Apple marketing folks invented to justify their outsourcing. Trump's trade war with China, as many contract manufacturer move out of China, will prove none of that supply chain myth is true within a year or two.

Re:Google suspends some business with Huawei by CamperBob2 on Sunday May 19, 2019 @07:16PM (#19956195)
Everything you've mentioned is basically synonymous with "cost."

An iPhone built in the US from domestic components would probably cost more than most peoples' cars.

Re:Google suspends some business with Huawei by Talanes on Sunday May 19, 2019 @07:31PM (#19956271)
While you're right that the logistical issues can all be reduced to cost, it removes a lot of nuance to act as if logistical superiority is the same as the vernacular low-cost.
Re:Google suspends some business with Huawei by otterley on Sunday May 19, 2019 @06:40PM (#19956015)
Re:Google suspends some business with Huawei by avocado4 on Sunday May 19, 2019 @05:53PM (#19955757)
In what world is Huawei a leading premium device manufacturer? Do you have a source?
Re:Google suspends some business with Huawei by cromwellian on Sunday May 19, 2019 @09:05PM (#19956735)
Do you consider Samsung a premium Android manufacturer? I assume you're not defining "premium" == "Apple". If you admit that there are premium Android phones, and that Samsung is one of the manufacturers, well, Huawei is on track to surpass Samsung in units sold, AND it has the best reviewed camera. It blows away the iPhone X series, especially at low light, but also produces incredible night/low light protography beating even the Google Pixel Night Sight mode.

in China, they are now the most expensive phones, people are willing to pay more $$$ to get the top of the line Huawei than an iPhone which used to be the previous "look am me, I'm rich and trendy" device to own there. It's one reason why iPhone sales in China have declined.

There's no world in which you can't claim they are not a world leading phone manufacturer and that their devices aren't premium. Sure, the heavy modded Android sucks and is probably spyware and you can't get vanilla android on it, but hardware wise, it is premium. The P30 Pro runs for almost $1000.

People who live in the US kind of live in a reality distortion field around Apple, and are somewhat blind to what is happening in Europe and Asia. And this complacence is a pretty bad way to evaluate your competitors.

https://www.notebookcheck.net/Huawei-threatening-Samsung-for...

https://www.theverge.com/2019/2/12/18221598/huawei-apple-chi...

https://www.theverge.com/2019/4/10/18285123/huawei-p30-pro-r...

Re:Google suspends some business with Huawei by ksec on Monday May 20, 2019 @01:44AM (#19957820)
Would Xiaomi be a leading premium manufacture if they had a devices running for $1000, when their Smartphone ASP is below $200?

>People who live in the US kind of live in a reality distortion field around Apple, and are somewhat blind to what is happening in Europe and Asia. And this complacence is a pretty bad way to evaluate your competitors.

It isn't RDF, it is "leading premium manufacture" does mean what you think it means. It would be more accurate if it was "leading premium Android manufacturers".

Re:Google suspends some business with Huawei by avocado4 on Sunday May 19, 2019 @09:17PM (#19956801)
I agree they are a world leading manufacturer (#2 behind Samsung), and I agree that some of their devices are premium. I'm just saying they are not a leading premium manufacturer. Those are 2 different things. Apple and Samsung are by far ahead in volume sold for premium devices globally.
Re:Google suspends some business with Huawei by arebours on Sunday May 19, 2019 @09:19PM (#19956807)
Re:Google suspends some business with Huawei by avocado4 on Sunday May 19, 2019 @09:22PM (#19956814)
This doesn't show they are a leading premium smartphone manufacturer. This says they are a 2nd largest smartphone manufacturer.

Leading premium manufacturer means largest volume of premium smartphones sold. Huawei doesn't sell a lot of P30 (although I agree it's a premium device).

Re:Google suspends some business with Huawei by ksec on Monday May 20, 2019 @01:39AM (#19957804)
This. And I am surprised at the amount of downvote and I quote "an assertion that is a fairly well-known fact."
Re:Google suspends some business with Huawei by cromwellian on Monday May 20, 2019 @07:48AM (#19959438)
Where’s your citation on P30 sales figures? If apple doesn’t sell as many iPhone X’s as P30s in China does that make Apple not a premium manufacturer if most of their sales are lower end?

https://www.huaweicentral.com/huawei-p30-series-single-day-s...

https://www.cnbc.com/2019/05/01/huawei-ahead-of-apple-in-q1-...

In 2018, they shipped 16 million P20s in 9 months. And they shipped 100,000 in a single day which could translate to 3 million units a month or 27 million in 9 months, but even if they ship 20 million in 9 months which is 25% more than the P20 you can’t wave you hands and act like no one is buying these phones.

Re:Google suspends some business with Huawei by ksec on Monday May 20, 2019 @11:14AM (#19961179)
Because Apple report their Smartphone ASP, ( at least in iPhone X era ) And you will need to look up even the worst of iPhone X estimate shipment figures.

No one, me or the previous one who replied said anything about P20 not selling. Nor the P30. It is simply not leading premium Smartphone, where Smartphone here is inclusive of iOS. Not by commonly used matrix, where the word leading would directly referred to market ASP and not leading as in technically. And I said this again, it would be correct if the sentence was leading premium Android Smartphone. Or Leading Smartphone ( Excluding Android ) or Leading Android would also be correct.

And I am out.

Re:Google suspends some business with Huawei by ulfw on Monday May 20, 2019 @12:48AM (#19957612)
In a world outside the US, where the Huawei P30 Pro has the best camera combo, one of the fastest processors and a premium. build (and price).
Re:Google suspends some business with Huawei by unixhero on Sunday May 19, 2019 @05:59PM (#19955786)
He is right.
Re:Google suspends some business with Huawei by ksec on Sunday May 19, 2019 @06:11PM (#19955849)
Source? And how do you define premium? The sentence implies leading as in market shares, and not technological.
Re:Google suspends some business with Huawei by cromwellian on Monday May 20, 2019 @07:53AM (#19959472)
Huawei p30 leads Apple on camera quality by far. It has premium build quality and battery life.

In market share they lead Apple in China, and they ship more units.

Trying to act like they’re a low end bit player is ludicrous. They’re the Samsung of China now, and on track to overtake Samsung globally.

Re:Google suspends some business with Huawei by gsich on Sunday May 19, 2019 @07:25PM (#19956237)
In this one.
Re:Google suspends some business with Huawei by Mikeb85 on Sunday May 19, 2019 @06:37PM (#19955996)
Asking for a source for an assertion that is a fairly well-known fact is simply lazy.
Re:Google suspends some business with Huawei by ksec on Monday May 20, 2019 @01:36AM (#19957789)
Fact?

Huawei is #2 or #1 by unit shipment. That doesn't immediately make them a "leading" Premium Smartphone maker. I could sell 200M of $200 Phones and 10M of $700 Phones. Would that make them leading? Would that make them premium?