News for hackers. Stuff that matters.
Re:Tim Cook makes blistering attack on the “data industrial ... by walterbell on Wednesday October 24, 2018 @06:42AM (#18291198)
Hi Apple. Please:

• add VPN on/off to control center

• allow per-app VPN via Apple Configurator, without enterprise MDM

• once the above two are available, we can use Tor, IDS, DPI or pihole on a per-application basis, to reduce data harvesting

• bonus1: allow the open-source iOS MDM community OR the iOS Shortcuts community to make it easy for novice users to have one-click install of "privacy-plus configurations"

• bonus2: provide open-source code for on-device, silicon-enabled voice recognition using Neural Engine. In the meantime, allow anonymous (no iCloud login) use of Siri via Tor on a per-application basis

Re:Tim Cook makes blistering attack on the “data industrial ... by geezerjay on Wednesday October 24, 2018 @07:01AM (#18291284)
You're addressing the technical problem but Tim Cook is addressing the political problem, which is more effective at tackling the root causes.
Re:Tim Cook makes blistering attack on the “data industrial ... by hollerith on Wednesday October 24, 2018 @10:14AM (#18292571)
Political problems tend to be much harder to fix than technical problems especially if you're Tim Cook.

(Also, political solutions are more likely to incur severe unwanted side-effects, such as, for example, making it almost impossible for any new operating system to enter the smartphone market ever again).

Also, the options Tim Cook has at his disposal go beyond technical solutions: in particular, it would be straightforward for Apple to switch to a pricing strategy that gets iOS devices into the hands of 100s of millions or billions of people who will stick with or choose Android if Apple keeps its current pricing model.

Here is a writer who estimates that Apple could sell the iPhone X at at 40% discount from its current (at the time the web page was written) price without losing money on the sale:

https://www.forbes.com/sites/ewanspence/2017/11/08/apple-iph...

Rather than switching pricing strategies, Mr Cook apparently prefers to lobby the government to help him maintain the iPhone's status as a premium or luxury brand, which in turn preserves the iPhone's very high profit margins.

Re:Tim Cook makes blistering attack on the “data industrial ... by ganzuul on Wednesday October 24, 2018 @07:21AM (#18291384)
Dubious proposition. Many programmers work to solve political problems through technological means. TOR is an example of this.
Re:Tim Cook makes blistering attack on the “data industrial ... by booleandilemma on Wednesday October 24, 2018 @07:46AM (#18291534)
You can’t solve a political problem through technological means, you can only provide workarounds. Geeky, awkward workarounds. TOR is an example of this.
Re:Tim Cook makes blistering attack on the “data industrial ... by mcbits on Wednesday October 24, 2018 @11:15AM (#18293133)
Problem: Buying something with a credit card exposes the customer to unauthorized charges.

Weak political solution: Thou shalt not make unauthorized charges to other people's credit cards.

Technical solution: Replace the whole concept of credit card numbers with a secure payment authorization flow.

Credit cards: Meh. That sounds hard.

[20 years later...]

Credit cards: Check this out! We offer a secure payment authorization flow! And your credit card numbers still work like they always did!

[Someday...]

Stronger (but late) political solution: Thou shalt provide a secure payment authorization flow instead of credit card numbers.

Re:Tim Cook makes blistering attack on the “data industrial ... by TeMPOraL on Wednesday October 24, 2018 @10:26AM (#18292665)
You absolutely can. Politics follows technology, not the other way around. At minimum, technology gives politicians new options.
Re:Tim Cook makes blistering attack on the “data industrial ... by geezerjay on Wednesday October 24, 2018 @02:01PM (#18294821)
That's patently false. If tech was the panacea you're suggesting, free speech would be the norm and there would be zero concerns regarding privacy.
Re:Tim Cook makes blistering attack on the “data industrial ... by TeMPOraL on Wednesday October 24, 2018 @03:40PM (#18295660)
I'm not saying it is the panacea, or that it only has consequences. Just that technology drives social and political developments, not the other way around. Our current technology does promote free speech[0], and does promote lack of privacy. That's why you see politicians fighting with the Internet on curtailing free speech, and promoting privacy.

Politics and social customs are all about taking particular spots on a landscape of choices. Technology shapes that very landscape.

--

- [0] - note how difficult it is to really censor anything these days, or curtail someone's audience; hell, if anything, technology is showing that ubiquitous free speech has some negative consequences too.

Re:Tim Cook makes blistering attack on the “data industrial ... by kkarakk on Wednesday October 24, 2018 @09:20AM (#18292121)
Have people forgotten arab spring already?
Re:Tim Cook makes blistering attack on the “data industrial ... by ganzuul on Wednesday October 24, 2018 @09:44AM (#18292342)
Bitcoin shook the world.
Re:Tim Cook makes blistering attack on the “data industrial ... by danso on Wednesday October 24, 2018 @07:47AM (#18291541)
Many engineers worked to create a free and open Internet, but political power has been very effective in regulating and limiting the Internet.
Re:Tim Cook makes blistering attack on the “data industrial ... by ganzuul on Wednesday October 24, 2018 @09:37AM (#18292262)
Sneakernet is alive and well in NK.
Re:Tim Cook makes blistering attack on the “data industrial ... by geezerjay on Wednesday October 24, 2018 @07:26AM (#18291419)
> Many programmers work to solve political problems through technological means.

The real-world effectiveness of any technical solution depends on the political will to enforce it. Without no political will, technical solutions are not effective or enforceable, or even deployable. A political solution on the other hands eliminates the need to even consider a tech solution.

Re:Tim Cook makes blistering attack on the “data industrial ... by bryanrasmussen on Wednesday October 24, 2018 @07:25AM (#18291415)
And is Tor an example of a solution to the problem that has become widely adopted in society causing the problem to go away? Because if not then maybe a political solution to the problem is in order.
Re:Tim Cook makes blistering attack on the “data industrial ... by ganzuul on Wednesday October 24, 2018 @09:37AM (#18292253)
Another example is encryption in general. Once export restricted in the U.S. as munitions, the rest of the internet simply routed around that censorship.
Re:Tim Cook makes blistering attack on the “data industrial ... by rubyfan on Wednesday October 24, 2018 @07:08AM (#18291326)
I’d like to see better sand boxing of the Photo album on iOS. Facebook, LinkedIn and others are known to raid your photos if they have access to it. Ideally you could limit their ability to read and write to just a specific photo album. Or limit write and read separately. At the moment your ability to enable and disable the permission is based on what permission the app requests and they show up together.
Re:Tim Cook makes blistering attack on the “data industrial ... by saagarjha on Wednesday October 24, 2018 @07:14AM (#18291355)
iOS has long had an API for allowing access to individual photos from the system photo picker. Unfortunately many apps eschew this because they prefer having access to all of the user’s photos.
Re:Tim Cook makes blistering attack on the “data industrial ... by bloak on Wednesday October 24, 2018 @07:35AM (#18291469)
That shouldn't matter. The OS should let you create a fake photo collection which gets shown instead of the real one to apps you don't trust. This idea is obvious and very old. At least in the case of Android contact lists people have been asking for this for as long as I can remember. Why has it still not been implemented on iOS at least? Or has it now been implemented? I've been avoiding both Android and iOS because of stuff like this.

Does anyone want to sell me a phone that runs Debian with the option of running Android or iOS in a VM with appropriate management functions that would make it very hard for an app to misbehave?

Re:Tim Cook makes blistering attack on the “data industrial ... by acqq on Wednesday October 24, 2018 @07:52AM (#18291570)
> The OS should let you create a fake photo collection which gets shown instead of the real one to apps you don't trust.

Many times yes. And even more important, the contacts!

Now it's you have to "give the app all the contacts" even if you know you want to give it only one or two. And of those one or two, just the number. Not the picture, not the date of birth, not the address.

In short we should be able to pre-select what any app actually sees of of all the databases, records and fields.

It sounds too technical but it could be done properly.

Re:Tim Cook makes blistering attack on the “data industrial ... by Karunamon on Wednesday October 24, 2018 @01:07PM (#18294295)
It could be done properly for us (techies), but this would go over poorly for normal people.

"Why do I have to click through all this mess when I just want to post this picture I just took to Facebook?"

"I think I set it right but now Facebook can't see the picture I wanted to post"

et cetera. These granular controls aren't something that regular people want to deal with.

Re:Tim Cook makes blistering attack on the “data industrial ... by remedan on Wednesday October 24, 2018 @07:37AM (#18291480)
Ideally, the user would be able to force any app that asks for photo access to use the photo picker. Otherwise app developers are gonna ask for full access, because they can.
Re:Tim Cook makes blistering attack on the “data industrial ... by WA on Wednesday October 24, 2018 @08:45AM (#18291899)
While I suspect the same thing (why wouldn’t FB access at least the meta data from all photos), I wonder if you have a source or proof for that.

Also, how does that work with GDPR compliance if the UI clearly doesn’t ask for my consent that all photos are somehow accessed and maybe even uploaded?

Re:Tim Cook makes blistering attack on the “data industrial ... by walterbell on Wednesday October 24, 2018 @07:16AM (#18291368)
There is an "add-only" permission, but it seems the app can override and insist on "read/write" permission.
Re:Tim Cook makes blistering attack on the “data industrial ... by blattimwind on Wednesday October 24, 2018 @06:56AM (#18291262)
• location data toggle in control center
Re:Tim Cook makes blistering attack on the “data industrial ... by tananaev on Wednesday October 24, 2018 @08:29AM (#18291809)
This is my most desired feature in iPhone. Disabling location service, when you don't need it, helps with both battery consumption and privacy. I don't understand why Apple doesn't want to implement an easy switch option, unless they want to track your location for some reason.
Re:Tim Cook makes blistering attack on the “data industrial ... by macintux on Wednesday October 24, 2018 @08:40AM (#18291859)
I would wager they think it's confusing and possibly dangerous.

How many people would leave it on as they drive away from home, and then struggle with their phones as they're driving?

Apple doesn't generally expose more options than it thinks a substantial number of people need. That's a UX decision, not a "Apple wants to track you forever" evil business decision.

I'll admit I wouldn't mind an option like this, but I'm fine with three levels of location service controls for apps.

Re:Tim Cook makes blistering attack on the “data industrial ... by tananaev on Wednesday October 24, 2018 @09:23AM (#18292149)
There are ways to make it user friendly. iOS can provide some kind of API that apps can use to explicitly request user to switch location services on. Just like permissions.

They can also have an option is settings to ONLY allow foreground app to use location service.

I bet most people don't want random apps to know their location in the background. They only want location when they know what it's used for (e.g. Google Maps, Uber/Lyft etc). If Apple is really so pro-privacy, they can find a way to stop apps tracking location in the background.

Re:Tim Cook makes blistering attack on the “data industrial ... by Tehnix on Wednesday October 24, 2018 @10:07AM (#18292518)
For the second point: Settings -> Privacy -> Location Services and then set the app to “While using the app”.
Re:Tim Cook makes blistering attack on the “data industrial ... by macintux on Wednesday October 24, 2018 @10:33AM (#18292730)
That's not quite the same thing, because with that setting apps can run in the background and continue to track your location. Usually you want this (e.g., Waze), but not always (e.g., Uber).
Re:Tim Cook makes blistering attack on the “data industrial ... by Tehnix on Wednesday October 24, 2018 @11:01AM (#18292992)
No. That would quite literally be the “Always” setting... For example, for Messenger to share live location, it needs location sharing to be always, and not just “While using”. With while using though, you are still able to share a pin point of you current location.
Re:Tim Cook makes blistering attack on the “data industrial ... by macintux on Wednesday October 24, 2018 @11:23AM (#18293189)
Now that I've looked for Apple's document on the matter I'm more confused. I'd need some examples of what it means by "one of its features".

"Allows access to Location Services only when the app or one of its features is visible on screen. If an app is set to While Using the App, you might see your status bar turn blue with a message that an app is actively using your location."

https://support.apple.com/en-us/HT207092

Re:Tim Cook makes blistering attack on the “data industrial ... by macintux on Wednesday October 24, 2018 @11:16AM (#18293143)
I don't allow anything Facebook-owned to access my location, so I can't speak to Messenger, but perhaps FB simply doesn't want you to lose location sharing if iOS has to kill Messenger while running in the background.

Always: an app can always access your location

While using: an app can access your location until explicitly terminated by the user or the OS due to resource constraints

Never: self-evident

Re:Tim Cook makes blistering attack on the “data industrial ... by Tehnix on Wednesday October 24, 2018 @11:24AM (#18293205)
Fair enough, I seemed to have missed the background part from

> An app is considered "in use" when you're actively using it in the foreground, or when it's in use in the background, which the status bar will indicate.

from https://support.apple.com/en-us/HT203033. There is still the indication, but admittedly that is not the same.

Re:Tim Cook makes blistering attack on the “data industrial ... by jbrooksuk on Wednesday October 24, 2018 @06:59AM (#18291275)
> add VPN on/off to control center

I really hoped they'd add this in iOS12.

Re:Tim Cook makes blistering attack on the “data industrial ... by how_to_bake on Wednesday October 24, 2018 @09:40AM (#18292292)
I believe you now can use a Siri shortcut to create a button that goes in your widgets area that turns the VPN on or off.
Re:Tim Cook makes blistering attack on the “data industrial ... by walterbell on Wednesday October 24, 2018 @11:50AM (#18293454)
Thanks for the tip. So arbitrary buttons can be placed in widget area?
Re:Tim Cook makes blistering attack on the “data industrial ... by how_to_bake on Monday October 29, 2018 @12:15PM (#18328666)
Re:Tim Cook makes blistering attack on the “data industrial ... by walterbell on Wednesday October 24, 2018 @06:59AM (#18291277)
<deleted, replied to wrong comment>
Re:Tim Cook makes blistering attack on the “data industrial ... by saagarjha on Wednesday October 24, 2018 @07:01AM (#18291285)
…did you just reply to your own comment?
Re:Tim Cook makes blistering attack on the “data industrial ... by walterbell on Wednesday October 24, 2018 @07:03AM (#18291291)
Not sure what happened there, was trying to reply to @mtgx https://news.ycombinator.com/item?id=18291227
Re:Tim Cook makes blistering attack on the “data industrial ... by mtgx on Wednesday October 24, 2018 @06:47AM (#18291227)
It would help if they decoupled the so-called "end-to-end encrypted" iMessage from automatic backups to centralized iCloud servers to which all governments have access.
Re:Tim Cook makes blistering attack on the “data industrial ... by saagarjha on Wednesday October 24, 2018 @06:56AM (#18291264)
iMessage backups are not “automatic”. You must opt-in before they leave your device.