Hippy: React Native Alternative by Tencent • Hacker News Board

Re: Hippy: React Native Alternative by Tencent

#21

Post by cbnotfromthere » Wed, Dec 25, 2019, 12:30 PM UTC

tirpen wrote: post #18

shrimpx wrote: post #16

Earlier quoted context omitted.

Any state could spy on users but china is known to blatantly do so.

To be fair, so is the US (NSA) , but people rarely suggest that packages from the US should be monitored extra closely for some reason. Of course every package used in any code that contains sensitive data should be audited along with its dependant, but I see no reason to be more afraid of this particular package than anything people happily install from npm.

You're equating a democracy with a totalitarian state.

Re: Hippy: React Native Alternative by Tencent

#22

Post by cbnotfromthere » Wed, Dec 25, 2019, 12:32 PM UTC

CGamesPlay wrote: post #5

dazhbog wrote: post #3

Hippy is now applied in 18 Tencent apps concerning tens of billions of ordinary users. Having used a lot of these apps I wonder if this is indeed what they use to deliver near native experience with web technologies..

Where did they find the extra 2.5 billion people?

Users != people

Re: Hippy: React Native Alternative by Tencent

#23

Post by TomMarius » Wed, Dec 25, 2019, 12:33 PM UTC

tirpen wrote: post #18

shrimpx wrote: post #16

Earlier quoted context omitted.

Any state could spy on users but china is known to blatantly do so.

To be fair, so is the US (NSA) , but people rarely suggest that packages from the US should be monitored extra closely for some reason. Of course every package used in any code that contains sensitive data should be audited along with its dependant, but I see no reason to be more afraid of this particular package than anything people happily install from npm.

There is not as much history of state inference in companies in the USA as there is in China

Re: Hippy: React Native Alternative by Tencent

#24

Post by unityByFreedom » Wed, Dec 25, 2019, 12:43 PM UTC

K0nserv wrote: post #10

I opened a random file(HippyBridge.h[0]) and it looks very similar to React Native's RCTBridge.h[1] which leads me to believe Hippy is either a fork of React Native or heavily "inspired" by it. A lot of the comments and symbols match React Native's 1-to-1. EDIT: I've read through more of the source and compared it to React Native. Like Jarred mentioned[2] it probably started out as a fork of React Native. 0: https://…

If it is a react native fork, I wonder if they plan to acknowledge that. Seems like that is the first thing you'd mention.

I can't see a reason not to mention this unless you're trying to fool someone.

Re: Hippy: React Native Alternative by Tencent

#25

Post by codingdave » Wed, Dec 25, 2019, 12:45 PM UTC

gigatexal wrote: post #14

bnt wrote: post #13

Earlier quoted context omitted.

Why?

The Chinese state perhaps including backdoors to spy on users?

We don't need to get into international politics to answer this question. Security audits are good ideas on any open source project you want to put into production. They are a good idea even if you wrote the code yourself, to make sure you didn't leave vulnerabilities in your code by accident. Securing an app, and preventing data breaches, is simply good practice as professional software engineers.

Re: Hippy: React Native Alternative by Tencent

#26

Post by thrower123 » Wed, Dec 25, 2019, 12:56 PM UTC

codingdave wrote: post #25

gigatexal wrote: post #14

Earlier quoted context omitted.

The Chinese state perhaps including backdoors to spy on users?

We don't need to get into international politics to answer this question. Security audits are good ideas on any open source project you want to put into production. They are a good idea even if you wrote the code yourself, to make sure you didn't leave vulnerabilities in your code by accident. Securing an app, and preventing data breaches, is simply good practice as professional software engineers.

It's a good idea, but increasingly impractical. Npm-based development is just such a fractal of dependencies; it'd take me a year to review everything that goes into a typical SPA, and by the time I was done 90% of the packages would have been updated significantly.

I just hope the various cryptominers that get shoehorned in to umpteenth child dependencies fight against each other...

Re: Hippy: React Native Alternative by Tencent

#27

Post by d0100 » Wed, Dec 25, 2019, 1:05 PM UTC

I won't use this probable spyware, however I do hope that some RN competition can make RN grow, and be, a bit faster.

Re: Hippy: React Native Alternative by Tencent

#28

Post by sandGorgon » Wed, Dec 25, 2019, 1:17 PM UTC

dazhbog wrote: post #3

Hippy is now applied in 18 Tencent apps concerning tens of billions of ordinary users. Having used a lot of these apps I wonder if this is indeed what they use to deliver near native experience with web technologies..

Does anyone know which app this is ?

Re: Hippy: React Native Alternative by Tencent

#29

Post by chvid » Wed, Dec 25, 2019, 1:33 PM UTC

I think it is really great to see the Chinese internet giants releasing some of their software as open source.

In a time of geopolitical "tech wars" open source culture could easily become collateral damage.

Re: Hippy: React Native Alternative by Tencent

#30

Post by FooBarWidget » Wed, Dec 25, 2019, 1:38 PM UTC

d0100 wrote: post #27

I won't use this probable spyware, however I do hope that some RN competition can make RN grow, and be, a bit faster.

Why speculate on whether it is spyware? Read the source and verify it for yourself. If there is spyware I would appreciate a link to the relevant lines.