News for hackers. Stuff that matters.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by judge2020 on Monday October 14, 2019 @09:46PM (#21254837)
In case you only read the headline, it was confirmed to only happen if the device's region was set to China. From the statement:

> To accomplish this task, Safari receives a list of websites known to be malicious from Google, and for devices with their region code set to mainland China, it receives a list from Tencent.

From Apple's statement, Tencent's API functions exactly the same as Google's k-anonymity model, which you can read more about the api[0] and how it works[1] (also via this JAMIA paper[2]).

0: https://developers.google.com/safe-browsing/v4/update-api#ch...

1: https://blog.cloudflare.com/validating-leaked-passwords-with...

2: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2528029/

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by freewizard on Monday October 14, 2019 @11:30PM (#21255319)
It worth noting, for some features like hiding Taiwan flag, the logic is to check both system setting and hardware sales region, it will be on if either is true.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by owens99 on Tuesday October 15, 2019 @12:07AM (#21255479)
Is there documentation to show which features, like this, are based on hardware sales region?
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by hrktb on Tuesday October 15, 2019 @04:05AM (#21256441)
It’s a touchy subject so usually not documented.

On the softer side, shutter sound can’t be muted on the camera app for JP sold iPhones, I can’t find any offical doc (not customer discussion) mentioning it.

edit: there was some doc, just with a vague “shutter sound might be disabled depending on your region” mention.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by greggman2 on Tuesday October 15, 2019 @06:26AM (#21257142)
it's a ridiculous law . You want to take a picture of your sleeping baby without waking her. Sucks to be you. Want to take a picture of your cat or dog without them changing their pose in response to the sound. You can't. Want to take a picture at a wedding without distrubing the mood? Or bad for you. Want to take a picture at a fancy quiet romantic dinner without annoying all the other guests? Can't do it.

In the meantime any pervert (the claimed reason for the law) can use any non-phone camera or for that matter any other camera app than the built in one

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by dsfyu404ed on Tuesday October 15, 2019 @06:44AM (#21257221)
>it's a ridiculous law

It's par for the course. Laws in response to moral panics tend to suck and inconvenience reasonable people while having simple workarounds.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by zingermc on Tuesday October 15, 2019 @08:00AM (#21257566)
Is there a shutter sound if you take a video?
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by nroets on Tuesday October 15, 2019 @08:24AM (#21257669)
Even if there is, it will only be at the beginning. So you can circumvent the intent of the law (e.g. filming the police) by starting to film yourself, pretending to stop and then point the camera at the subject.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by Forbo on Tuesday October 15, 2019 @10:35AM (#21258825)
The intent of the law was to dissuade upskirt photos on trains, not filming the police, if I recall correctly.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by kazagistar on Tuesday October 15, 2019 @11:47AM (#21259698)
There is always some bullshit moral outrage used as the excuse to make laws that are really there to protect existing institutions of power.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by infecto on Tuesday October 15, 2019 @12:21PM (#21260213)
I think you are mistaken. There is no formal law AFAIK but it was just an agreement made by companies in Japan. You are free to order a phone outside of Japan. This was a huge issue in Japan when phones started getting cameras and so everyone made a handshake agreement.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by brigandish on Tuesday October 15, 2019 @10:51PM (#21266610)
In Japan, the difference between formal law and cultural law with respect to their enforcement is often not a distinction worth making (as John Stuart Mill pointed out in On Liberty⁎). Just ask women how interested the police are in dealing with rape or domestic abuse.

Only yesterday I was reading a Reddit thread where someone new to Japan asked whether to inform the police of the apparently violent arguments his neighbours were having and the responses varied from "don't bother, the police won't care" to "make a noise complaint, at least the police will be interested". That's the least scary anecdote I have.

⁎ Probably not about Japan specifically :)

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by DerekRobot on Wednesday October 16, 2019 @12:11PM (#21271988)
Example: The gentlemen's agreement to end competition

https://en.wikipedia.org/wiki/List_of_fastest_production_mot...

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by hrktb on Tuesday October 15, 2019 @12:39PM (#21260443)
I think it’s worse than that.

As far as I remember Jphone, the company first heavily advertising camera phones, forced the shutter on its own to preemptively clear itself from any potential issue.

Every phone carrier from there had the choice to forgo the mandatory shutter sound but risk backlash if anything were to happen, as Jphone set a precedent. And they choose the safety move.

When the iPhone came, it would have just been a marketing quagmire to go with a mutable sound.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by Vrondi on Tuesday October 15, 2019 @09:36AM (#21258181)
Just use a third party camera app. At least, this works on Android. Does this not work on iOS?
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by greggman2 on Tuesday October 15, 2019 @09:45PM (#21266232)
iOS has the issue that you can not select default apps, unlike Android. So yes you can use a 3rd party app but you can't make it the app that takes pictures when the phone is locked nor can you make it the app that gets launched from the accessible from anywhere control panel. In other words, their is friction using a 3rd party app.

But of course that's also part of the issue. If 3rd party apps don't have to make a sound then what was the point of the law? The perverts can just use a 3rd party app and 99.999% of users have to deal with a stupid for no actual protection.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by neop1x on Wednesday October 16, 2019 @11:29AM (#21271438)
And someone always finds a way to get a device which can make photos silently. For example by importing it, modding it, using older devices, etc. It is not solving anything. It is simply a stupid law against users.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by qtplatypus on Tuesday October 15, 2019 @10:21PM (#21266444)
But it isn’t a law. Just something that the carriers agreed to do.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by innocenat on Tuesday October 15, 2019 @07:37AM (#21257458)
1st, it's not law.

2nd, if you are in Japan pretty much everyone is used to the shutter sound.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by criley2 on Tuesday October 15, 2019 @08:21AM (#21257649)
Ya know, any non-pervert can use those non-phone cameras for all of the use cases you mentioned too... Is taking pictures of your fancy dinner or jumpy pets really so hard to do with a superior and low cost dedicated camera? The results will be superior for a fraction of the price!

Here's the thing you refuse to acknowledge (or perhaps didn't think through before writing) -- when someone is holding a P+S camera or bigger, everyone knows they're taking a picture. But when someone is holding a smartphone, you assume they are not taking a picture because 99.9% of the time phones are not in camera mode.

The point wasn't to ensure that all cameras made noise, it was to ensure that a phone couldn't be used as a secret camera in public.

Seriously, I struggle to parse the logic here: Do you think that creepers are taking actual full size cameras into subways for creepshots? Or are you thinking they're using "Spy Camera" type devices? Because the people the law was meant to deter generally aren't that level of creeper, and their creepshots are a crime of convenience not a premeditated act of sexual assault.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by bighi on Tuesday October 15, 2019 @09:28AM (#21258115)
The user you're replying to said "other camera app". They meant apps, not a full sized camera.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by criley2 on Tuesday October 15, 2019 @09:34AM (#21258166)
So, they're complaining that creeps can use apps to take pictures but regular people can't?

Their whole argument boils down to regular users not being able to download an app from the app store?

Wow. You're right, I assumed their argument was a lot better than that. Oof.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by MadWombat on Tuesday October 15, 2019 @10:12AM (#21258514)
The argument is that the shutter sound inconveniences regular users while doing nothing to prevent the misuse it claims to prevent. Which part did you miss?
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by criley2 on Tuesday October 15, 2019 @10:28AM (#21258739)
I missed the part where every creeper alive circumvents the policy without inconvenience but every other user alive can't.

I require consistency, so either EVERYONE is inconvenienced, or EVERYONE can circumvent it without issue.

The part I missed is the justification for inconsistent and illogical arguments where magically your ability to be inconvenienced is based only on your desire to be a creep.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by MadWombat on Tuesday October 15, 2019 @03:14PM (#21262485)
> where magically your ability to be inconvenienced is based only on your desire to be a creep

Where the hell did this come from?

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by mrunseen on Tuesday October 15, 2019 @06:32AM (#21257160)
For example Facetime banned in UAE

https://support.apple.com/en-us/HT204170

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by not_a_cop75 on Tuesday October 15, 2019 @09:18AM (#21258021)
Refusing human rights is a touchy subject, especially when the violators of human rights pay so well. The corrupting influence of money is becoming more and more widespread. Pretty soon, perhaps the only way to avoid human slavery will be direct payouts to the powerful, as if that isn't slavery already. Perhaps we're already there.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by orhmeh09 on Tuesday October 15, 2019 @01:02AM (#21255703)
On a recent story (perhaps the most recent popular one on this topic), a former Microsoft employee said they maintained an internal database to keep track of what was necessary for each country. I’ll see if I can dig it up.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by iaml on Tuesday October 15, 2019 @08:46AM (#21257795)
Pride watchface is locked on russian watches even if region is set to US.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by ssalka on Monday October 14, 2019 @10:37PM (#21255108)
If I was based in China, could I just set my region to be somewhere else in order to bypass this?
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by input_sh on Tuesday October 15, 2019 @02:09AM (#21255932)
No, you'd need to purchase the device outside of China and set the locale to something else.

In the safe browsing example, you'd just lose it completely because it would be replaced by Google's safe browsing list (also used by Chrome and Firefox), which you couldn't connect to from within China. So the end result is the same as turning off safe browsing.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by gruez on Monday October 14, 2019 @11:01PM (#21255205)
...or just disable safebrowsing?
[dead]
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by aclsid on Tuesday October 15, 2019 @12:01AM (#21255441)
You definitely haven't been in China. Even when they blocked some VPNs, Apple devices are a million times better in China because it has the official app store.

You cannot begin to understand what it means to be forced to use one of those non-Google Play stores. Even if you set your device to English, Firefox will be in Chinese and you get a weird Skype version as well.

I mean it is a pretty interesting experience living Google-free on Android, and you could resort to APKPure to install some stuff like Whatsapp. But honestly, unless you get a Xiaomi phone or equivalent that you can switch to an international ROM, the whole experience is pretty annoying. Spam calls and text blockers on Android are the main highlight though.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by fulafel on Tuesday October 15, 2019 @01:25AM (#21255769)
Is there free software activism in China? Sounds like they could use something like F-Droid (or work on F-Droid to support chinese users better).
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by wildduck on Tuesday October 15, 2019 @02:03AM (#21255908)
Why is this down voted? F-Droid is very viable alternative to Google Play Store.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by Avamander on Tuesday October 15, 2019 @05:00AM (#21256723)
If players that big are in the game then no, F-Droid is a dangerous consolidation of power. They really shouldn't sign apps themselves and only sign over reproducible builds.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by SXX on Tuesday October 15, 2019 @07:24AM (#21257396)
I really never digged into this, but isn't they already provide an option to do this? [0] And there is even an option to setup verification server [1]. I get it's not perfect, but they have limited resources and someone have to work on such feature full time.

[0] https://f-droid.org/docs/Reproducible_Builds

[1] https://f-droid.org/docs/Verification_Server/

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by JensRex on Tuesday October 15, 2019 @02:38AM (#21256066)
I lost a lot of respect for them, when they participated in Gab censorship.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by wildduck on Tuesday October 15, 2019 @04:48AM (#21256663)
@JensRex, What is Gap censorship? From what is available on the internet, Gap seems to be online publishing is decentralized and open using AGPL3.

However, I don't anything about it. Maybe you can share.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by _-o-_ on Tuesday October 15, 2019 @06:50AM (#21257248)
It started as a free speech Twitter alternative aimed at republicans. But along with republicans and free speech activists they've attracted right-leaning extremists that were banned from Twitter for a plethora of good reasons. As a result of those users being left unmoderated, Gab gained a certain reputation.

Gab's apps weren't accepted to either app store, they were booted by several hosting companies, had to switch domain registrar and their stripe account was suspended. Switch to a Mastodon fork is a recent development.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by astrodust on Tuesday October 15, 2019 @11:53AM (#21259791)
"Republicans"? That's what we're calling them now?
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by lawlessone on Tuesday October 15, 2019 @05:30AM (#21256860)
> I don't anything about it. Maybe you can share.

Gab ,It's essentially only used by and caters to white supremacists now.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by wildduck on Tuesday October 15, 2019 @06:47AM (#21257232)
>Gab ,It's essentially only used by and caters to white supremacists now.

Any sources you can share?

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by acollins1331 on Tuesday October 15, 2019 @07:30AM (#21257421)
There aren't scholarly sources on this stuff. Just stop by sometime and read the drivel.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by krageon on Tuesday October 15, 2019 @05:55AM (#21256982)
Gab was a platform advocating "free speech" and as is the meme with those types of platforms these days, it was filled by people denying the holocaust and claiming all black people operate better as slaves. The list is not exhaustive, but you get the idea.

To my mind, no good-faith claim that such things do not need to be ostracised exists.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by HeWhoLurksLate on Tuesday October 15, 2019 @10:30AM (#21258765)
Unfortunately, in this day and age, social ostracism makes things worse because people tend to continue to group up on other platforms that are worse.

Like Gab- can't use Twitter? We'll make our own echo chamber.

Them being on Twitter is bad, but being on their own platform is arguably worse.

   > To my mind, no good-faith claim that such things do not need to be ostracised exists.
Here's my claim- WRT to the internet, ostracism of extremists generally makes the social situation worse.

(BTW, I really don't like it, either.)

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by LocalH on Tuesday October 15, 2019 @01:20PM (#21261055)
Them being on Twitter is bad, but being on their own platform is arguably worse.

I fully agree with this. It will end up being a self-fulfilling prophecy for those arguing against true freedom of speech. When you deplatform a viewpoint entirely, then the people with that viewpoint are going to coalesce onto a much smaller platform, which will end up being an echo chamber for the viewpoints that the rest of the world desires to quash. Then, it will end up becoming an argument to prevent such echo chambers from even forming in the first place, which would effectively make it impossible for smaller players to get an inroad, as they'll just be preemptively accused of being inherently alt-right.

These people don't understand that, when you centralize control over avenues of speech like that, then one day that centralized control can do a 180 and start banning any type of speech, and not just "harmful" or "problematic" speech.

It's literally the same type of tactic that China uses to suppress dissent, just on a different scale (and with a different culture behind it). It's so transparent, yet the prevailing "public narrative" is still highly supportive of deplatforming.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by krageon on Wednesday October 16, 2019 @04:55AM (#21268375)
This argument is compelling on the surface, were it not that Europe has had laws against this kind of speech for a fairly long time now and it has made nothing worse. The place where it really is worse is the US, where even people who are not fascists seem to imagine that it is important to give them a "platform".
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by nroets on Tuesday October 15, 2019 @08:34AM (#21257713)
F-Droid will be blocked by the Great Firewall as soon as it becomes a popular way of circumventing censorship. On top of that, there is a real possibility that most Android phones sold in China are backdoored by the government in some way.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by yyyk on Tuesday October 15, 2019 @12:19PM (#21260184)
F-Droid allows many ways to update without using its main server - from alternative servers to transfer via NFC/wifi. Perhaps traffic shaping can detect typical F-Droid traffic, but a simple IP block won't do.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by Forbo on Tuesday October 15, 2019 @10:37AM (#21258848)
I'm not sure if Orbot supports Meek-Azure bridges, but if it does then you can force F-Droid to use Tor for all it's traffic.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by yorwba on Tuesday October 15, 2019 @04:44AM (#21256644)
Of course there's free software activism in China and there are apps by Chinese developers available via F-Droid. But that doesn't change anything for users who aren't free software activists. They either use the app store preinstalled on their device, or download APKs from their search engine (which often boils down to the same thing).

F-Droid would need coporate backing or SEO to get popular in China, not free software activism.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by marvin on Tuesday October 15, 2019 @03:33AM (#21256313)
This seems like a situation where sufficiently effective free software advocacy will be persecuted. Will be interesting to see how it pans out, if at all.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by raverbashing on Tuesday October 15, 2019 @02:40AM (#21256079)
There's one interesting way of having a non-Google Android experience without going to China.

Get an Amazon Fire device

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by lonelappde on Tuesday October 15, 2019 @12:47AM (#21255642)
Almost everyone in China is literate in Chinese.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by the_pwner224 on Tuesday October 15, 2019 @12:03AM (#21255461)
Sideloading would not fix built-in malware that cannot be removed. You would have to flash the device with a ROM like LineageOS, at which point you would have a FOSS (excluding drivers/firmware) system which you can (mostly) trust. F-Droid is a repository / app store of good free Android software apps that you can also mostly trust, which you could then use to add functionality.

But just sideloading would not do much.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by bri3d on Monday October 14, 2019 @09:58PM (#21254897)
Locale region, not language. Important distinction. For example I don’t believe Tencent would be used in Hong Kong (zh_HK).
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by uto on Monday October 14, 2019 @11:14PM (#21255258)
They already started censoring the emoji keyboard in HK, this would be even easier to justify as it is "protecting the user".
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by fishywang on Tuesday October 15, 2019 @01:16AM (#21255737)
There's no zh_US (or zh_UK, etc.), so any mainlander living overseas and still use Chinese as the preferred language on their iPhones will get their IP address sent to Tencent. There's not much difference here.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by dchest on Tuesday October 15, 2019 @02:41AM (#21256082)
There is zh_US in Apple universe: on iOS/Mac language identifier depends on Language (zh) and Region settings (US).

So, if you set Traditional Chinese for language and United States for region (https://developer.apple.com/library/archive/documentation/Ma...), [[NSLocale currentLocale] countryCode] (which Apple compares to "CN" for this feature according to this comment https://news.ycombinator.com/item?id=21242628) will return US, and [[NSLocale currentLocale] localeIdentifier] will return zh_US.

localeIdentifier also returns some other interesting things, e.g. mine is "en_US@currency=EUR", because I customized Region formats.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by fishywang on Tuesday October 15, 2019 @05:59PM (#21264386)
Average users aren't aware of its existence. Also for a lot of mainlanders living in the US they won't prefer to set their region to US because that means imperial units instead of metrics units.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by dchest on Wednesday October 16, 2019 @04:26AM (#21268233)
What do you mean they are not aware of it? Selecting language AND country is the first action when setting up an iPhone.

(Can't argue with the second point.)

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by fishywang on Wednesday October 16, 2019 @01:21PM (#21272881)
Oh I guess I misremembered. Sorry. The last time I setup a Mac to non en_US was a lot of years ago (I never used iOS devices).
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by viraptor on Monday October 14, 2019 @09:55PM (#21254881)
s/device's language/region/

They seem to be different settings and you can have Chinese language with (for example) US region.

Re:Apple: We're not handing over Safari URLs to Tencent, jus... by judge2020 on Monday October 14, 2019 @10:01PM (#21254916)
Thanks, done.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by ww520 on Monday October 14, 2019 @10:57PM (#21255195)
Someone should run a proxy on the Google’s model to get around the blockage.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by velcrovan on Tuesday October 15, 2019 @07:22AM (#21257384)
Yes, this would certainly be allowed in China. /s
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by MichaelApproved on Tuesday October 15, 2019 @08:16AM (#21257628)
If google can’t get around the blockage, another organization wouldn’t last long either.
Re:Apple: We're not handing over Safari URLs to Tencent, jus... by ratww on Monday October 14, 2019 @11:36PM (#21255345)
Maybe Apple themselves should do it?