More on the GitHub Attack, a Breach of Trust, and Feminist Activists Detained: Assorted Links

Once again, here are some excerpts from pieces worth checking out, this time a mix of tech and non-tech:

1. Robert Graham further narrows the source of China's attack on GitHub:

Using my custom http-traceroute, I've proven that the man-in-the-middle machine attacking GitHub is located on or near the Great Firewall of China. While many explanations are possible, such as hackers breaking into these machines, the overwhelmingly most likely suspect for the source of the GitHub attacks is the Chinese government.

2. Dan Goodin explains a move by Google and Mozilla which will not thrill the Chinese government:

Google's Chrome and Mozilla's Firefox browsers will stop trusting all new digital certificates issued by the China Internet Network Information Center following a major trust breach last week that led to the issuance of unauthorized credentials for Gmail and several other Google domains.

The move could have major consequences for huge numbers of Internet users as Chrome and Firefox, the world's second and third most widely used browsers respectively, stop recognizing all or many website certificates issued by CNNIC. That could leave huge numbers of users suddenly unable to connect to banks and e-commerce sites.

3. In "Dark Days for Women in China?" ChinaFile hosted a conversation including 14 people about the recent criminal detention of five feminist activists. Here is a portion of Leta Hong Fisher's response:

The last time I met with Li Maizi (as Li Tingting likes to be called) at a small dumpling restaurant in Beijing, I asked if she was optimistic about the future of women’s rights in China. “I am an idealist, but I am not in a hurry to see real change,” she said. “It will require a long, drawn-out period of struggle to see any progress, especially when it comes to gender issues.” These are not the words of a dissident trying to challenge the Chinese Communist Party’s hold on power. Rather, Li and the other young activists she worked with went out of their way to avoid “politically sensitive” issues and chose causes that would resonate with the mainstream Chinese population. Take the “Occupy Men’s Toilets” campaign they organized in 2012, which called for more public toilets for women. “This issue isn’t that politically serious,” admitted Li, “but it’s a problem every woman has to deal with every day, so many women and men were able to see the inequality and to support the cause.” Little did I imagine that a year and a half later, Li Maizi and four other fun-loving feminists would wind up criminally detained, facing a possible jail term for planning to distribute stickers about sexual harassment on public transportation.

The fact that these young women—detained in three different cities on the eve of International Women’s Day—have still not been released suggests a disturbing escalation of Chinese government paranoia about public demonstrations and a chilling environment for Non-Governmental Organizations and non-profit groups.

Perhaps There Aren't Cigarette Face Masks

I received a range of comments in response to yesterday's post about pollution face masks in China with a special hole for smoking cigarettes.

One person expressed their admiration: "That's pretty cool."

Another seemed humored: "Funny."

One suggested a modification: "They should make three holes in that mask or else they are re-inhaling the smoke from the cigarette. Better yet, how about not wearing the mask at all!"

And finally, one person expressed puzzlement: "I'm trying to figure out whether this is an April 1 post..."

Now seems like a good time to respond to the last point, even though I have not done so for similar posts in past years. Perhaps I can restore a tiny bit of harmony to the world. So, yes, the post was written in the spirit of April Fool's Day.

The person posing in the first photo is somebody I recently met. He was familiar with April Fool's Day, and after I explained what I had in mind he agreed to model the face mask using his cigarettes. I wouldn't be surprised if it was his first time to wear a face mask. The sign in the other photo is from a store in Zhongshan I fortuitously passed by yesterday. I didn't go inside, but it appeared they sold face masks and other products for construction-related purposes. All the quotes in the post were entirely fabricated. And if spoken as it would be in China, family name first, the fictional store owner's name, Renjie Yu, sounds like "April Fool's Day" in Chinese.

I have never seen anyone smoking while wearing a face mask. I wouldn't be completely shocked if someday I do though.

I suspect the seeds for the idea were planted about two years ago. While standing at a street corner wearing a face mask for the first time due to very heavy smog in Beijing, I looked to my left and met eyes with a man who was smoking a cigarette. For a few moments, we stared at each other in silence. We then went our separate ways after the crossing signal changed. It got me thinking . . .

And in addition to some humor, thought-provocation was one intended goal of yesterday's post.

Cigarette Friendly Design Breathes Fresh Life Into China's Face Mask Sales

In addition to having more smokers than the entire population of the United States, China also has dangerously high levels of air pollution. As more people in China show concern over the air they breathe, this creates an obvious problem. But when I was in Maoming, a Chinese city where people are familiar with pollution from chemical plants, one night I saw how ingenuity and China's frequently mentioned pragmatism had come to the rescue again.

A young man was wearing a face mask with a specially fitted hole so he could continue smoking while protecting himself from the polluted air. He was happy to speak with me, and in response to several questions said:

Maoming's air is bad. Everybody knows that. So of course I wear a face mask, even though they bother me. But one thing I couldn't accept about masks before was they made it impossible to smoke. Last month my cousin who sells face masks in Zhongshan told me about these. Now I regularly wear cigarette face masks and only buy through him. There are many low quality imitation masks being sold. I'm concerned about my health, and I know he will only sell me the genuine ones.

Since then, I have seen people wearing the cigarette face masks in Chinese cities as far apart as Hengyang, Chongqing, and Shanghai. Today in Zhongshan, I finally had the opportunity to visit the face mask store earlier mentioned to me. The first thing I noticed when I arrived was a sign displaying a variety of masks well-suited for China's air.

Inside I met the store owner. He told me he was secretly thrilled about China's pollution since business had never been better for him. And he had this to say about the cigarette face masks:

Business was slumping a little bit until these masks came out. They were an instant hit in the neighborhood and word quickly spread. Many men like to smoke and sharing cigarettes is a regular way they bond. It's important! But smoking with a regular mask is too difficult. Cigarette face masks make it easy. One important feature is that they are N90 masks. They don't filter as much as the N95 masks, so it doesn't takes too much effort to exhale the cigarette smoke.

He is not alone in finding success with cigarette face masks. They are a trending top seller online at Taobao. There are also rumors that Red Star alcohol plans to incorporate them into its pollution themed ads and that Lesser Panda, a popular cigarette in China, may soon offer branded cigarette face masks. With neither pollution nor smoking likely to disappear in the near future, analysts expect the market to only grow.

As I was about to leave the store, the owner tried to sell me a jumbo pack of cigarette face masks at a "friend discount". I explained I didn't smoke, in part due to health concerns. He pointed out I wasn't wearing a face mask and asked, "What do you think is worse for you, smoking a plant or breathing China's air?"

I had no answer, and we had a good laugh. Now I am on first name basis with store owner Renjie Yu. And I also have 20 cigarette face masks to give to friends.



Added Note: Relevant additional information for something posted on this date.

Yahoo Leaves, Apple's Watch Copied, and GitHub Attacked: Assorted China Tech Links

In addition to other topics, I plan a return to some China tech-related themes here. For a starter, I'll share assorted excerpts of four recent pieces sans commentary by me. Much more can be found by clicking the related links.

1. Yahoo closing its office in China received a lot of media attention. Michael Smith, an ex-Yahoo employee, provided some useful perspective:

China was really just one of the last remote engineering orgs to go. Brazil gone. Indonesia gone. The centralization plan was back on target. Build in HQ – launch everywhere. Like a lot of big internet companies really.

So yes – they closed China. I don’t think it has any connection to a pull back in China since Yahoo is already gone from China. Now the engineers are too.

Big deal. Not.

2. Even before Apple's new smart watch was publicly available, you could buy an imitation of it in China. Peter Ford reported one person's account of the processes used in China's electronics copying business:

If there are product details he is unsure of, he says, “I wait for the product to come out, or ideally see if I can get it earlier than the release date.” Since so many electronic goods are made in China, where factories “are leaky, very leaky,” he adds, “people will straight up offer that stuff to you.”

Nor does a manufacturer of what the source calls “facsimiles” need to resort only to the black market to see engineering ahead of time. “Companies like Apple buy things from other providers and put them together in a pretty package,” he says. “I don’t even need to ‘pirate’ their stuff; I just buy it from the same guys who sell it to them [ie Apple].”

3. Github, an online site used by many developers worldwide for coding, has been the target of a remarkable attack. Eva Dou explains the attack and why it appears that not only is the source based in China but the Chinese government is behind it:

Mikko Hyponen, the chief research officer of cybersecurity firm F-Secure, said the attack was likely to have involved Chinese authorities because the hackers were able to manipulate Web traffic at a high level of China’s Internet infrastructure. It appeared to be a new type for China, he added. “It had to be someone who had the ability to tamper with all the Internet traffic coming into China.” he said.

4. Erik Hjelmvik at NETRESEC provides an intriguing and in-depth look at how the GitHug attack works:

We have looked closer at this attack, and can conclude that China is using their active and passive network infrastructure in order to perform a man-on-the-side attack against GitHub. See our "TTL analysis" at the end of this blog post to see how we know this is a Man-on-the-side attack.

In short, this is how this Man-on-the-Side attack is carried out:

1. An innocent user is browsing the internet from outside China.
2. One website the user visits loads a javascript from a server in China, for example the Badiu Analytics script that often is used by web admins to track visitor statistics (much like Google Analytics).
3. The web browser's request for the Baidu javascript is detected by the Chinese passive infrastructure as it enters China.
4. A fake response is sent out from within China instead of the actual Baidu Analytics script. This fake response is a malicious javascript that tells the user's browser to continuously reload two specific pages on GitHub.com.

That's all for now, folks.

Two More Blue Sky Scenes in a Zhongshan Village

More blue sky & clouds scenes, these from today in Shimen Village, Zhongshan:

Sharing these and other photos of blue skies in Zhongshan (here and here) was partly inspired by my recent experience viewing some photos shared by friends elsewhere in the world. I doubt the deep blue skies had been intended to be the primary area of focus in their photos, and I found it striking my eyes were so drawn to them.

I will move on to other topics shortly. For more thoughts on how blue skies and "normal" clouds can seem unusual to me and others in China, see an earlier post with photos from Macau here.

A Blue Sky With the Moon in Zhongshan

At the Ma Yingbiao Memorial Park in Shachong Village, Zhongshan

A Blue Sky in Zhongshan

Today Zhongshan had a blueish sky.

Watch tower near the former residence of Sun Yat-sen in Cuiheng, Zhongshan

It didn't mean Zhongshan's air quality was "good", but the air was significantly better than when I was deceived by a similarly blue sky in Shanghai.

Xiangqi at Yixian Lake Park

Another game of xiangqi, this one in Zhongshan's Yixian Lake Park:

It was just one of many being played at the park that day. See here for all posts with scenes of people playing xiangqi, otherwise known as Chinese chess. They capture a variety of environments where the game is enjoyed.

Prohibited on the Chongqing Metro

Although it is possible to buy ice cream inside a Chongqing metro station, there are still plenty of things you can't bring or do:

The sign is more extensive than one I saw on the Guangzhou metro a few years ago. And like the Shanghai metro, balloons are forbidden and scanners at stations are used to examine bags and larger items. In Chongqing I saw one family stopped by metro security because their son had a balloon, and I felt their pain.

Local Flavors: Red Bean and Black Sesame Seed Ice Cream

In response to a post about milk ice cream, wallaby78 commented:

Beats the green/red bean ice cream, but not by much. Haikou has a Baskin Robbins and I loved it at first but last time the pralines and cream was so badly freezer burned that I won't be back any time soon.

A Baskin-Robbins previously opened near where I once lived in Shanghai. I never noticed many customers anytime I walked by, and it eventually closed. I assume I have tried their ice cream at their other, presumably more successful, stores in China, but I don't have any specific memories.

I do remember eating green bean and red been ice cream numerous times though. I enjoy both flavors, though there is a great range in quality. One recent source I saw was unexpected: McDonald's.

The above sign was at a small McDonald's outlet inside Chongqing's Niujiaotuo metro station. Unlike some other cities, eating food doesn't appear to be forbidden inside Chongqing's stations. This McDonald's is conveniently located in the path of passengers changing between two metro lines which intersect at Niujiaotuo.

Since red bean is commonly used in deserts or pastries in China, the ice cream represents another way McDonald's has localized its menu. Not only did I enjoy it far more than McDonald's Year of Fortune and Year of Luck Burgers, I ordered it on a number of occasions. It was a great way to follow up one of Chongqing's famous spicy & numbing meals, and for 5 RMB (about U.S. $0.80) it's a reasonable deal. Although the ice cream has a distinct red bean flavor, I wasn't able to detect a noticeable flavor in the cone. A McDonald's employee explained that was because there was no added flavor, just food dye to make it green.

The red bean ice cream was a temporary offering which recently ended while I was in Zhongshan. Fortunately, it was replaced with another localized ice cream flavor I enjoy: black sesame seed.

Like red bean, black sesame seed can be found in a number of desserts and pastries. And McDonald's wasn't the first place I have had black sesame seed ice cream. One of my favorites was at Very Thai Noodles in Taipei last year.

They named it the "black volcano". My recollection is that it tasted better than the McDonald's version but had a higher price. Of all the new flavors of ice cream I have tried in Asia which are not common in the U.S., black sesame seed is probably my favorite. So I heartily recommend trying a black volcano.

There are other flavors of ice cream more common in Asia than in the U.S. Someday I will write an ode or a post about the fruit which is another favorite flavor of mine — durian.

Single-Child Kiddie Rides and Single-Child Video Games in China

When I was in Hengyang, Hunan province, last year, two kiddie rides resembling multiple-child playground equipment made me think of China's one-child policy.

It is easy to find examples of single-child rides in other countries, including the U.S., though. So while a certain symbolism can be seen, I wouldn't jump to any conclusions directly tying the rides to the one-child policy.

I thought of these rides because of recent news about the one-child policy's impact on fun in another area:

Some Chinese officials have apparently extended the nation’s one-child policy to include completely imaginary virtual character in videogames, or so said a gaming-company chief executive Thursday.

“The regulators require the birth system in our games to meet the regulations of birth-control policies, which means if players have a second child in the game, we must impose virtual social-compensation fees on them,” Xu Youzhen, CEO of Guangzhou-based Duoyi Network Technology, wrote on his official microblog account.

For more about why one can't freely have multiple children or fight a giant panda in a Chinese video game, read Linda He's article on MarketWatch here.

Ice Cream With a Natural Flavor: Milk Ice Cream

In response to the post about Cold Stone Creamery imitator Ice Stone Creamery selling ice cream in Zhongshan, China, "Potomaker" commented:

More evidence of a very immature market and uninformed consumers. I recall asking a colleague what her favorite flavor of ice cream was. Her response: milk.

Before replying to the first part of Potomaker's comment, I would want to clarify what counts as a "mature market" and an "informed customer" in this case. I would also want to know why customers in Zhongshan are choosing Ice Stone and more about what the store offers them, including the overall experience. For now, I'll just say that Ice Stone's similarities to Cold Stone and my own negative impressions of their mint chip ice cream doesn't mean its customers aren't making considered decisions based on relevant information.

I have more to say in response to the second part of Potomaker's comment, especially since it calls to mind some fond memories of an ice cream flavor that is likely unknown to many yet couldn't be more simple.

In the U.S., ice cream I have seen for sale includes at least one flavorful ingredient, such as vanilla or chocolate, in addition to the usual standard ingredients of sugar and milk/creme. But what if someone made ice cream without any of the familiar additional flavors? And if this "flavorless" ice cream was sold at an ice cream store what should it be named? Since the flavors of this ice cream are simply milk/creme and sugar, "milk ice cream" would be a an option. It acknowledges the established use of "ice cream" as a more general term and the expectation additional words will specify the ice cream's flavor. And from a marketing perspective, "milk ice cream" may be more appealing than other options such as "plain ice cream". I am not trying to making a conclusive case it is the best option but just that it is reasonable.

And I have had ice cream named "milk ice cream" (or the equivalent in Chinese) several times in Taiwan and mainland China. Years ago when I first I heard of milk ice cream, I assumed the person introducing it to me was confused or meant vanilla ice cream. But I soon discovered that, yet again, what can seem obvious isn't necessarily so obvious. And before I knew it, I was enjoying milk ice cream.

Sometimes ice cream with this name may include at least a bit of vanilla flavoring. Nonetheless, ice cream described as having the flavor "milk" is definitely out there. And for those who are now doubting my sanity, Flying Cow Ranch in Miaoli County, Taiwan, offers one clear and definitive case of the existence of "pure" milk ice cream.

On a Yahoo Taiwan ecommerce site, Flying Cow Ranch's store sells three flavors of ice cream, as seen above, labeled in Chinese as "chocolate", "milk", and "vanilla". The listed ingredients for the milk ice cream are "raw milk, fresh cream, sugar, and milk powder". Although I wouldn't say it was my own personal favorite, I wouldn't question anyone else who declared it as theirs. And without hesitation I would recommend giving it a try if you have the chance. Like Potomaker's colleague, you might find milk to be your new favorite flavor of ice cream.