News for hackers. Stuff that matters.

ashleycole

What do you mean when you say: "you do not need to mess around with localStorage"? Aren't you supposed to store this token on the client side (presumably using localStorage/cookies), and then include it in the request?

You seem to know what you're talking about, but i'm a bit confused. With JWT I just store the token in localStorage and then add Authentization Bearer header with the token. What's the recommended approach? To send username + token as part of the form data?

Agreed, but I believe you'll also agree that factual information with a narrative is better than fictitious information (and I'm struggling to think of an example where fictitious/censored information wouldn't have a narrative as well).

In an ideal world, then I'd say that the goal should be to educate the current and future generations to develop critical thinking capabilities, so that they'll hopefully laugh/cry/shake their head (or if they have more patience/heart than me, try to educate) when they read the kind of information you'd more often than not find on the_donald.

I honestly don't support the idea of censorship, and I believe everyone should have the right to privacy (I'm very saddened today to discover that Apple/NSA/Chinese government/etc is likely secretly recording my iPhone screen as I type this message). A part of me would even want to go as far as to say that if people wanted to spread hateful messages/illegal activity, then the solution shouldn't be to censor them, but rather to rely on the people to downvote and educate. Imagine a Reddit where mods were incapable of deleting/censoring any content. What do you think would happen? I personally have no idea, but I believe that there's a real chance these alt-right and racist aggregators wouldn't be able to succeed in creating a "safe haven" where they'd continue to have their hateful views reinforced. I recently read an interesting article about a neo-nazi that was forced to interact with a black police officer, resulting in a friendship that ended his hateful views. I strongly believe that if they couldn't censor rational voices (which I'd like to believe outnumber them by at least 10 to 1) then there's a high chance that their views could be corrected.

It would definitely be very difficult to achieve this when governments like Russia's appear willing to commit hundreds of millions of dollars (I'm assuming) in supporting hateful views. But I do (probably naively) believe that if people were highly educated then it should be possible to build a platform that could withstand these state attacks (e.g. value an upvote by a high karma user higher than a low karma user). Do you think the HN crowd would be negatively influenced (persuaded) by hateful flow of information? If the answer is no, doesn't that mean that high intelligence can withstand hateful/fake information and that there'd therefore be no need to censor it?

Censorship is dangerous because it can easily be abused. You may want to argue that with the right censorship tools then we could've prevented Trump from becoming the president. But what happens when a manic like him ends up in a position of control over said censorship tools? I'm guessing he'd do everything possible to become a dictator, to rewrite history, to spread his hateful views, to worsen the education and attempt to brainwash the students, etc. The way I see it, the only sustainable solution would be achieving a highly intelligent population.

Apple can secretly record everything on your screen

This is arguably the biggest tech/privacy related news in 2017, yet it has gone almost completely unnoticed by the HN crowd.If Apple give(/gave) UBER access to secretly record everything on your screen, then what are the chances that NSA (and possibly foreign governments) doesn't have the same access?Previous discussion: https://news.ycombinator.com/item?id=15411533

( Read More... | no comments | 9 points | on HN )
I believe everyone deserve access to factual information and history, and it deeply saddens me when people abuse their power to suppress information, rewrite history, brainwash people, etc. China is not the only offender, but I'd say that they are the most dangerous one, and they even abuse their power to force other nations to submit themselves to their tyranny.

Everyone is unique, have different ideas, beliefs and thinking capabilities. It's only natural that, as such, people will process and respond to the same content in different ways.

I do believe that many Chinese people would form drastically different opinions if they had access to factual information. That being said, I must admit that my personal motivation would be less about helping the Chinese people, and more about attempting to limit China's power.

However, as I also mentioned in the other post, I'm not brave enough to even attempt to execute this idea. It's also important to anyone who might consider it that they would, if successful, endanger the life of themselves and their loved ones.

Re:The jailing of Hong Kong’s young pro-democracy leaders  on Thursday October 05, 2017 @05:28PM (#15412718)
I'm well aware of previous incidents, which is my basis for why GitHub is the platform that can cause so much damage to the Chinese government. We both seem to agree that China is very dependent on GitHub (perhaps the only western website they still rely on) and the economic damage of being forced to block it would be astronomical.

What I suggested and GreatFire is miles apart. Moreover, I'm not saying that throwing up some wikipedia articles about Tiananmen, Chairman Mao, etc. will result in China being forced to block GitHub or attack you. The path to success is to have the repo spread to tens of millions of Chinese locals. Regular people, not just the tech savvy that knows what a VPN is. It certainly won't be easy, especially considering they can easily shadowblock all links to the repo, the name of the repo, a picture with a link/QR, etc.

By the way, people have already been and continue to be tracked down and attacked for doing these kinds of things (a notably incident that reached the front page of HN: https://news.ycombinator.com/item?id=10101469), so no, the assumption that people will be attacked for doing this is most definitely not wrong.

Re:The jailing of Hong Kong’s young pro-democracy leaders  on Thursday October 05, 2017 @12:16PM (#15410337)
If someone actually did this successfully, then GitHub is put in a very tough spot where they have to choose between potentially losing the Chinese market, or begin to censor their platform, which could be the beginning of the end for them (I imagine GitLab would certainly take advantage of the situation).

China would most definitely retaliate; first by threatening and attacking GitHub, and if that didn't work then block the site completely. This would result in the Chinese companies/government losing billions, their tech progress could be severely hurt, and they would risk enraging the Chinese dev community.

It's very naive to think that the people responsible for creating and spreading this repo wouldn't be attacked, and while you might succeed in maintaining anonymity of the GitHub account (risky assumption), you most certainly wouldn't be able to remain anonymous when spreading it on Chinese services like QQ/WeChat/Weibo/etc (at least if an individual were to attempt to do this).

Re:The jailing of Hong Kong’s young pro-democracy leaders  on Thursday October 05, 2017 @04:32AM (#15407513)
I'm honestly too scared to do it. Not because I worry I'll be known as the guy who got GitHub banned in China (presumably after the rest of the world had to suffer from the inaccessibility caused by DDOS attacks that would likely last weeks (I mean the DDOS would last weeks, not the inaccessibility)), but because I worry the Chinese government would retaliate on me.

I agree that many Chinese don't share these values (although I do believe most of them choose to sacrifice their freedom because they don't really have a choice, and they feel it's justified by the country's growth), and that many innocent people would suffer. But I feel as long as the repo focus on spreading truthful history, then the government is to blame for whatever negative effect that occurs as a result of this.

Re:The jailing of Hong Kong’s young pro-democracy leaders  on Thursday October 05, 2017 @04:06AM (#15407378)
They cannot block a specific repo (although GitHub could make it inaccessible to Chinese users, but I don't think they'd want to censor their platform), which is why China resorted to DDOS. I think it really speaks volumes as to how important GitHub currently is to them.
Re:The jailing of Hong Kong’s young pro-democracy leaders  on Thursday October 05, 2017 @02:20AM (#15406982)
I'd say there's one non-violent way to fight back that could significantly hurt China. Host an open source repo on GitHub that highlights China's suppressed history, and use QQ/WeChat/Weibo/etc to spread it to Chinese locals. Do the same for Reddit, and every other western service that isn't blocked in China. (It would likely also help to leave 1-2 star app/play store reviews of WeChat and mention the fact that all private messages/pictures are accessible to the government, and they use the service to limit free speech.)

Imagine how much western companies would suffer if GitHub disappeared overnight. It would quickly become known to the Chinese that a freaking repo containing nothing besides accurate Chinese history was responsible.

If you already obtained a decent reach within Chinese social media apps, then you should consider this: China can easily "shadow-block" certain phrases like tiananmen, hong kong + protest in same message, etc. and you can be certain most of these imagines you find online will also be "shadow-blocked". However, all it takes to beat their current system is to modify a single pixel.