1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
|
<html><head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="theme-color" content="#000000">
<title>Chrisoft::Blog</title>
<script type="text/javascript" src="/panel.js"></script>
<script type="text/javascript" src="/blog/footnoter.js"></script>
<script type="text/javascript" src="/blog/aes-js.js"></script>
<script type="text/javascript" src="/blog/scrypt.js"></script>
<script type="text/javascript" src="/blog/sha256.js"></script>
<script type="text/javascript" src="/blog/decryptor.js"></script>
<link rel="stylesheet" type="text/css" href="/common.css">
<link rel="stylesheet" type="text/css" href="/panel.css">
<link rel="stylesheet" type="text/css" href="/theme0a.css" id="theme0a">
<link rel="stylesheet" type="text/css" href="/theme0b.css" id="theme0b">
<link rel="stylesheet" type="text/css" href="/theme1a.css" id="theme1a">
<link rel="stylesheet" type="text/css" href="/theme1b.css" id="theme1b">
<link rel="stylesheet" type="text/css" href="/theme2a.css" id="theme2a">
<link rel="stylesheet" type="text/css" href="/theme2b.css" id="theme2b">
<link rel="stylesheet" type="text/css" href="/theme3a.css" id="theme3a">
<link rel="stylesheet" type="text/css" href="/theme3b.css" id="theme3b">
<link rel="stylesheet" type="text/css" href="/blog/blogext.css">
<script>
function ol()
{
window.onresize=function()
{
if(window.innerWidth<768)
setupevents();
else unsetevents();
}
window.onresize();
_decryptonload();
}
function loadTheme(){
var thm=document.cookie.replace(new RegExp("(?:(?:^|.*;\\s*)thm\\s*\\=\\s*([^;]*).*$)|^.*$"),"$1");
if(thm.length<2||'0123z'.indexOf(thm[0])==-1||'abz'.indexOf(thm[1])==-1)thm='zz';
var ent="";
var d=new Date();
if(thm[0]=='z')
{
var m=d.getMonth()+1;
if(m>=3&&m<6)thm='0'+thm[1];
else if(m>=6&&m<9)thm='1'+thm[1];
else if(m>=9&&m<12)thm='2'+thm[1];
else thm='3'+thm[1];
}
if(thm[1]=='z')
{if(d.getHours()>=18||d.getHours()<6)thm=thm[0]+'b';else thm=thm[0]+'a';}
ent=`theme${thm}`;
var R=new RegExp('theme[0-4][ab]');
for(var i=0;i<document.styleSheets.length;++i)
{
if(R.exec(document.styleSheets[i].ownerNode.id)!==null&&document.styleSheets[i].ownerNode.id!=ent)
document.styleSheets[i].disabled=true;
else document.styleSheets[i].disabled=false;
}
var thmcolor="";
switch(thm[0])
{
case '0':thmcolor=thm[1]=='a'?'#f59dda':'#2f0933';break;
case '1':thmcolor=thm[1]=='a'?'#9df59d':'#090933';break;
case '2':thmcolor=thm[1]=='a'?'#edb47b':'#1f1205';break;
case '3':thmcolor=thm[1]=='a'?'#a0cdfa':'#051933';break;
}
document.querySelector("meta[name=theme-color]").setAttribute('content',thmcolor);
}
loadTheme();
</script>
</head>
<body onload="ol()" style="overflow-x:hidden;">
<div id="panel" class="TText">
<ul id="panellist">
<li><a href="/"><h1>Chrisoft</h1></a></li>
<li><a href="/blog"><h2>Blog</h2></a></li>
<li><a href="#"><h3 id="title">The "Deepin is spyware" problem</h3></a></li>
<li><span>Tags</span>
<ul id="tagslist">
<li><a href="/blog/list/linux/">linux</a></li><li><a href="/blog/list/garbage/">garbage</a></li><li><a href="/blog/list/sophistry/">sophistry</a></li></ul>
</li>
<li id="tocouter" style="display: none;">
<span>Table of Contents</span>
<ul id="tocroot">
</ul>
</li>
<li style="margin-left:-0.5em"><a id="prevp" href="2018-03-17.html">Prev post</a></li>
<li style="margin-left:-0.5em"><a id="nextp" href="2018-04-22.html">Next post</a></li>
</ul>
</div>
<div id="content">
<h2 id="titleh" class="TText" style="font-wight:normal;">The "Deepin is spyware" problem</h2>
<div id="datetags" class="TText" style="margin-bottom:1em;">2018-04-17<br>#linux #garbage #sophistry</div>
<hr><div id="article" class="TText">
<article>
<p>
WARNING: this article contains strong words. Beware.
</p>
<p>
Nowadays we can get in touch with people thousands of miles away really
easily, which is not even imaginable just a few decades ago. Thanks to
that, I visit reddit regularly and found some dispute about the only
"sane" Chinese Linux distro arouse:
</p>
<blockquote>
<a href="https://www.youtube.com/watch?v=v25Dy66AtNI">
https://www.youtube.com/watch?v=v25Dy66AtNI
</a><br>
<a href="https://www.youtube.com/watch?v=tllqWzO8Bqw">
https://www.youtube.com/watch?v=tllqWzO8Bqw
</a>
</blockquote>
<p>
Although I've never actually used Deepin as my daily driver, nor am I
affiliated with the company that develops it, seeing Chinese being
discredited in these posts made me want to say something for Deepin.
However I found that I had literally nothing to say.
</p>
<p>
Dispite of the clickbait nature of the video's title, deploying tracking
code without notifying the user is blaspheming the user's trust in the
software. However what really triggered me is their offical statement:
</p>
<blockquote>
<p>
Recently, there is saying that Linux Deepin is spyware. The logic is that Deepin has cnzz.com links in its website and Appstore, and since cnzz will collect some client information in the browser, thus Linux Deepin is spyware. It is really a serious problem, since nobody wants to have his/her private information leaked, as in the Facebook event.
</p>
<p>
Deepin has to inform all those interested that our Appstore backend is a website and cnzz is a famous internet statistics analysis service provider that collects website anonymous usage information such as browser user agents, resolution, etc. and which is just a same product as Google Analytics. Deepin uses cnzz to collect website access information and so to know how to improve our website experience and detect website problems. No private information can be collected this way just by the data above mentioned.
</p>
<p>
We hope this clarifies the spyware thing above and make the promise again that Deepin has not collected user private information in the past and will not collect user private information in the future.
</p>
Enjoy Linux Deepin~
</blockquote>
<p>
This is utter nonsense. And it's even worse than nothing. It is same as
saying "you dumbass chose to trust us and this is what you deserve."
</p>
<p>
Also someone on reddit pointed out that Deepin comes with Google Chrome
preinstalled and they distribute it from their own servers (almost
certainly without Google's permission), which is explictly prohibited
in the EULA of Google Chrome. What they could thinking should be like
"fuck those legal stuff. Google won't give us a shit and let's provide
maximum convience to our users!".
</p>
<p>
So you might be wondering why I still refer it as "the only sane Chinese
distro". Well, you might agree if you know something about other Chinese
distros such as Start OS and Kylin OS. The latter is essentially the
Chinese version of the Red Star OS. It has a very Windows 7-ish look
and feel, which can be described as photocopying.
</p>
<p>
Start OS (formerly known as ylmf OS) has a similiar history as Linux
Deepin: they both emerged from organizations that produced pirated
Windows XP using Ghost from Symentec. They started their own OS after
the largest organization doing pirated Windows copies was taken down by the
government. Start OS has been inactive for quite some time though.
</p>
<p>
Deepin, however, really made some progress. At least they are developing
decent software, not applying a Windows XP theme on Ubuntu and rebrand it.
I actually used components from Deepin on my Debian machine for over a
year (until KDE finally revamped their counterparts). Deepin managed to get
a stable and fairly large user base. Then they seemed start doing what
every single Chinese technology company have done: making software use the
user. (In China, you don't use computer. The computer uses you! Seems
familiar, right?)
</p>
<blockquote>
Even though I am Chinese, I found some Chinese companies being over
ambitious disturbing. And some of them don't really comply with the rules.
(GPL violations of Allwinner and Xiaomi are infamous examples.)
</blockquote>
<p>
Above is an excerpt from my unposted reply to the reddit post. The Chinese
government seems acquiescent with that, for its own purposes. Shame on that.
</p>
<p>
But trustworthy Chinese still exist, right?
</p>
</article>
<!--
vim:syntax=html
-->
</div><br><hr>
<div class="TText" id="notediv" style="font-size:80%;"></div>
<div id="insanch" style="height:3em;"></div>
<div id="footer" style="">
<div id="pagesw" class="TText" style="width:100%;height:0.5em;"></div>
<div style="text-align:center;" class="TText">
Proudly powered by SSBS <reduced style="font-size:70%;">(the static stupid blogging system)</reduced> 2.5
<br>
Content licensed under CC BY-SA 4.0. <span id="purgep" style="display:none;font-size:70%;">This page has passphrase(s) stored. Click <a href="javascript:_purgep()">here</a> to purge.</span>
</div>
</div>
<div id="cmdbuf" class="TText" style="transition:500ms;padding:1em;font-size:2em;color:white;position:absolute;background-color:rgba(0,0,0,0.6);left:50%;top:50%;transform:translate(-50%,-50%);pointer-events:none;opacity:0;">
</div>
</div>
<div id="decryptui" style="display:none;opacity:0;color:white;z-index:1000;position:fixed;left:0;top:0;width:100%;height:100%;background-color:rgba(0,0,0,0.4);transition:opacity 0.5s;">
<div id="decryptdlg" class="TText" style="padding:10px 20px;position:absolute;left:50%;top:50%;transform:translate(-50%,-50%);background-color:rgba(0,0,0,0.6);">
<div id="keyhint" style="margin-bottom:8px;"></div>
<div style="margin-bottom:8px;">Key: <input id="keyinp" type="text" style="color:#fff;"></div>
<div style="height:2.25em;">
<button id="btndecrypt" onclick="decryptor(decid,document.getElementById('keyinp').value);" style="position:absolute;left:20px;">Decrypt</button>
<button onclick="hidedecryptui();" style="position:absolute;right:20px;">Cancel</button>
</div>
</div>
</div></body></html>
|