7 ms·

This sort of thing represents one of the true dangers of single-source App Stores on general purpose computers with no side-loading fallback, and is why we shou

• ma2rten 9y ago
  The title clearly states that it disappeared from multiple app stores not just apple's. At least for Android China has multiple app stores not just Google Play.
• ickwabe 9y ago
  My take away from this is quite different. Or at least tangential. I expect Apple and any other company to have to comply with local laws in various countries. It's unavoidable. What else could they do? Refuse and loose access to that population? But right now, as regards device encryption and back doors, there is a sort of mutually assured destruction. A MAD that the US law enforcement (e.g. FBI et al) are constantly trying to undermine. Right now Apple claims the iPhone is designed such that they cannot unencrypt it. The FBI wants to force them to create a method. Regardless of the technique used that then will make every similar device world wide subject to the whims of local law as regards allow that country access. What would stop any country from then demanding blanket access to devices? But at the moment this doesn't seem happen because there's an unspoken detente among adversarial countries to not demand such back-doors. This situation reminds me of that. Since it is possible for Apple and others to block things on their app stores, countries demand it. It's a cautionary tale of why it's important for companies to design certain things from the bottom up to prevent bad behavior.
  • mattferderer 9y ago
    Microsoft's current CEO discusses this in a chapter of his new book "Refresh". Listening to him, I think the big companies are going to fight hard & have popular opinion on their side when it comes to securing data. I believe Erlang creator Joe Armstrong has proposed some sort of split security. Something along the lines of securing the most important data from everyone & allowing government access to limited data that could help them catch bad guys. He wasn't very convincing in the podcast I listened to but maybe in written form he could provide a better argument.
    • mtgx 9y ago
      > Listening to him, I think the big companies are going to fight hard & have popular opinion on their side when it comes to securing data. I'm glad they are thinking this way. But over the past few years, Silicon Valley companies have also made themselves more hated and less trusted by the general public. This won't bode well for the "final fight" between them and the government, because they may be surprised to find out that people won't show up to support them anymore. So tech companies, don't be Uber, is basically what I'm saying. Stop being so non-transparent with your data collection and your aggressive and shameless tracking, while also making it very hard for users to either know what you're doing or to disable your tracking. If all companies would revert back to a "first, do no evil" mantra by default, I think they would find it much easier to have the support of the general public when it comes to big government fights.
• Angostura 9y ago
  > and is why we should be proactively working to make it illegal. Absolutely, it should be outlawed now! Do you have an address for the person in the Chinese legislature that I should be writing to, to pass the relevant law?
  • Jyaif 9y ago
    You didn't understand what he was saying. He's saying that iOS is the problem because it's vulnerable to censorship. This is unlike platforms (Android, Windows, Linux...) that allow side loading, which makes censorship harder.
    • Angostura 9y ago
      I'm arguing with the underlying problem. I'm suggesting that passing laws against app stores is not a practical solution.
  • xoa 9y ago
    >Do you have an address for the person in the Chinese legislature that I should be writing to, to pass the relevant law? In a global market and considering a universal hardware platform, cooperation from any specific polity is entirely unnecessary. It is sufficient merely to convince one single polity that cannot be abandoned. America or the EU would do it. Both are markets that Apple absolutely cannot give up, and of course the former also has direct legal jurisdiction over the majority of Apple. You also seem to be extremely confused about what I actually suggested should be legislated: >I'm arguing with the underlying problem. I'm suggesting that passing laws against app stores is not a practical solution. I never suggested that "App Stores should be banned", that's ridiculous. What I said is that Apple (or any other entity) should be required to offer (for free or at a reasonable fee [1]) owners a cert/key they can use to sign arbitrary software to run on their device indefinitely. That's it, though it might make sense to require that developers be offered that as well. That alone could be sufficient to serve as a foundation for various non-Apple implementations of side loading, up to and including full 3rd party App Stores. The point isn't that Apple wouldn't still have their own App Store, nor even that it wouldn't still be by far the preeminent choice. It's merely that there'd be a core level steam release valve available. So in that scenario the actions of the Chinese (or any other) government would revert to the same as any standard computer: within their own borders they could pursue all legal and technical avenues their government wished, but people could try to go around it. A bypass of the great firewall (or merely a tourist visit outside of the country) would be sufficient to gain a key which could then be used on an iDevice within China (or anywhere else). Apple would simply not be involved in that, instead it'd be between a government and its people again. The same would apply even beyond government, for example Apple doesn't allow certain content that is perfectly legal but not family-friendly enough on the App Store anywhere. A legal requirement that owners may sign software to run on their own devices would create an alternative. ---- 1: which can be a thing in law, no "of course you can do it on your $500 device for $1 million" stuff.
• jernejzen 9y ago
  While I agree with your point and distributed App Stores sound like a proper way for users to be independent from various risks. But what makes me paranoid is that decentralised stores would be another source of malware, where even Google as a central entity fails miserably.
  • xoa 9y ago
    >But what makes me paranoid is that decentralised stores would be another source of malware Yes, some additional risk comes of certain avenues of malware [1] comes with decentralization. However I really want to emphasize that the risk in an optional-non-central-source scenario is not at all the same as what exists on the PC, and in turn any risk must be weighed against the direct harm that centralized censorship is already doing. First, in the scenario I'm describing everything is still signed, potentially even with an Apple-based PKI type cert. Allowing owners to have their individual cert signing for their devices isn't the same thing as giving them root or jailbreaking, while certain restrictions of Apple's are non-technical (like private API usage) a lot of jailing can be enforced by the OS. With trusted authorization and data input paths going through an HSM in iOS, an owner key does not mean any software can run willy-nilly, and the scope for malware is limited outside of security vulnerabilities that may exist anyway [2]. There is still a trust infrastructure available, and in turn the ability for alternate App Stores to have reputations of their own (and for owners to get extra warnings, do revocations, etc). Apple could still themselves issue blacklists against malware (with user control). Etc etc. Ubiquitous hardware backed signing infrastructure required for running software throughout the device offers a lot of anti-malware options regardless of whether Apple alone owns the device keys. Users would also simply face a much higher barrier of entry to running malware. If it costs money, any money, to get an owner cert and requires any hoops then social engineering becomes significantly harder. Apple does in fact cover most of the needs in their App Store, so going outside of it would still be something unusual. With the right UX and possible dual requirement for developer signing as well, users might simply themselves (or with a technical friend) side load one single app like Skype and otherwise not bother. Apple has a number of levers to better push non-technical users in that direction too. FWIW you didn't mention it but I will touch on piracy since that's a material concern for Apple and devs too: without getting into the weeds on effectiveness of DRM and specifics of implementation, I don't see why a device that allows running non-App Store software couldn't still effectively deny running something that's available directly in the local regional App Store itself (options for official/unofficial non-App Store offerings would be possible too, that'd be a business decision for Apple). In short I don't discount that, amongst the entirety of Apple's user base, there might well be some users who'd experience some level of harm from a decentralized option, no matter how it's implemented. But at the same time there are definitely a lot of owners who are experiencing harm from present situation right now. Theoretical maybe harm shouldn't entirely distract from existing proven harm. I think the tradeoff of Apple giving up some control (and in turn responsibility) there would be worth it for all involved (except oppressive governments). ---- 1: In a discussion of government actors it's worth considering whether in a centralized scenario could Apple be ever be pressured/legally ordered to deploy malware directly, but that doesn't diminish the primary threat of malware being from private/foreign sources. 2: If anything I'd expect vulnerabilities appearing in general malware would accelerate their patching vs the present 0-day market where they're sold for a lot of money for use mainly in APTs.
• shadowtree 9y ago
  This impacts Android and Windows too. Nothing to do with Apple. You can't sell telephony software in China as a Western company directly anymore. Not matter how.
  • Mindwipe 9y ago
    Those platforms can download the software from other sources trivially, so the lack of presence in an app store isn't nearly the problem it is on iOS.
    • selectodude 9y ago
      I imagine they're blocked at the GFW level so download away, it still won't work.
• arihant 9y ago
  This has nothing to do with centralisation. Every (even decentralised) shops need to comply with local laws. You can debate the laws, but not the compliance of shops. It's the same reason you can't just buy weed from 7-Eleven. If you care to read the article, Microsoft says they are working with the government and the app will soon get reinstated.
  • xoa 9y ago
    >This has nothing to do with centralisation. This has everything to do with centralization precisely because decentralization makes it easier to break the law. I thought it went without saying when discussing bypassing censorship in China, but to be clear I am actively advocating for the ability for end users to more easily defy the law in the setting of software performing as expected that they choose to utilize on their own devices. >(Every (even decentralised) shops need to comply with local laws.* 1: "need" and 2: LOCAL laws. Which in the case of shops based outside of a jurisdiction means only their own jurisdiction, not anyone else's. Apple is a multinational, so it cannot avoid this. But other shops absolutely could, just as they do in the PC market right now. And again, this applies to every polity, not just China. I (and probably most of Americans on HN) am absolutely a computer law breaker. I have ripped my own DVDs and Blu-rays, which has put me in direct violation of the DMCA. I have utilized open source software like x264 (or, back in the day, gif encoders) without negotiating or paying a license fee, which puts me in violation of software patents. In the real world, entities like RIAA and the MPAA have had to play whack-a-mole and could do nothing about places based in jurisdictions where evil laws like patenting of ideas/math are not in place, and thus there was freedom to go around them and change the course of public expectations beyond those with central power, which in turn affects the law too (which is an organic entity). If we instead imagine an alternate world where in the 90s Microsoft and Apple and so forth had iOS level hardware full stack control and central stores, would we ever have had anything like DeCSS? Hell, would open source platforms have been possible at all? Law and morality are not the same thing, not even in the most egalitarian and democratic countries. There needs to be some give at the edges for experimentation and evolution over time.
• jmull 9y ago
  You might not like Apple’s walled garden, but it’s pretty much irrelevant to this story. In fact Skype has been removed from the Android stores as well so the non-walled gardens aren’t faring better. Also, since this class of apps is about communication, the app stores are just a side-skirmish in the war for control. The real power is in controlling the network, which the Chinese government does (and Apple does not). That brings us back to the real problem here: the repressive control of speech and communication by the Chinese government. The relative openess of tech ecosystems means little in an environment of a repressive, controlling government. They only put “Apple” in the headline for the clicks.