Live data from Hacker News

DoChat – a Dockerized WeChat PC Windows client for Linux

github.com

41–50 of 79 posts

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#41
post #30
post #27

Earlier quoted context omitted.

Not sure if you know, but at least life in Sweden is pretty close to this. Contactless payments are everywhere (Apple/Samsung/Android pay) and the app “swish” works great for sending payments to people. Even some businesses have a swish QR code displayed in lieu of taking cash payments.

The brilliant thing about wechat (or alipay) is that they don't have a close affiliation to the banks. And therefore far less transaction fees.

Not sure about the fees part, my quick search shows it's 0.6% for businesses to receive money, at the first glance this seems cheap indeed, but there are other tricks in it, unsurprisingly.

It charges you 0.1% for withdrawal once you used up the initial 20K RMB quota, and the real profit driver is its own credit part, if the customer paid using credit from Alipay, which the company agressively promotes to users and urges to be set as default, the fees for businesses then adds another whopping 4%. Would they raise fees even higher? I think they want to. The duopoly raised fees in lockstep before.

It isn't that much different from other card organisations, except theoretically it encourages users to put cash on their platform's various funds and pay with credit it offers so it doesn't need to pay a clearance fee for every transaction. It takes away the protection for customers by credit cards, offers guarantee of receiving money without disputes to businesses.

So it really comes down to the time saving from processing cash vs the cost, since paying with bank cards or gift cards are uncommon in China, and usually you need to type your PIN as it's required by banks even for credit cards to avoid their fraud responsibilities. And the public inertia of not wanting to bring cash they are trying to build.

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#42
post #29

Earlier quoted context omitted.

I don't think docker is enough. I would want to put it in a VM of it's own, and just for the sake of it, probably send all traffic out that VM via a VPN.

Why would a VM have an advantage over docker here? You think the Windows WeChat client is designed to escape from docker if it ever finds itself inside one while running on linux?

Even if you ignore that Docker is not a good security boundary.. DoChat bypasses a lot of the protections that Docker does apply. In particular:

- --privileged basically gives it the same capabilities as root

- Forwarding the X socket means that it has full access to your desktop, including keylogging and so on

- IPC isolation is disabled, so it has full access to any shared memory exposed on the host (again, with root privileges)

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#43

Earlier quoted context omitted.

I don't think docker is enough. I would want to put it in a VM of it's own, and just for the sake of it, probably send all traffic out that VM via a VPN.

Genuinely curious (and not just for you, but other posters in the thread) but would you (do you?) do the same for the WhatsApp desktop app? (assuming you use it)

Definitely, if I was using WhatsApp.

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#44

I went back to China for a month in December 2019. It's crazy how Wechat payment is now used everywhere. Any shops in China (I believe 99% of them): in wechat, you have "wallet" that generates QR code. Go to any shop, at the counter, show the QR code generated, they have the machine (or wechat app) to scan it. done. Crazy efficient. Most of the people there don't bring wallets anymore. Most of the restaurants in Shen…

I've been to Chengdu and Shenzhen in 2017. People were sometimes sighing and rolling their eyes when I tried to pay with cash. Even worse with cards.

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#45
>curl -sL https://raw.githubusercontent.com/huan/docker-wechat/master/... | bash

This is a textbook example of something you should never ever do...

It gives some entity (usually a bunch or entities) you may not entirely trust an effortless way to own your system. You would need to download the script and carefully examine it to determine that it only does things you approve of. The fact that others might of downloaded from the same place makes no difference, every downloaded script could be different. Every script/binary the original script downloads could be different and malicious.

Just don't...

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#46
post #40

Earlier quoted context omitted.

I just wish they would allow foreigners to use it as well. I live in Hong Kong and go to China quite often to visit friends, but it’s a pain in the ass to pay. Usually my friends pay for me, and I give them cash. The rest just split through Wechat.

It's allowed for foreigners who has the mainland bank account. But yes, it's impossible without.

Yeah sorry, by foreigners I was mostly referring to tourists.

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#47

Earlier quoted context omitted.

Genuinely curious (and not just for you, but other posters in the thread) but would you (do you?) do the same for the WhatsApp desktop app? (assuming you use it)

I don't know, what I will say is: most (tech) folks would (rightly, in my opinion) trust Facebook/WhatsApp more than they would Tencent.

What does "trust" mean in this context?

I expect Tencents government data sharing to be higher, but I also don't expect Facebook's to be zero - I would also say I trust less Facebook's handling of my data and it's exposure to third parties (see ref: Cambridge Analytica) and let's not forget their experiments in changing people's moods by manipulating what they saw on their timeline.

Not saying Tencent are free from sin, but it seems to be the breaches of trust that Facebook has performed are more wide reaching...

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#48

>curl -sL https://raw.githubusercontent.com/huan/docker-wechat/master/... | bash This is a textbook example of something you should never ever do... It gives some entity (usually a bunch or entities) you may not entirely trust an effortless way to own your system. You would need to download the script and carefully examine it to determine that it only does things you approve of. The fact that others might of download…

Is this different from running any other piece of software from the internet?

Re: DoChat – a Dockerized WeChat PC Windows client for Linux

#50

I went back to China for a month in December 2019. It's crazy how Wechat payment is now used everywhere. Any shops in China (I believe 99% of them): in wechat, you have "wallet" that generates QR code. Go to any shop, at the counter, show the QR code generated, they have the machine (or wechat app) to scan it. done. Crazy efficient. Most of the people there don't bring wallets anymore. Most of the restaurants in Shen…

That sounds pretty scary,what a price to pay. Let's say you're blacklisted for something, that's it, you can't buy anything or get any services from anywhere. You can't even beg for money! I hope I never have to see that in my lifetime,a very rare thing where I would prefer wars before it came to this.
Post reply on HN