News for hackers. Stuff that matters.
Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by jauntywundrkind on Friday April 05, 2024 @01:20AM (#39938919)
I genuinely wish them well. There has been scant but minor consumer flourishes in OSes for a long long time. Harmony's basis as a distributed multikernel (Linux, LiteOS, other?) OS, with DSoftBus connecting services is an aggressive leap forwards that looks so promising & neat; apps and devices working together (it reminds me of Webinos a bit). Their Ark development experience looks like a decent distillation/extension of JS/typescript, which could become a stable path in a still chaotic Js world.

The plan here sounds very open source oriented, which is promising & IMHO what it will take for Harmony to have staying power. But it feels like a kind of tumltous time for Harmony. Open Harmony and others feels like they're more than somewhat being left behind as Huawei advances a seemingly re-proprietarized HarmonyOS NEXT. Right when Harmony seemed to be coming into it's own, it feels torn. https://en.m.wikipedia.org/wiki/HarmonyOS_NEXT

There's very few guides or experience out there on using Open Harmony. Huawei really seemed to have capture the Harmony market, and their recent sudden shift to proprietary is a huge barrier to this early OS keeping traction forwards. It's unclear how Open Harmony or other open source Harmony's are going to proceed. I hope they can create some good

Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by beAbU on Friday April 05, 2024 @07:19AM (#39941006)
I always thought HarmonyOS was a fork of Android. TIL.
Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by reisse on Friday April 05, 2024 @09:37AM (#39942210)
There are two of them. HarmonyOS is a fork of Android, another (I think it's officially called OpenHarmony) is a custom microkernel OS for IoT devices.
Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by zb3 on Friday April 05, 2024 @07:46AM (#39941205)
> I hope they can create some good

You mean backdoors? Don't forget these are not optional in China

Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by _heimdall on Friday April 05, 2024 @09:03AM (#39941856)
This is such a common view, but are software backdoors really that much less common in the US or EU?

Data is often the real value when it comes to governments, and at that point the only protection is either using services that collect very little (few exist) or end to end encryption. On the E2E front, it seems only a matter of time until one of the many attempts to require encryption backdoors passes in the west.

Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by jszymborski on Friday April 05, 2024 @10:24AM (#39942736)
> This is such a common view, but are software backdoors really that much less common in the US or EU?

Yes.

Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by zb3 on Friday April 05, 2024 @09:18AM (#39941992)
I've personally analysed various Chinese CCTV firmware vendors and backdoors planted there were obvious, here's an example: https://github.com/zb3/tiandy-research, but a better example was XiongMai which actively tried to disguise the backdoor ("Ret" was normally used for replies in that protocol, but the backdoor op requires it set in the request, you can't explain this by incompetence)

Are vendors in the US or EU required to do crap like that while also being prohibited to admit it? Of course services that collect the data "in the cloud" share that data with the government, but this is official and predictable.

Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by _heimdall on Friday April 05, 2024 @09:33AM (#39942174)
I expect it depends quite a bit on how specific of a definitions of "backdoors" we're talking about.

Our main OSes, desktop and mobile, have quite a few backdoors though I couldn't speak to whether the government forced them to do it. Mobile phones, mobile networks, and most (if not all) of the internet trunk lines include backdoors for the government to use. Data collection isn't technically a backdoor, though functionally it is as it allows the government to do what they want to while dodging regulations for search warrants and similar.

The Twitter files point to another backdoor, even if again not technically quite a software "backdoor".

If we stick to the strict definition of a backdoor, the CCP very likely has more control over companies and does require software backdoors for the government to access. In a more general sense though, I at least wouldn't consider the US or the EU to be meaningfully better about the government having access to and control of tech in much the same way.

Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by vizzier on Friday April 05, 2024 @12:57PM (#39944629)
Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by axus on Friday April 05, 2024 @09:40AM (#39942264)
Maybe the shoddy backdoors are an example of malicious compliance with the law? Probably not, they'd lose less sales if the backdoors were well hidden.
Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by zb3 on Friday April 05, 2024 @09:44AM (#39942304)
These are white-label though, you don't buy a "XiongMai" product, you buy a product that you think is made by your local manufacturer, except it has Chinese firmware inside..
Re:Shenzhen Issues Plan to Promote Development of HarmonyOS ... by cies on Friday April 05, 2024 @09:14AM (#39941959)
> their recent sudden shift to proprietary is...

...the reason i do not wish them well :)