Hacker News new | ask | show | jobs
by kvakvs 1456 days ago
Kaspersky labs have this curse of trying to be good guys, while operating from a dictatorship state with all state security services having hands up theirs, firmly holding them and operating them like puppets. It is impossible to be a good neutral guy in a dictatorship.
5 comments

How quick are we to forget PRISM [1] and the countless other related programs that have been revealed. Any tech company operating in any country is going to be subject to the state interests within that country. Anything beyond that matter of fact is going to be a matter of public relations come propaganda.

You can see this leaking into the public in the US most commonly with China. China is still a geopolitical adversary of the US, but they're also the economic future of the world. So big companies want to appeal to China, but are in a constant balancing act between that and keeping domestic powers happy.

[1] - https://en.wikipedia.org/wiki/PRISM

Nobody's "forgetting" anything - it's simply that the US doesn't have any programs that are remotely comparable to those of Russia or China. For instance, show me the US federal law that requires that companies to provide them with constant unencrypted access to all users' data (and forbid E2E), without a warrant, and to provide real-time monitoring and censorship of all communication data.

Comparing metadata collection to legally mandated decryption, storage, monitoring, and censorship of all user data and metadata is insane.

You're confusing section 215 of the "Patriot Act" - later on the "USA FREEDOM Act" (don't you love the names) with PRISM. The two are quite different spying acts. The USA FREEDOM spying is where the whole metadata only debacle came from.

From the Wiki which references the NSA's own slides, PRISM offers: "extensive, in-depth surveillance on LIVE [emphasis mine] communications and stored information" with examples including email, video and voice chat, videos, photos, voice-over-IP chats (such as Skype), file transfers, and social networking details.

One of the leaked documents is a training manual for spying on Skype calls, which are routed right on over to the NSA. It even had a technical support FAQ which includes issues like understanding why messages are being repeated - they're being synched to another device which resends everything, or how to most effectively spy on a user using multiple IDs. It was quite user friendly!

The entire scope of the NSA is really quite absurd. They even had/have spies installed in World of Warcraft [1]. It's all quite dystopic but it often feels like we're stuck closer to Brazil than 1984.

[1] - https://www.theatlantic.com/international/archive/2013/12/ns...

I think it’s rather a concern that too much bending over backwards to please Xi will jeopardize their customers trust. There is a concerted effort now afoot both in the EU and the USA to bring certain tech fabrication processes to domestic shores for various reasons. The race to the bottom of costing in pursuit of profit margins brought other issues to the forefront and once the market probed the lower end of costing possibilities consumers noticed things like scissors that bend when cutting paper, and there’s been a large backlash, arguably one of the principle fuels feeding the fires of this fake so-called-populism.

Im not so sure about China being the economic future of the world these days, despite decades hearing this and despite actual economic sizes and pollution footprints, as I’m not sure China and the US or EU markets can decouple effectively so easily. It’s a bit of a double edged sword for all concerned

> Im not so sure about China being the economic future of the world these days, despite decades hearing this and despite actual economic sizes and pollution footprints, as I’m not sure China and the US or EU markets can decouple effectively so easily. It’s a bit of a double edged sword for all concerned

The US/EU for a long time acted like "change through trade" (or in German, "Wandel durch Handel") would be a realistic prospect for dealing with both China and Russia. Obviously that failed, with Russia invading Ukraine and China following the 1933-45 footsteps with the Uyghurs. The behavior of both Russia and China has become so explicitly bad that even the hope for profits cannot make politicians look away longer.

The problem is: China has amassed enormous amounts of money, and they are using that money in a way similar to the Marshall Fund of the past-1945 era to build out immense support and a destination market for their goods in Africa and Asia. For better or worse, China will become a dominant player in geopolitics.

Regardless of how much money they throw around, the list of China’s friends in Asia is much shorter than the list of countries that would literally rather burn to the ground than bend the knee to a Chinese emperor again, and I think that’s a big problem for their aspirations of being a major player in geopolitics.
In a slight oversimplification of geopolitics, any company can be pressured by either Russia, China or the US. From the last two decades we have plenty of reports of all three of them happily abusing this power.

The best you can do to stay up to date on what's happening is listening to all three sides. Kaspersky can't speak out against Russia, but at the same time they are free (and probably encouraged) to expose cybersecurity threats coming from Western governments; which most Western cybersecurity companies seem to be unable or unwilling to talk about.

This is a false equivalence. The situations are not the same or frankly even close to it.
Very true. America is much more powerful than the other two.
On the contrary. The US government has a lot less power to control private companies. They do try and even succeed sometimes, but it's nothing even close to the total command and control Russia and China regularly exert.
Right.

In capitalist America, corporation controls government.

Yup. As a trivial example, the US neither has a "misinformation control agency" like Roskomnadzor, nor requires companies to implement real-time monitoring+censorship of restricted language into their communication products (a la China [1]).

Comparisons between these tyrannical governments and the US fall somewhere between "ignorant" and "willfully deceitful".

[1] https://en.wikipedia.org/wiki/Censorship_in_China

We tried to open one mere months ago.

But aside from that, the US government happily pressures companies with unrelated retribution for not following orders. Instead of an agency that has staff, process, records, etc. you get threats directed at particular people e.g. this regulatory judgment at company X that you own will go against you if you don't do this thing that we've press released that we're asking company Y that you own to do. Or your contracts get dropped.

It's like the US justice system in general, where they'll do things like making you plead guilty to something in order to keep your sister's children from being taken away.

Is that preferable? Are you seriously saying that you still want this stuff to be done, but you hate that it's done above board, in public?

Misinformation warriors criticize this stuff in other countries while simultaneously supporting it here. They've also started saying "false equivalence" together over the past year (maybe an influential book or blog?) which for them means that censorship is good in the US because we only censor bad things, but censorship is bad when our enemies do it because they censor good things. You can pair it with "whataboutism" which has also changed in meaning - it used to mean that someone answered your criticism of something (Soviet business freedoms) with a completely unrelated charge against you (that you are an apartheid state.) Now it means that when you criticize Russia for invading another country, when they criticize you for invading another country that's "whataboutism" because they're the bad guys and we're the good guys.

These arguments wouldn't convince children if laid bare rather than being paired with accusations that you're probably a Russian or Chinese spy if you disagree with them, and that eventually they'll come for you and give you what you deserve.

> fall somewhere between "ignorant" and "willfully deceitful".

I mean, this is a threat, right?

All incorporated companies exists in similar space where they are implicitly and explicitly beholden to the government governing the nation they are incorporated in, that's just how running a legal business is.

Best we can do is get information from multiple sources and build an independent understanding from the information.

Worst we can do is trusting single entities without any verification from others, no matter where the incorporation is made.

some westerners have this curse of thinking that their government and corporations are always the good guys with best intentions. at least easterners [usually] dont trust either
Not quite sure about easterners. At least most Russians seem to have entrusted a certain former KGB agent :)
i dont think voting for someone into leadership is equivalent to thinking they are nice, good, trustworthy, etc. it could be as simple as no better alternative
There is no ‘voting’ when the government controls the media and any opposition gaining momentum is inevitably jailed, poisoned or falls out a window.
or when there was you just bomb the parliament [0] except that time the west fully supported this brutality. selective democracy?

[0] https://en.wikipedia.org/wiki/1993_Russian_constitutional_cr...

GP said that it’s a dictatorship. Now you imply that they chose Putin. Which is it?
Not sure the GP had this mind, but if Putin won a free election before becoming an autocrat, that would satisfy both constraints.
I think the difference is this

Russian Government: We will bomb X because they pose a threat to Russia's interests

American Government: We will bomb X because they need freedom

He had already been appointed to a position where he had the power to rig his first election.
At what point does the democractic mandate run out? He’s been in power for a awhile.
I think it’s rather that, in a bicameral parliamentary representative democracy one knows that one is ultimately partially responsible for those in office, and one cannot just shrug and blame higher ups.
from my personal experience people in the east (and perhaps south) usually look at their rep dem system much more cynically than people in the west (and north). and this attitude is very much reinforced by american patriotism freedom and democracy myth-making. i find its achievements absolutely amazing. how indigenous people and those that not that long ago were subdued into slavery can now be patriotic to the same flag that brought them so much misery is baffling to me
Well, if you are ultimately responsible for your own government and it’s mess, you realize that it’s a losing proposition to simply be cynical about your government.

Maybe it’s time to fix your government instead of acting disengaged and cynical?

In other news: people in corrupt places have low faith in their systems.

America certainly has its problems and corruption, but if you look at what are considered the least corrupt nations on earth, say Finland, you find higher trust in society and government etc.

So I’ll contend that trauma traumatizes people, aka you are stating a tautology

Also, your observations about “east” fail to account for places like Japan, South Korea, and in terms of trust, I think you find high trust in places like Singapore, but only from a certain set of empowered locals, ditto Dubai… But your intended generalism is perhaps Eastern Europe?
EDIT: Earnestness of previous reply underestimated parent commenter's commitment to cynicism. Deleted.
ok
Maybe the huge majorities of voters who support m4a and abortion rights should simply have voted!
While that is true, let's not pretend that gerrymandering is not a thing.
But yes, I agree that cynical histories create less trust
What evidence is there to prove this point? I consider their homing to be unfortunate but they do seem to be good faith players in the space
Believing that they are uncorrupt by the government secret services is naive. Everything in Russia of any value has eyes of secret govt service on it. If the state men ask you for cooperation, you cannot say no, or your life as a person will be destroyed, and you (as an owner) lose the business too (multiple examples in all areas of technology, science and industry).
I get that, but I am looking for specific examples. Suspicions without proof aren't worth a whole lot to me.

Kaspersky has been in the game for quite some time, and Russian secret services aren't exactly known for their discretion. So there must have been some kind of incident by now.