3 ms·

A well built Unix based alternative to Mac would be attractive to many in particular developers. Huawei can address the security concerns by using established

by chvid 7y ago

A well built Unix based alternative to Mac would be attractive to many in particular developers. Huawei can address the security concerns by using established open source software (which they seem to have). Would be great to have an alternative to the windows/mac duopoly.

thebruce87m 7y ago
It’s not just software that is the security concern. What Chinese silicon is on there?
- xpuente 7y ago
  Chinese silicon isn't everywhere?
  - ijiiijji1 7y ago
    Nope. Look at Intel, NVidia, TSMC and GloFo. Final assembly board-stuffing maybe in China, but that's unlikely to be the source of major (high-gate-count) components.
    - TheSpiceIsLife 7y ago
      ( @dang is there a reason this users recent comments are dead? I had a quick look through the comment history and all the comments seem to be in good faith).
      - dvfjsdhgfv 7y ago
        I wanted to ask the same question. He wrote a sensible comment that was very hard to read (https://news.ycombinator.com/item?id=21067221 https://news.ycombinator.com/item?id=21067221). I upvoted some of his recent comments, maybe it helps.
ptah 7y ago
just to be pedantic: macOS is Unix whereas linux is not https://www.opengroup.org/openbrand/register/brand3653.htm https://www.opengroup.org/openbrand/register/brand3653.htm
- chungus_khan 7y ago
  Actually, Huawei's own EulerOS (which is based on CentOS Linux) is UNIX certified as well: https://www.opengroup.org/openbrand/register/brand3622.htm https://www.opengroup.org/openbrand/register/brand3622.htm Linux is not inherently compliant (and Deepin isn't AFAIK), but it is entirely possible to package a distribution which is and submit it for certification.
natmaka 7y ago
> Huawei can address the security concerns by using established open source software (which they seem to have). If you don't trust the entity publishing the binaries, then having it simply publishing sourcecode is not a way for you to gain confidence because there is no practical way to be sure that the binaries they deliver are the published code compiled by a non-modified version of an opensource compiler. They have to provide a way to do reproducible builds. https://reproducible-builds.org/ https://reproducible-builds.org/ There is also a huge challenge when it comes to enable the customer to audit the hardware.

by chvid 7y ago

thebruce87m 7y ago

It’s not just software that is the security concern. What Chinese silicon is on there?

xpuente 7y ago
Chinese silicon isn't everywhere?
- ijiiijji1 7y ago
  Nope. Look at Intel, NVidia, TSMC and GloFo. Final assembly board-stuffing maybe in China, but that's unlikely to be the source of major (high-gate-count) components.
  - TheSpiceIsLife 7y ago
    ( @dang is there a reason this users recent comments are dead? I had a quick look through the comment history and all the comments seem to be in good faith).
    - dvfjsdhgfv 7y ago
      I wanted to ask the same question. He wrote a sensible comment that was very hard to read (https://news.ycombinator.com/item?id=21067221 https://news.ycombinator.com/item?id=21067221). I upvoted some of his recent comments, maybe it helps.

ptah 7y ago

just to be pedantic: macOS is Unix whereas linux is not https://www.opengroup.org/openbrand/register/brand3653.htm https://www.opengroup.org/openbrand/register/brand3653.htm

chungus_khan 7y ago
Actually, Huawei's own EulerOS (which is based on CentOS Linux) is UNIX certified as well: https://www.opengroup.org/openbrand/register/brand3622.htm https://www.opengroup.org/openbrand/register/brand3622.htm Linux is not inherently compliant (and Deepin isn't AFAIK), but it is entirely possible to package a distribution which is and submit it for certification.

natmaka 7y ago

> Huawei can address the security concerns by using established open source software (which they seem to have). If you don't trust the entity publishing the binaries, then having it simply publishing sourcecode is not a way for you to gain confidence because there is no practical way to be sure that the binaries they deliver are the published code compiled by a non-modified version of an opensource compiler. They have to provide a way to do reproducible builds. https://reproducible-builds.org/ https://reproducible-builds.org/ There is also a huge challenge when it comes to enable the customer to audit the hardware.