3 ms·

Well, my counterpoints are this: 1) What if, and bear with me here, what if Apple's explanation for why they are doing this is legit? What if they are successf

by jb1991 6y ago

Well, my counterpoints are this: 1) What if, and bear with me here, what if Apple's explanation for why they are doing this is legit? What if they are successfully preventing some malware from running on macs? 2) "They don't believe you should own your computer" -- it appears Apple is planning to offer a feature that allows you to turn this behavior off. It's easy to assume Apple has malicious intentions here. But I think there is a larger issue which is that all kinds of bad stuff can in fact run on your machine without your intention. You could try to throw anti-virus software at the problem, and that's one approach, and Apple is taking this approach. Which is the best approach? That's a much more complicated discussion.

arvinsim 6y ago
> You could try to throw anti-virus software at the problem, and that's one approach, and Apple is taking this approach. Which is the best approach? That's a much more complicated discussion. If I do want to rely on anti-virus instead of Apple, it still doesn't matter. Apple doesn't give you a choice.
- jb1991 6y ago
  > Apple doesn't give you a choice. That is completely incorrect. You have the most important choice of all: Just don't buy Apple. For everyone else, assume they've already made that choice and are very comfortable with Apple's strategy of curating everything on the machine, not because they are evil or control-freaks, but because they do genuinely want the platform as safe and high-quality as they can make it. Whether it works or not is perhaps a matter of opinion, but if it's not your opinion, move along. No need to spend the days fussing about things you don't own.
totalZero 6y ago
Opt-out is not appropriate for privacy concerns, IMO, for two reasons. 1. Opt-out is not necessarily sticky. I don't have confidence that when I opt out, my preference will get rolled forward every time there's an update to the way the feature works. I have noticed this in the past with Facebook and Google. 2. What's good for the goose is good for the gander. If Apple needs to implement opt-out to placate sophisticated users who actually understand what the problem is, then what about the poor saps who don't really know why this is a bad thing in the first place? If this is truly a "feature," let people decide for themselves at time of device setup whether they want to opt in.
- jb1991 6y ago
  > If this is truly a "feature," let people decide for themselves at time of device setup whether they want to opt in. They may very well do this. On startup installation, macOS and iOS do have opt-in screens for certain things like analytics, improving Siri, stuff like that. With the introduction of this feature, I wouldn't be surprised if they add that as well. It's easy to find fault in retrospect but it doesn't make sense to have opt-in screen for every conceivable feature. Apple's philosophy, which is wildly successful for most users, is to choose sensible defaults about how the OS works. When those are challenged, they expose them more explicitly, as they have done in the past. No company can easily predict if their defaults are going to cause a divide, so sometimes they have to be reactive on some features. Apple generally has a great track record of responding to criticisms like this and making things clearer for users.
  - totalZero 6y ago
    > They may very well do this. They don't currently. > It's easy to find fault in retrospect but it doesn't make sense to have opt-in screen for every conceivable feature. Privacy isn't "every conceivable feature" and the reason Apple is taking heat for this in the first place is that they buried it, and many people discovered it for themselves when the server slow-down happened. It takes some mental gymnastics to refer to that as "wildly successful." My view is that Apple has no business knowing when and how frequently I run programs, nor circumventing my VPN. If these things are really a "wildly successful" "feature," then why bury them in the first place? Offer them to me as an option and let me bask in the glory of all that Mac OS has to offer. ...That is, unless this is just an intrusion into my privacy.
  - Silhouette 6y ago
    On startup installation, macOS and iOS do have opt-in screens for certain things like analytics, improving Siri, stuff like that. And yet there is some data stored in my iCloud account, even though the first thing I did when I bought an iPhone was spend an hour turning off every setting that I could see that would permit uploading anything. How did that happen? Apple introduced some new settings in a subsequent iOS update, and defaulted them to being turned on. It's easy to find fault in retrospect but it doesn't make sense to have opt-in screen for every conceivable feature. OK. Just provide a single, clearly marked option to enable or disable telemetry globally, and require that all Apple software and all apps in the App Store use APIs that are gated by that option for all relevant data uploads. That would be very clear about user intent, if you want to be seen to support user privacy as a genuine goal. Apple generally has a great track record of responding to criticisms like this and making things clearer for users. And yet huge amounts of data uploaded to iCloud still isn't end-to-end encrypted, even optionally. A lot of Apple users don't realise this, but plenty who do have called Apple out on it for a long time, and it hasn't been fixed. You can read whatever conspiracy theories and subjective arguments you like about why that might be, but the insecurity is an objective weakness in the system that hasn't been fixed.
nmlnn 6y ago
It strains credulity to assume no malicious (i.e. data harvesting) intent. They are requiring millions of devices to phone home every time they open any application, rather than just pushing an update to a locally stored certificate blacklist when necessary.
- jb1991 6y ago
  By that argument, if the intent was data harvesting, they wouldn't need to do this in real-time, they could also just periodically push a list of apps and launch dates/times without using the internet connection when an app is launched. That would certainly be a lot easier and a less expensive way to harvest data -- and it would also be more reliable since it could capture things that happen when offline. But that's not what they are doing.
- macintux 6y ago
  What would a well-written piece of malware do? Immediately disable whatever mechanism Apple uses to update that blacklist.
  - yyyk 6y ago
    Same thing applies to the current Apple implementation - Malware could disable the application check. If malware has that kind of access (disable blacklist/application-check), the owner has already lost.
    - macintux 6y ago
      Malware has to be able to launch first.
      - yyyk 6y ago
        Both approaches are meant to stop malware from launching so I don't see much of a difference. Blacklist/whitelist? Whitelist could be implemented locally as well.

by jb1991 6y ago

arvinsim 6y ago

> You could try to throw anti-virus software at the problem, and that's one approach, and Apple is taking this approach. Which is the best approach? That's a much more complicated discussion. If I do want to rely on anti-virus instead of Apple, it still doesn't matter. Apple doesn't give you a choice.

jb1991 6y ago
> Apple doesn't give you a choice. That is completely incorrect. You have the most important choice of all: Just don't buy Apple. For everyone else, assume they've already made that choice and are very comfortable with Apple's strategy of curating everything on the machine, not because they are evil or control-freaks, but because they do genuinely want the platform as safe and high-quality as they can make it. Whether it works or not is perhaps a matter of opinion, but if it's not your opinion, move along. No need to spend the days fussing about things you don't own.

totalZero 6y ago

Opt-out is not appropriate for privacy concerns, IMO, for two reasons. 1. Opt-out is not necessarily sticky. I don't have confidence that when I opt out, my preference will get rolled forward every time there's an update to the way the feature works. I have noticed this in the past with Facebook and Google. 2. What's good for the goose is good for the gander. If Apple needs to implement opt-out to placate sophisticated users who actually understand what the problem is, then what about the poor saps who don't really know why this is a bad thing in the first place? If this is truly a "feature," let people decide for themselves at time of device setup whether they want to opt in.

jb1991 6y ago
> If this is truly a "feature," let people decide for themselves at time of device setup whether they want to opt in. They may very well do this. On startup installation, macOS and iOS do have opt-in screens for certain things like analytics, improving Siri, stuff like that. With the introduction of this feature, I wouldn't be surprised if they add that as well. It's easy to find fault in retrospect but it doesn't make sense to have opt-in screen for every conceivable feature. Apple's philosophy, which is wildly successful for most users, is to choose sensible defaults about how the OS works. When those are challenged, they expose them more explicitly, as they have done in the past. No company can easily predict if their defaults are going to cause a divide, so sometimes they have to be reactive on some features. Apple generally has a great track record of responding to criticisms like this and making things clearer for users.
- totalZero 6y ago
  > They may very well do this. They don't currently. > It's easy to find fault in retrospect but it doesn't make sense to have opt-in screen for every conceivable feature. Privacy isn't "every conceivable feature" and the reason Apple is taking heat for this in the first place is that they buried it, and many people discovered it for themselves when the server slow-down happened. It takes some mental gymnastics to refer to that as "wildly successful." My view is that Apple has no business knowing when and how frequently I run programs, nor circumventing my VPN. If these things are really a "wildly successful" "feature," then why bury them in the first place? Offer them to me as an option and let me bask in the glory of all that Mac OS has to offer. ...That is, unless this is just an intrusion into my privacy.
- Silhouette 6y ago
  On startup installation, macOS and iOS do have opt-in screens for certain things like analytics, improving Siri, stuff like that. And yet there is some data stored in my iCloud account, even though the first thing I did when I bought an iPhone was spend an hour turning off every setting that I could see that would permit uploading anything. How did that happen? Apple introduced some new settings in a subsequent iOS update, and defaulted them to being turned on. It's easy to find fault in retrospect but it doesn't make sense to have opt-in screen for every conceivable feature. OK. Just provide a single, clearly marked option to enable or disable telemetry globally, and require that all Apple software and all apps in the App Store use APIs that are gated by that option for all relevant data uploads. That would be very clear about user intent, if you want to be seen to support user privacy as a genuine goal. Apple generally has a great track record of responding to criticisms like this and making things clearer for users. And yet huge amounts of data uploaded to iCloud still isn't end-to-end encrypted, even optionally. A lot of Apple users don't realise this, but plenty who do have called Apple out on it for a long time, and it hasn't been fixed. You can read whatever conspiracy theories and subjective arguments you like about why that might be, but the insecurity is an objective weakness in the system that hasn't been fixed.

nmlnn 6y ago

It strains credulity to assume no malicious (i.e. data harvesting) intent. They are requiring millions of devices to phone home every time they open any application, rather than just pushing an update to a locally stored certificate blacklist when necessary.

jb1991 6y ago
By that argument, if the intent was data harvesting, they wouldn't need to do this in real-time, they could also just periodically push a list of apps and launch dates/times without using the internet connection when an app is launched. That would certainly be a lot easier and a less expensive way to harvest data -- and it would also be more reliable since it could capture things that happen when offline. But that's not what they are doing.
macintux 6y ago
What would a well-written piece of malware do? Immediately disable whatever mechanism Apple uses to update that blacklist.
- yyyk 6y ago
  Same thing applies to the current Apple implementation - Malware could disable the application check. If malware has that kind of access (disable blacklist/application-check), the owner has already lost.
  - macintux 6y ago
    Malware has to be able to launch first.
    - yyyk 6y ago
      Both approaches are meant to stop malware from launching so I don't see much of a difference. Blacklist/whitelist? Whitelist could be implemented locally as well.