Advice for US Companies in China by Kaifu Lee

October 17, 2005

China economy and IT market are exciting and attrative. It’s lucrative to some multi-natioinal companies, while a waterloo to many of them and their SVP/EVP/MD/GMs. Why? A good slides by Kaifu Lee disclose his findings at China. Click to download.

  • Build strong government relationships
  • Play by China’s market rules
  • Make a long-term commitment
  • The local economy is the top priority
  • Nurture local people
  • Build trust, not PRUnique power of government
  • Relationships required at all levels
  • The spirit of the law matters more
  • China’s culture is built on trust, relationships, mutual respect.
  • The concept of “face” is very important.
  • Avoid sensitivities and find every opportunity to make China look good
  • Negotiations are bottom-up and informal.

Thanks to Dr.Lee’s excellent summary. It’s very valuable to read.

Advertisements

Top Ten Concerns to Skype Security

October 17, 2005

As a security professional, I adopt Skype as my primary IM due to its encryption and firewall bypass. Although firewall bypass is the direct experience, encryption is just claimed by Skype. Nothing more about the encryption mechanism, such as the key generation, management and etc. The following is the Top Ten Questions I want to know about Skype security issues:

  1. does Skype company de-encrypt/record my talk/chat?
  2. besides the parties of the talk/chat, any body else can read/hear the content?
  3. how does Skype process the talk/chat traffic along the internet route?
  4. is the talk/chat content stored at somewhere else at the internet?
  5. how does Skype negotiate the session-key used to encrypt the traffic?
  6. what algorithm does Skype used to encrypt the talk/chat traffic? (more detailed info than just AES)
  7. how does Skype store the public/private key pairs of skype client?
  8. is there any means to identify the traffic at network layer? (though Verso has succeeded in it, I mean what means Skype support)
  9. is there any existing mechanism to account/audit the activities of the skype client, or recommendation from Skype?
  10. is there any country agents involved at the key management?

What’s yours most of concern questions? want to know from Skype?


Congratulations on Shenzhou-6!

October 17, 2005

It’s so exciting and moving to see, to hear that Shenzhou-6 landed successfully. Great China! Great Chinese! I am proud to be a Chinese!

热烈祝贺神州-6成功着陆,顺利完成航天任务!伟大的祖国,伟大的中国人民,我们为你自豪!