5 ms·
Certain apps have always gotten special treatment. If it’s big enough to mess with phone sales they’re allowed nonsense a normal dev would be permanently banned
by MBCook 3y ago
Certain apps have always gotten special treatment. If it’s big enough to mess with phone sales they’re allowed nonsense a normal dev would be permanently banned for.
Ex: all the stuff FB has been caught doing over the years
My understanding (no first hand experience) is that WeChat and Alipay are basically required in China. If a phone doesn’t have them, it’s worthless and won’t sell.
So naturally they too can do nonsense that would get the rest of us booted to space.
- stavros 3y agoWhy does apple get to decide which app gets automatic access to my private data, on my device, without needing to ask me?
- electric_mayhem 3y agoDoes your employer have a donation matching program? It’s a great time of year to donate to the EFF.
- stavros 3y agoI donate to NOYB, but I second your sentiment.
- BobaFloutist 3y agoIt's so hard to prioritize non-profits these days. EFF is huge and super relevant, but so are aid programs to Ukraine or I/P, and reproductive health orgs. There's a lot going on I want to contribute to.
- bear141 3y agoI wonder if there is a service to automate small (or large) donations to multiple organizations on a regular basis similar to an investment service? Edit: I can only find services marketed towards the nonprofit, not for the donor. A service that aggregated and automated all the nonprofits I want to regularly donate small amounts to would be great. I think it would be important to not require the nonprofits direct involvement in order to allow me to donate as diversely as I want.
- electric_mayhem 3y agoBenevity is a company that basically administers company matching donations. Database of approved nonprofits, can set up arbitrary amounts as recurring payments, and automatic matching if you do the donations through their site. It’s not quite “I got $500 this month to give back, scatter it amongst my chosen charities” but you could definitely use a service like that to set up baseline donations. I don’t do scheduled donations; prefer to spool it up and make a splash when employer offers 2:1 match. Don’t think I’ve seen that in all of ‘23, though, so settling for 1:1 now.
- bear141 3y agoThank you for this. I realize this suggestion fits the context of the thread, but I am currently self employed so I would love another suggestion that isn’t necessarily geared toward integrating with employer match programs.
- BobaFloutist 3y agohttps://www.charitynavigator.org/donor-basics/tools-for-giving/giving-basket/ https://www.charitynavigator.org/donor-basics/tools-for-givi... How's this look?
- bear141 3y agoThank you that one looks great
- electric_mayhem 3y agoI’m with you on all those. I just did my end of year matching gift donating through the portal at work. I guess I left out Ukraine, which needs fixing. But did get FSF, EFF, the regional food bank, and a niche human rights org. Let me tell you, causing my employer donate to the EFF in particular is always one of the high points of my year. Even better when there’s 2:1 matching, which they seem to not offer this year (I dig deep in my own pocket when they do have that because, hey, 2:1!). It’s hilarious and oh so satisfying.
- coldacid 3y agoBecause you bought a closed-source device by which you surrendered your privacy to whatever the source-controlling company wants.
- ben_w 3y agoQuite a few apps run tests to find out if they're running on a rooted device, and refuse to continue if they are. Dunno if these apps do that or not, but I can easily imagine that using them is a Hobson's Choice even in OSS utopia: take the horse offered (app with tracking) or don't have a horse.
- salawat 3y agoThere is no Hobson's choice in OSS utopia, as the outcome of "app with tracking offered only" is "fork app - tracking". You can sit there and stew over the gall of those people to do it, but if you piss them off enough, it will happen.
- ben_w 3y agoTo the extent you could ever replace WeChat and Alipay with OSS, that's already a possibility today even with closed OSes and App Stores. To the extent that you can't (network effects or legal obligations or whatever) you still won't be able to if the code of those apps is made available under any license of your choice.
- anileated 3y agoFWIW I used WeChat a few years ago and at that point it definitely asked for local network access (which is what this article is about; a mechanism for collecting SSIDs which can then later be correlated to locations). If there is an entitlement, it is as of yet unclear whether it means a consent dialog/privacy toggle or not. IIRC an entitlement only means you can ask for this sort of access, not get it automatically, but I may be wrong (I’ve never gotten far in iOS dev). We can argue that this feature is misnamed, regular users will not understand what it is and would not be giving informed consent, and I can get behind that, but “automatic access to my private data on my device” looks like jumping to conclusions.
- stavros 3y agoHm, I assume any app can ask for whatever it wants, but that's just an assumption. I don't know if app developers need to apply to be able to request permissions, but I don't own an iPhone.
- MBCook 3y agoCertain things require permission from Apple to be able to even use. The API in question here is one of them. Other things are just available to any developer but have to have a user prompt, for example saving to the photo library.
- anileated 3y agoI was remembering when trying out iOS development years back that entitlements were needed for many things and the ones I tried involved a consent screen. From looking at https://developer.apple.com/documentation/bundleresources/entitlements https://developer.apple.com/documentation/bundleresources/en... I would say there are many more entitlements than consent screens, the phrasing suggests there is no 1:1 mapping between them and is not clear on whether they reliably come with consent screens (I suspect not). It is very unfortunate that there is little clarity on that in the docs, and that entitlements are not exposed anywhere in the GUI. Sure, they are too technical, but they could at least be shown in some advanced info pane. I am seriously considering if I can dejail an old iPhone and perhaps inspect some big name apps for what they have been entitled to.
- ben_w 3y agoBecause there's no rule saying they can't. I think. Legal advice about what is and isn't legal under GDPR (and equivalents) varies a lot.
- pixl97 3y agoBecause this is how all operating systems work. If Microsoft wanted to give special apps access to your private data without asking, then that is exactly what would happen. The same thing is true in Linux, other than we'd expect that the open source nature would have users going "Yo, WTF"
- stavros 3y agoThat's like saying "because that's how locks work, the company who sold you the lock can just come open your door".
- pixl97 3y agoThis is exactly correct, though you don't want to admit it's the case it seems. I mean, we just allowed Car Manufactures to pump as much contact data and location data as they can off your phones and sell it to whomever they'd like risk free and legally. We have laws against physical trespassing, but when it comes to 'data' trespassing on applications that you install or come with your phone we're still in the wild west.
- freedomben 3y agoI think you're both right. the misunderstanding here is a difference between is and ought. pixl97 is describing the current state of things, not saying they ought be this way (please correct me if I'm wrong). stavros is describing the way things ought to be.
- stavros 3y agoYes, exactly. It is that way, but it should be illegal to do that.
- panarky 3y ago> and sell it to whomever they'd like Is there any evidence that car manufacturers are harvesting data from drivers' phones and selling it without consent?
- talldatethrow 3y agoProbably because you asked them for permission to use their phone and software.
- dns_snek 3y agoThey clearly purchased the phone, therefore it's not "their" (Apple's)
- talldatethrow 3y agoI honestly don't see it like that anymore. You paid in to buy the object but you're still asking for permission to use their overall ecosystem. I think it's more like a child buying a teams jersey so that he can play on the team, but he can still get kicked off the team if he doesnt follow the rules. You can't argue "but I paid for the uniform with your logo, you must let me play 1st base!" Sure the child still owns the uniform, and maybe he can get some use out of it or sell it off for spares (parts) to other people, but him paying doesn't make him own the team.
- dns_snek 3y agoI think we agree.
- freedomben 3y agoI've asked similar questions before and am usually told that this is how Apple does things and it's what makes their users happy. It's in fact why they love and choose Apple. They trust Apple to make the right decisions, and this is in fact a big part of the value add of their products. This is much related to the walled garden approach. For example, ask about why sideloading should remain not an option at all, rather than something like Android where you can enable it if you want to but "Grandma" isn't going to accidentally do it. Apple users actively don't want that capability. It doesn't make sense to me, but that's because "I'm not their target market."
- saiya-jin 3y agoI have to agree with this sentiment, I read it here on HN 'power' users more than once. Although most Apple users have no clue about what we discuss here, the part about actively wanting it is simply not true en masse. Needless to say that's not for me and I will probably keep sporting Androids (in my case I am happy with Samsung's top ultra offerings) since I actually use those added features, ie saving 500 bucks on proper expensive variometer for paragliding and instead hooking it up via OTG cable with basic one with good sensor but without display, for 10% of the price... needless to say relevant app isn't on play store neither. And so on. But we certainly have choice on the market. I just wish Apple would properly focus on user security and shielding them from the worst of internet, and less on milking advertising, what I see so far didn't convince me it isn't just sophisticated marketing and not much more. You already pay premium on the device, its a proper spit in the face to be so visibly milked more and more, thats pure corporate greed. What I mean - my wife with iphone pops up browser, I pop up mine with firefox and ublock origin. Internet is utterly useless and horrible place on her phone, while completely fine on mine (plus I get youtube ads blocking as a bonus)
- neilparikh 3y ago> my wife with iphone pops up browser, I pop up mine with firefox and ublock origin. Internet is utterly useless and horrible place on her phone, while completely fine on mine (plus I get youtube ads blocking as a bonus) I recently set up NextDNS on my iPhone and browsing the web has become much more usable (previously, I would get webpage crashes!). Something to look into in addition to or instead of Wipr.
- madeofpalk 3y agoYou buy Apple hardware, which is a pretty strong signal that you trust Apple.
- 0cf8612b2e1e 3y agoTwo party marketplace. I don’t trust Apple, but the competition is not any better.
- bear141 3y agoThere are alternatives. Privacy based software and hardware. But the inconveniences that come with it are not insignificant. I plan on moving in that direction at some point, but for now I’m not ready.
- rpigab 3y agoIf every big app had to interrupt users to ask for simple things like performing http calls, usability would take a little hit, the nice "UX flow" of apple is a major selling point, so a very small percentage would buy Android phones.
- lxgr 3y agoDetermining my house or even room level location is not at all equivalent to making an HTTP call. And Apple does generally prompt for location permissions, as does Google on Android.
- wredue 3y agoThe market decides by not buying devices that empower apps to spy on them.
- tempodox 3y agoWith Apple there's no such thing as “my device”.
- tick_tock_tick 3y agoBecause Apple fundamentally doesn't believe you own the device so the question makes no sense to them. They already own it why would they need to ask you?
- lxgr 3y agoNo app gets special treatment for any of the user-grantable permissions like location, Bluetooth, local network access, contacts, photos... What makes this any different? It really seems more like an oversight than a conscious decision, similarly to how (I believe) both iOS and Android have retroactively had to bucket some of the Bluetooth LE permissions into "location", since that's what you can effectively do with them.
- MBCook 3y agoIt could be. But the fact it’s behind a special permission you have to request from Apple tells me they likely think it’s secure enough.
- politician 3y agoWhat’s your basis for saying that Apple doesn’t provide special treatment to apps? I’ve directly experienced both of their special and their non public (phone calls only, refusal to communicate over email) processes.
- lxgr 3y agoI’m not claiming that at all in general, but I do believe it’s true when it comes to user-grantable permissions. Or do you have evidence to the contrary?
- facialwipe 3y agoGiving the world’s most valuable corporation the benefit of the doubt. This is an interesting worldview to have in 2023.
- lxgr 3y agoIt’s a pretty obscure API, and Apple has a strong interest in at least being perceived as pro user privacy. And assuming for a second this is indeed an intentional backdoor in plain sight of the world: What’s in it for Apple? Hanlon’s razor still cuts in 2023, at least for me.
- onlyrealcuzzo 3y agoInteresting that cutting monetary deals was a problem for Google, but special access APIs are fine.
- wodenokoto 3y agoThat doesn’t excuse anything! This is not “oh poor small time devs”, this is paying customers being lied to by Apple.
- kiririn 3y agoSee also McDonald’s being allowed to gate app functionality behind background location access
- lxgr 3y agoThat’s adjudication of “soft” rules around permission optionality, which is a big problem, but nothing that lets apps bypass permissions outright.
- bdd8f1df777b 3y agoThey are required in China, but the hotspot functionality isn’t. At least give me an option to turn it off.