5 ms·
Thankfully the EU also has legislation that makes "share data to use" tactics illegal, so this shouldn't be a problem.
by dvdkon 2y ago
Thankfully the EU also has legislation that makes "share data to use" tactics illegal, so this shouldn't be a problem.
- gruez 2y agoHow are you going to enforce this against app developers outside of the EU?
- silvestrov 2y agoFacebook likes getting some of that sweet money from EU advertisers. EU can block payments from EU to Facebook.
- gruez 2y agoDifferent threat model. You're thinking of big tech companies like Meta, who are big enough to warrant regulatory attention. I'm thinking of fly-by-night shady app developers that make flashlight/weather/"security"/IoT/game apps, that fly under the radar because they're too small.
- notpushkin 2y agoNot really the kind of apps people would sideload?
- gruez 2y agoPeople might not sideload a flashlight app, but they're probably going to sideload an IoT app (especially if they bought the corresponding product first) and games (especially if their friends are peer pressuring them into it).
- nrabulinski 2y agoThen the EU can stop them from selling their products to EU customers, since as soon as you’re providing services to EU customers you’re obliged to play by EU rules
- gruez 2y ago>Then the EU can stop them from selling their products to EU customers So you want the EU to play whack-a-mole with fly by night IoT vendors, some of which might be shipping directly from China? Or do you want to fix this with even more regulation, like requiring licenses to import IoT products or whatever?
- worik 2y ago> So you want the EU to play whack-a-mole with fly by night IoT vendors Yes Like they do with other online criminals
- gruez 2y agoYeah, I'm sure the EU sending angry letters to nameless IoT company in shenzhen is going to be very effective.
- worik 2y ago> Yeah, I'm sure the EU sending angry letters to nameless IoT company in shenzhen is going to be very effective. I would expect them to use a heavier hammer to whack that mole....
- ben_w 2y agoThe reason I would rather we'd kept walled gardens (plural is fine, given that monopolies are also bad) is that I expect such apps will quickly become sideloaded soon after it becomes possible. We shall see — that may simply be a security mindset paranoia on my part.
- Bobbyddxxd 2y agoAnti free choice mindset.
- ben_w 2y agoTruly free choice is an illusion; the best we can do is a force of law to keep players from tilting the playing field in their own favour.
- Spooky23 2y agoOnce side loading is available, the stupids will do it for “freedom” or whatever. Regulating the AppStore makes sense. Proliferating lots of them is the most inane policy decision ever.
- LexGray 2y agoExactly the type of apps people would sideload. Little things that somehow violate App Store rules abusing APIs, lying about app capability, just being ethically dubious. Use flash to create seizures, nudity people realtime, hack your ex, damage the device, cheat at games, spam your enemies, etc. There is an infinite use case for tiny malicious apps finding malicious or gullible users and with side loading there are going to be stores created to appear very legitimate when their intentions are actually illegal. I think the EU has very noble intentions while completely failing to understand that society is a wreck and a lot of money is made through extortion and fraud. Their apparent fix is to make the OS developers still responsible for what is installed while taking away funding for it. I am guessing the end game is more taxes and government intrusion on private devices to fix the problems they are purposely creating.
- BlueTemplar 2y agoAndroid is way more popular in the EU than iPhone, allows sideloading, and I am not aware of these issues being rampant with it ?
- ben_w 2y agoWhile sideloading is possible on Android, it appears to be sufficiently difficult that Google isn't effective with the argument that this makes them "not a monopoly". As a tech person I find this weird, but then I remember the relevant XKCD: https://xkcd.com/2501/ https://xkcd.com/2501/
- BlueTemplar 2y agoBut then the argument that opening iOS up is going to cause security issues isn't effective either.
- ben_w 2y agoWhy so? Surely if normal people can't do a thing, even if only because it's too complicated or inconvenient, normal people aren't going to be a big source of security issues due to that thing.
- toast0 2y agoTo a first approximation, the small apps don't matter because they're small. If that doesn't work, set up a deposit requirement like Apple wanted for the 3rd party stores and then walked back. Do something wrong, lose the deposit and the entitlements.
- yunohn 2y agoIn a discussion thread about Meta (which follows EU law) launching an app in the EU using their alt App Store laws; why would you further move the goalpost just for arguments sake?
- gruez 2y ago>In a discussion thread about Meta 1. characterizing this as a "discussion thread about Meta" is a stretch. While the OP is about meta specifically, it's fairly obvious that as of a comments up, the discussion is about the behaviors of app developers in general, rather than what Meta is specifically doing. 2. Discussing unintended side effects isn't "moving the goalposts". If we're talking about the student debt crisis, and someone brings up the idea of student loan forgiveness, it's not "moving the goalposts" to bring up concerns about inflation.
- ben_w 2y agoFines equivalent to 10% of global revenue, and extradition orders.
- dvdkon 2y agoUnless I'm missing something, Apple only has to provide these new requested APIs to users in the EU. I presume Apple will keep everything as-is in other countries, just like with app sideloading.
- axkdev 2y agoCitation? I think this is not true. The EU law seems to just require explicit consent. So websites and apps can ask whether user wants to share data to keep using them for free or pay a subscription fee.
- silvanocerza 2y agoArticle 7.4 and recital 43 of GDPR cover that. Article 7 https://gdpr-info.eu/art-7-gdpr/ https://gdpr-info.eu/art-7-gdpr/ Recital 43 https://gdpr-info.eu/recitals/no-43/ https://gdpr-info.eu/recitals/no-43/ Those two in combination stop companies processing data for unrelated task to the services they provide. And it's indeed true and already been applied, see this: https://www.digitalguardian.com/blog/google-fined-57m-data-protection-watchdog-over-gdpr-violations https://www.digitalguardian.com/blog/google-fined-57m-data-p...
- dvdkon 2y agoA "consent or pay" model is sadly widely used, but it's at least very controversial and probably illegal. No data protection agency has gone on record to say it's definitely illegal and no fines have been given out IIRC, but the EDPB had some tactfully negative things to say about it [0], and the Czech DPA has ordered at least one company to cease the practice in a preliminary ruling [1]. (Which the company seems to be completely ignoring, as is sadly common.) [0]: https://en.wikipedia.org/wiki/Consent_or_pay https://en.wikipedia.org/wiki/Consent_or_pay [1]: https://uoou.gov.cz/urad/povinne-zverejnovane-informace/svobodny-pristupu-k-informacim/informace-poskytnute-na-zadost/informace-poskytnute-na-zadost-v-roce-2024/poskytnuta-informace-dne-31-mesic-2024 https://uoou.gov.cz/urad/povinne-zverejnovane-informace/svob...