Slashdot Mirror
Chinese Agency Linked To Cyber-Espionage Operations Will Review Source Code of Foreign Firms (bleepingcomputer.com)
An anonymous reader shares a report: According to a new law voted in 2016 and which came into effect starting June 1, 2017, foreign companies activating in China could be forced to provide access to their source code to a state agency that has been recently linked to China's nation-state cyber-espionage campaigns. China's new cyber-security law (CSL) gives the China Information Technology Evaluation Center (CNITSEC) the legal power to conduct "national security reviews" of foreign companies that want to activate on the Chinese market. According to articles in the CSL, this also includes the power to request access to any app or service's source code. Chinese authorities say this is to protect citizens by searching the source code of foreign companies for secret mechanisms that collect data on Chinese users and send it to foreign servers.
Bend over and prepare to have your software stolen by the world's number one IP rights violator.
I hope the Trump administration starts putting real teeth in pushback against this kind of crap. As in blanket embargo on all goods imported from China until they start respecting our IP and stop manipulating their currency... I would be happy to buy lifetime guarantee products from the US instead of the chicom trash that stocks most department store shelves.
If you disagree, please post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like
...they're just adding this to their list of technology transfers they require of lots of companies. Within 20 years, max, we'll truly start to appreciate the damage we've done by giving China a monopoly on manufacturing.
Do not do business with or in China.
Chinese authorities say this is to protect citizens by searching the source code of foreign companies for secret mechanisms that collect data on Chinese users and send it to foreign servers.
Isn't that the whole purpose of what Microsoft Windows 10 Telemetry does . . . ?
Maybe the Chinese authorities have a deal with Microsoft, so that Microsoft collects the data on Chinese users and sends it directly to Chinese authorities' servers . . . ?
Maybe the Chinese authorities have a deal with Microsoft, so that Microsoft collects the data on US users and sends it directly to Chinese authorities' servers . . . ?
Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
{... foreign companies activating in China could be forced to provide access to their source code to a state agency that has been recently linked to China's nation-state cyber-espionage campaigns. China's new cyber-security law (CSL) gives the China Information Technology Evaluation Center (CNITSEC) the legal power to conduct "national security reviews" of foreign companies that want to activate on the Chinese market. }
Yeah if I ran a country today I'd want that too.
Huh... Last time I checked, Hong Kong was a limited democracy form of government and not part of mainland China.
Right on the first part (with the "limited" the key word here), but it's been part of mainland China since 1997.
http://www.bbc.com/news/world-asia-china-40426827
Just because somebody neglects to file the patent in another country doesn't mean it wasn't technically stolen. Legality, however, is another question, and probably differs between the originating country and the country where the piracy is occuring.
vos nescitis quicquam, nec cogitatis quia expedit nobis ut unus moriatur homo pro populo et non tota gens pereat.
Chinese authorities say this is to protect citizens by searching the source code of foreign companies for secret mechanisms that collect data on Chinese users and send it to foreign servers.
What they really want is for the mechanisms to be on Chinese servers so that they can have access to all your information on their own citizens, lest one of them have some wrongthink.
Anons need not reply. Questions end with a question mark.
Encourage everyone else to do the same and source your imports elsewhere. Move the mountain on the one fulcrum it respects.
Turnaround is fair play!
Russia and the US have had requirements like that for years now. China's a late-comer to this game.
foreign companies activating in China could be forced to provide access to their source code to a state agency
But local companies will be free to include malware without review?
or maybe selective reading? The fact that Windows gets pirated does not mean that there is no legal recourse for Microsoft when they catch people pirating. In fact MS does have legal recourse, almost exclusively in "the West". MS does not have open legal access to sites in China to inspect, they get the access they are given by the Chinese Government and pay the fines agreed to by the Chinese Government instead of the penalized fees seen in "the West."
I think you are vastly underestimating the value of Windows Source code. There are plenty of things I don't use, don't like, and don't recommend (including Windows) that have value to other people. Hell. I don't find value in designer clothes, pedigreed pets, or fad foods. Enough people do though, so there are plenty of businesses making money from them.
I'm betting that same statement would be true of you as well, though you may not admit as much.
-The wise argue that there are few absolutes, the fool argues that there are no probabilities.
Simply impose the same requirements on Chinese goods. Problem solved.
The source code is being reviewed by the state cyberwarfare division? Sounds like they're scouring the code to find exploits they can use to attack enemies/spy on everyone.
Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
several U.S. agencies linked to cyber-espionage and sabotage do the same. You may know them as NSA, CIA, etc.