Live data from Hacker News

“Tencent QQ caught scraping all browser history on Windows”

twitter.com

111–120 of 121 posts

Re: “Tencent QQ caught scraping all browser history on Windows”

#111
post #91

raion on V2EX[1][2] reverse-engineered Tencent QQ's scraping code and acquired the list of URLs and keywords: 1. S.TAOBAO.COM/SEARCH? 2. LIST.TMALL.COM/SEARCH_PRODUCT.HTM? 3. (30, 0xDDA1029, 0x9E67F3BB, 0xB18ACC45, 0x597CF438): b'', # not yet decoded 4. SEARCH.JD.COM/SEARCH? Keyword Group 1: 5. 古着 (kanji meaning old cloths) 6. VINTAGE Keyword Group 2: 7. 融券 (margin trading-short) 8. 融资 (financing) Keyword Group 3: 9.…

The last url has been found by lhprojects through brute-forcing Chinese eCommerce website urls. It's first 30 characters are:

`uland.taobao com/sem/tbsearch?`

Credit to lhprojects https://nbviewer.jupyter.org/github/lhprojects/blog/blob/mas...

Re: “Tencent QQ caught scraping all browser history on Windows”

#112
post #27

Apart from a lot of other issues mentioned here, this looks to me for a good argument of app sandboxing. It is a thing on mobile but not much on the desktop.

Any recommendations on sandbox software/workflow on Windows? I tried Sandboxie, but it caused the sandboxed app to crash.

Re: “Tencent QQ caught scraping all browser history on Windows”

#113
post #54
post #27

Apart from a lot of other issues mentioned here, this looks to me for a good argument of app sandboxing. It is a thing on mobile but not much on the desktop.

I disagree. It's better to let them do shady shit and get caught and never trust them again.

Nerds think trust is something that can be created with technology. If only that were the case.

Re: “Tencent QQ caught scraping all browser history on Windows”

#114

Earlier quoted context omitted.

What about getting a National Security Letter from the US government? Apparently, your company and your industry, must be important enough that the government will send you a Top Secret document, forcing you to comply, and also forcing you to maintain the secrecy of its existence, and to even deceive your customers of ever enacting its mandates. This sounds to me like the exact same thing as your argument here. That…

Name the last American billionaire who fell off the face of the planet without an explanation that got traced back to the US government for critical. If it were true Theil and Koch (brothers) would have dropped out of the phone directory a long time ago. I think that sums up the way the chessboard is set up for for American vs Chinese style capitalism.

Your argument makes absolutely no sense. Why would the US government eliminate Theil or Koch?

They are not trying to eliminate the system, when they are the elite of the system.

Their funding perpetuates the American government itself.

Don’t you get it?

Re: “Tencent QQ caught scraping all browser history on Windows”

#115
post #102
post #99

Earlier quoted context omitted.

“If alternative stores can't give sufficient security guarantees, then users will prefer the official one.” Nope. Users will use the stores where the apps they want are. Players starting new stores will just pay for exclusives of popular apps, so that users are forced to install other stores, which will of course claim to support privacy and security in marketing terms that have no substance. Android is why it is cle…

> Android is why it is clearly wrong to intervene in Apple’s secure store. Why is Android wrong? The sky hasn't fallen over on the Android side. Android's security woes are caused by lack of updates from carriers (which frequently delay or block Android updates), OEMs (which frequently don't bother to port security updates because they want to sell the newest devices, shenanigans similar to those pulled by Apple unti…

Android isn’t wrong at all. That’s my point.

The market provides an option for people who want an open phone and for those who don’t.

Re: “Tencent QQ caught scraping all browser history on Windows”

#116
post #105
post #100

Earlier quoted context omitted.

Yes. They would lose the option to use one trusted store, and be forced to use set of different stores of varying different trust levels.

Are you sure about that? Chinese phones use Chine app stores because Google products are banned in China, but outside of China 99% of apps are installed through the Play Store. Why would iOS be any different?

Because iOS has a very profitable app ecosystem that deep pocketed competitors (such as Google, Facebook, and Amazon) would buy into.

You can’t seriously imagine that at least these three plus TenCent/Epic wouldn’t create stores, likely within their existing Apps.

Re: “Tencent QQ caught scraping all browser history on Windows”

#117
post #116
post #105

Earlier quoted context omitted.

Are you sure about that? Chinese phones use Chine app stores because Google products are banned in China, but outside of China 99% of apps are installed through the Play Store. Why would iOS be any different?

Because iOS has a very profitable app ecosystem that deep pocketed competitors (such as Google, Facebook, and Amazon) would buy into. You can’t seriously imagine that at least these three plus TenCent/Epic wouldn’t create stores, likely within their existing Apps.

[deleted]

Re: “Tencent QQ caught scraping all browser history on Windows”

#118
post #115
post #102

Earlier quoted context omitted.

> Android is why it is clearly wrong to intervene in Apple’s secure store. Why is Android wrong? The sky hasn't fallen over on the Android side. Android's security woes are caused by lack of updates from carriers (which frequently delay or block Android updates), OEMs (which frequently don't bother to port security updates because they want to sell the newest devices, shenanigans similar to those pulled by Apple unti…

Android isn’t wrong at all. That’s my point. The market provides an option for people who want an open phone and for those who don’t .

Especially with Apple, the ecosystems are so big that the choice given to users is weak. Do users chose between an open phone and a closed one, or between a phone that connects with their laptop and their earphones, or a phone that can Facetime™ their friends and family?

Same kind of problem with presidential elections in democratic republics. Closed systems limit choice.

Re: “Tencent QQ caught scraping all browser history on Windows”

#119
post #118
post #115

Earlier quoted context omitted.

Android isn’t wrong at all. That’s my point. The market provides an option for people who want an open phone and for those who don’t .

Especially with Apple, the ecosystems are so big that the choice given to users is weak. Do users chose between an open phone and a closed one, or between a phone that connects with their laptop and their earphones, or a phone that can Facetime™ their friends and family? Same kind of problem with presidential elections in democratic republics. Closed systems limit choice.

“Facetime™ their friends and family?”

Pretty much every messaging app has video chat these days.

If you care about an open phone, buy Android. Nothing is going to stop you having a video call with your family and friends.

Re: “Tencent QQ caught scraping all browser history on Windows”

#120
post #111
post #91

raion on V2EX[1][2] reverse-engineered Tencent QQ's scraping code and acquired the list of URLs and keywords: 1. S.TAOBAO.COM/SEARCH? 2. LIST.TMALL.COM/SEARCH_PRODUCT.HTM? 3. (30, 0xDDA1029, 0x9E67F3BB, 0xB18ACC45, 0x597CF438): b'', # not yet decoded 4. SEARCH.JD.COM/SEARCH? Keyword Group 1: 5. 古着 (kanji meaning old cloths) 6. VINTAGE Keyword Group 2: 7. 融券 (margin trading-short) 8. 融资 (financing) Keyword Group 3: 9.…

The last url has been found by lhprojects through brute-forcing Chinese eCommerce website urls. It's first 30 characters are: `uland.taobao com/sem/tbsearch?` Credit to lhprojects https://nbviewer.jupyter.org/github/lhprojects/blog/blob/mas...

I was expecting some clever brute-forcing turns out it's just lucky guess.
Post reply on HN