News for hackers. Stuff that matters.
Re:Facebook threatens to make iOS users pay. Please do it, M... by Justsignedup on Friday May 07, 2021 @01:09PM (#27078227)
Yeah empty threats all around. If only there was a way for google to follow suit. Personally this is enough of a feature for me to switch to an iphone as my next phone. And I've been an android user from the start. Even enough to advocate for it as well.
Re:Facebook threatens to make iOS users pay. Please do it, M... by fartcannon on Friday May 07, 2021 @01:28PM (#27078463)
Certainly made me happy about my wife and mother using iPhones. Maybe they'll start to listen to me :)

That said, I think the downside is still the walled garden. If Apple F/OSS their OS and let people modify it, and load applications outside the app store, I'd consider changing.

Until then, Lineage without Google apps is still a nicer experience than the walled gardens. For example, the Nexus 6 is still maintained (2014). It even recently got updated to 18.1 which is Android 11! Amazing.

Edit: Wow the Note3 and the LG G2 are still supported, too! They're from September 2013!

Re:Facebook threatens to make iOS users pay. Please do it, M... by ericmay on Friday May 07, 2021 @01:35PM (#27078538)
The walled garden is what makes things like this possible. If there wasn't a walled garden, Facebook would just say "we're shutting down on the Apple App Store, come download the Facebook App from the Facebook App Store" (or some other random third party App Store) and then all of the work Apple is doing to neuter these tracking mechanisms would go right out the window.

I view the walled garden as nothing but good. Build the walls higher. Hand me a brick and point me to the ladder.

Re:Facebook threatens to make iOS users pay. Please do it, M... by fartcannon on Friday May 07, 2021 @01:38PM (#27078582)
The app store is just wget and an install command. The permissions settings are in the OS.

They could have all the same levels of security without the need to prevent competition.

Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Friday May 07, 2021 @02:18PM (#27079009)
> The app store is just wget and an install command.

This is absurdly false.

> The permissions settings are in the OS. They could have all the same levels of security without the need to prevent competition.

This is also completely false.

OS hardening can’t prevent fingerprinting or cross app tracking toolkits.

Those are prevented by policy and contract.

Re:Facebook threatens to make iOS users pay. Please do it, M... by Too on Sunday May 09, 2021 @03:45AM (#27094070)
Android allows adb install over usb and still sandbox the application. Sandboxing is a feature of the OS and not the store. What's missing from parent description is the publisher signature to retain allowed permissions after upgrades, which still is a feature of the OS and not the store.

Stricter sandboxing makes it more difficult to fingerprint the user and lessens the burden and dependency on legal contracts and policies. Which is what Apple just did by blocking the access to unique device id.

Re:Facebook threatens to make iOS users pay. Please do it, M... by fartcannon on Friday May 07, 2021 @07:29PM (#27082001)
>> The app store is just wget and an install command.

> This is absurdly false.

Forgive me, it's wget, a checksum check, and then install command.

Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Friday May 07, 2021 @07:56PM (#27082199)
> Forgive me, it's wget, a checksum check, and then install command.

This is absurdly false.

Re:Facebook threatens to make iOS users pay. Please do it, M... by Justsignedup on Friday May 07, 2021 @02:24PM (#27079094)
This is accurate. HOWEVER being hostile to your OS can result in problems. If google REALLY wanted to do something, they could build in a form of adblocking into the OS layer itself. They can also keep that up to date via app updates from their side. Its definitely a battle, but facebook analytics is well documented by adblock communities and google keeping that list in the OS would be a possibility.

Having said that, google has no intention of waging war against facebook. They have an understanding already.

Re:Facebook threatens to make iOS users pay. Please do it, M... by intergalplan on Friday May 07, 2021 @02:05PM (#27078852)
You can't realistically keep apps from tracking users without permission unless you're rejecting apps that are discovered to be doing that. If they have network access, they can track. The behavior is too abstract to be handled with permissions alone.
Re:Facebook threatens to make iOS users pay. Please do it, M... by vetinari on Friday May 07, 2021 @02:10PM (#27078909)
The apps cannot track if they have no permission to access the respective APIs that give them data they are tracking. What are they going to send via the network? Only things that the users specifically give to the app.
Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Friday May 07, 2021 @02:21PM (#27079048)
Completely false.

Each app can track user behavior within the app itself, and can send this data to an aggregator who pays for it.

That way you are tracked across all participating apps.

This was common practice until Apple banned it.

Re:Facebook threatens to make iOS users pay. Please do it, M... by intergalplan on Friday May 07, 2021 @02:19PM (#27079023)
Look up what the Apple's tracking-prevention policy prevents for users that don't opt-in to tracking. You cannot ban generating device or user identifiers with OS permissions alone. Prevent using the built-in ones, sure, but fingerprinting or otherwise creating device or user IDs to share with 3rd parties and other apps? I'd love to see what a permissions model would look like that could do that automatically, at the OS level. I don't think such a thing exists. Not for any app with enough access to the system to do anything remotely useful in the first place.
Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Friday May 07, 2021 @03:20PM (#27079853)
Apple itself has the ability to reject apps with GateKeeper, without forcing everyone to use the Mac store.
Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Friday May 07, 2021 @07:59PM (#27082229)
> Apple itself has the ability to reject apps with GateKeeper, without forcing everyone to use the Mac store.

This is false.

Apple can’t legally use Gatekeeper to ’reject’ apps which violate App Store policies.

Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Friday May 07, 2021 @08:46PM (#27082539)
What's the 'legal' restriction? I don't see anything preventing them from rejecting anything they pleace.
Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Friday May 07, 2021 @09:00PM (#27082624)
Getting sued for stealing software from the users, and for interfering with the business of the suppliers, neither of whom have any agreement with Apple to let them ‘reject’ software arbitrarily.
Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Friday May 07, 2021 @09:30PM (#27082778)
Apple would not be 'stealing' software. Nobody promised that OSX could run any software the user wishes. Does Apple steal software and "interfere with the business of suppliers" every time they break backward compatibility?

They just need to time a new policy to a major release (say they make it apply only from that release on), and that would be no different then any other breaking change.

It wouldn't be popular on HN, but it's technically possible and legal. I'm sure that the Apple fans here will support it unreservedly.

Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Saturday May 08, 2021 @10:45AM (#27087582)
This is total bullshit.

> Nobody promised that OSX could run any software the user wishes.

In fact they have said this publicly in interviews.

> Does Apple steal software and "interfere with the business of suppliers" every time they break backward compatibility?

Apple doesn’t force you to install operating system upgrades, and many people don’t upgrade if it will break the software they work with.

Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Saturday May 08, 2021 @03:42PM (#27090070)
>>Nobody promised that OSX could run any software the user wishes.

>In fact they have said this publicly in interviews.

So I can sue them for not running Apple II programs? Cool! There were always programs that failed to run for some reason or another, and programs taken out of the Mac store, etc.

>Apple doesn’t force you to install operating system upgrades, and many people don’t upgrade if it will break the software they work with.

Sure, just apply a new rejection policy after an upgrade, and state it applies from that version on. That's what Apple would normally do anyway. So you're just admitting I'm right.

Re:Facebook threatens to make iOS users pay. Please do it, M... by zepto on Sunday May 09, 2021 @12:50AM (#27093316)
>>In fact they have said this publicly in interviews.

> So I can sue them for not running Apple II programs? Cool! There were always programs that failed to run for some reason or another, and programs taken out of the Mac store, etc.

No, you just don’t know much about Apple.

They haven’t promised to be backward compatible with everything, but they have promised not to stop you from running what you want to run.

I.e. they have promised not to do what you are saying they should do.

> Sure, just apply a new rejection policy after an upgrade, and state it applies from that version on. That's what Apple would normally do anyway.

Apple has never done this.

> So you're just admitting I'm right.

Obviously not. In fact you have proven yourself completely wrong, by acknowledging that they could not do it under their current license and with their current software and would need to get people to agree to a new contract.

Yes, Apple, (or anyone else) could offer a service for the Max that users sign up for to remotely disable software they disapprove of.

But that isn’t what you said.

Re:Facebook threatens to make iOS users pay. Please do it, M... by tomjen3 on Saturday May 08, 2021 @05:09PM (#27090717)
Lets suppose facebook found a way around the permissions. Would Apple ban them permanently?
Re:Facebook threatens to make iOS users pay. Please do it, M... by ppm56 on Friday May 07, 2021 @02:06PM (#27078866)
Until the competition publishes an app called iMessage with a surveillance backdoor (unless you’re proposing phones perform DPI?) and the helpful, inevitable “merge app stores together” app that would be necessary in that world subsequently prioritizes the bad one, or users assume the bad one is the right one, or, or, or. There’s a million threat vectors for their model that don’t dissolve down to a technical mechanism.

Much of the security gained from having a single App Store is not technical in nature but rather reflects (conscious) security policy. This should be apparent. Fundamentally server people chafe at this but look at how much security work (and failure) goes into routinely running hostile code not written by you, particularly on the hosting side. Cloud providers have armies dedicated to the exact same security problems that app stores must solve and it is very often not good enough. That’s fine when nerds are involved but more people than nerds use phones.

Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Friday May 07, 2021 @01:37PM (#27078556)
At which point almost nobody would download Facebook, just like almost nobody uses anything except the Play Store on Android. Also Apple could easily implement blocks on the OS level. The walled garden just lets Apple siphon 30% alongside anti-competitive practices.
Re:Facebook threatens to make iOS users pay. Please do it, M... by ericmay on Friday May 07, 2021 @01:39PM (#27078587)
Until other companies also move to a third party App Store. Why wouldn't they?

And I'm fine with Apple siphoning off 30%. Make it 40%! I'd rather developers stop developing for iOS than to see any large changes in the App Store model. There are enough apps as it is.

Re:Facebook threatens to make iOS users pay. Please do it, M... by idle_zealot on Friday May 07, 2021 @02:28PM (#27079144)
> Until other companies also move to a third party App Store. Why wouldn't they?

While I don’t know the exact reason, this isn’t what’s happened on Android, which has always allowed multiple app stores. Everything mainstream is on Google’s Play Store, and quality FOSS apps get published to F-Droid. My theory is that users shy away from sideloading alternative app stores, even if it’s not very difficult to do so.

Re:Facebook threatens to make iOS users pay. Please do it, M... by ericmay on Friday May 07, 2021 @03:55PM (#27080202)
I think it's because the Google Play Store allows the behavior that Apple is banning, so why bother?

I don't think users would shy away from mainstream apps like Facebook if they moved to another app store platform.

Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Friday May 07, 2021 @07:19PM (#27081919)
The Play Store takes 30%, in addition to their own set of restrictions. Surely 30% must be a large motivator for some mainstream apps moving to another store - it just turns out few users on Android will go for that.
Re:Facebook threatens to make iOS users pay. Please do it, M... by ericmay on Saturday May 08, 2021 @09:19AM (#27086873)
Why would Facebook care about the 30%? They care about being allowed to track users (as Google does).
Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Saturday May 08, 2021 @03:44PM (#27090086)
Because 30% is big money. FB might be able to compensate enough, but plenty of apps can't. There should have been enough pull to have a SpotifyStore and an UberStore, or even a SpotifyUberStore. Yet it doesn't happen at all.
Re:Facebook threatens to make iOS users pay. Please do it, M... by ericmay on Sunday May 09, 2021 @09:25AM (#27095735)
What is Google charging Facebook 30% for? In-app transactions?
Re:Facebook threatens to make iOS users pay. Please do it, M... by yyyk on Friday May 07, 2021 @03:13PM (#27079771)
Everyone will still have to use Apple's store, especially given Apple PR makes sure to promote a cult-like adherence to anything Apple. Even fortnite couldn't survive outside the Play Store. It doesn't happen on Android, why would it on iOS?

The only thing a 3rd party store support will do is to ensure Apple couldn't abuse FOSS apps too much in their review process.

Re:Facebook threatens to make iOS users pay. Please do it, M... by rz2k on Friday May 07, 2021 @02:25PM (#27079102)
I pay for YouTube, and can't believe people feel their time watching commercials is worth less than $10/month. I'd probably pay more to not be datamined by Google, too.

Really I'd even consider creating a FaceBbook account if I could pay them not to use dark patterns. However I imagine there is already a shadow user profile of me, and Facebook is making making more money through sites that leak visitors' information than I'd be willing to pay for Facebook.

Re:Facebook threatens to make iOS users pay. Please do it, M... by time0ut on Friday May 07, 2021 @02:31PM (#27079196)
I'd happily pay Google to not be data mined and for a guarantee that if one of their algorithms closes my account by mistake I can immediately get an actual person to review and fix it.
Re:Facebook threatens to make iOS users pay. Please do it, M... by pkulak on Friday May 07, 2021 @01:50PM (#27078710)
I've been an Android user since they mostly caught up to Apple in UI (Nexus line, I believe). However, my wife will be getting a new iPhone in two days (hush hush) and I think I'm gonna take her old iPhone for a spin.
Re:Facebook threatens to make iOS users pay. Please do it, M... by silicon2401 on Friday May 07, 2021 @01:42PM (#27078621)
Are jailbreaking and custom OSes still a thing on iPhone? I would happily switch to iPhone except the UI is so infuriatingly terrible that it's completely out of the question unless I can replace the UI.
Re:Facebook threatens to make iOS users pay. Please do it, M... by cronix on Friday May 07, 2021 @01:34PM (#27078533)
> Personally this is enough of a feature for me to switch to an iphone as my next phone.

You can accomplish even more by not installing their crap apps to begin with, and have always had that choice. You need google to save you from yourself and this is a compelling enough reason for you to switch phones, even though you're smart and actually know all of what's been going on and how to prevent it, but choose not to?

Re:Facebook threatens to make iOS users pay. Please do it, M... by ncallaway on Friday May 07, 2021 @01:53PM (#27078752)
> You can accomplish even more by not installing their crap apps to begin with, and have always had that choice.

You don't really, though. Because who knows which applications listed in the app store have the FB SDK embedded inside.

There's no practical way for me to inspect every app listing that I might consider installing, to see if it contains the FB SDK.

Re:Facebook threatens to make iOS users pay. Please do it, M... by nine_k on Sunday May 09, 2021 @01:23AM (#27093451)
Why, if you only install Android apps from F-droid, you'll see that they build from source and mark all "anti-features"; the presence of the FB SDK won't pass without a large warning sign.

OTOH it's sort of hard to live on FOSS Android software alone.

Re:Facebook threatens to make iOS users pay. Please do it, M... by coldpie on Friday May 07, 2021 @01:39PM (#27078590)
I already don't use Facebook, but I agree with the parent that Apple's real action towards privacy and against ad-based business models have convinced me to switch from Android to iPhone. Contrast these privacy moves with Google's FLOC. I'd rather support Apple.
Re:Facebook threatens to make iOS users pay. Please do it, M... by bozzcl on Friday May 07, 2021 @01:51PM (#27078722)
I made that move earlier this year. TBH, it's not like I trust Apple more than Google or Facebook... but at least for now my interests align better with their business model.

That being said, I've been tempted to get a Motorola Razr flip phone just for the sake of nostalgia, though I would have to root it and remove everything related to Google to feel comfortable with it.

Re:Facebook threatens to make iOS users pay. Please do it, M... by wyre on Friday May 07, 2021 @02:17PM (#27078996)
What don’t you trust about Apple that equates them to Google or Facebook? I trust them more than Google and FB, but that is certainly a very low bar.

I trust that Apple isn’t profiting off my data. It isn’t even close to their business model so it allows them to give their users privacy G and F can’t.

Re:Facebook threatens to make iOS users pay. Please do it, M... by bozzcl on Friday May 07, 2021 @04:16PM (#27080388)
I have a general distrust of device manufacturers nowadays. Seeing how far some other devices go (phones and smart TVs especially), I think it's a healthy attitude to have.

To give you an example, I recently implemented an allowlist on my firewall so only approved devices can access my WAN. I immediately started seeing frequent dropped packets from my wireless access point (Netgear Nighthawk AX200) and switch (Ubiquiti UniFi 8-port PoE) to Netgear and AWS IPs respectively. While some of that is probably them checking for updates, the volume didn't really seem warranted.

Going back to Apple though... sure, that's the exact reason why I switched. They already charge a premium, so they have less of an incentive to pad their quarterly earnings selling data. But they're still a company, still responding to shareholders, and they already collect certain amount of analytics. There's not that much of a jump from there to selling it, so being careful and mistrusting is probably a good thing IMO.

Re:Facebook threatens to make iOS users pay. Please do it, M... by Applejinx on Friday May 07, 2021 @05:47PM (#27081224)
Because it's such a low bar, it's not at all hard to believe. They really don't have to try hard to be better than that, and their self-interest is real obvious.
Re:Facebook threatens to make iOS users pay. Please do it, M... by pm90 on Friday May 07, 2021 @02:08PM (#27078895)
Maybe I'm not that smart : ).

I'm very familiar with how advertising currently works, but the field is also one that seems to evolve quickly (no doubt why: lots of money to be made).

Am I smarter than all the engineers and startups and existing firms whose revenues depend on tracking? Most likely not.

The other more mundane reason is just I'm lazy and tired. I just want a phone that works without wondering about patching the OS or whatever. Maybe you enjoy doing that, I don't.

Re:Facebook threatens to make iOS users pay. Please do it, M... by Justsignedup on Friday May 07, 2021 @02:27PM (#27079136)
I mean sure, if I want to cut communication with half my friends.

We don't live in an ideal bubble where I have full control over the tools I use. Its the same argument people make for video game moderation "if you don't like it, turn off chat" but then you're self-isolating.

Point is, this is a social problem.

Re:Facebook threatens to make iOS users pay. Please do it, M... by lostlogin on Friday May 07, 2021 @02:57PM (#27079537)
I think that’s a view from inside the bubble. It’s a sort of addiction. Switching it off is not going to have the ostracising effect one might fear.
Re:Facebook threatens to make iOS users pay. Please do it, M... by fortzi on Friday May 07, 2021 @01:42PM (#27078622)
But then you have to work at it, looking behind your shoulder that you’re not accidentally allowing something you don’t want to. I’d much rather pay for a system that will do as much of it for me.
Re:Facebook threatens to make iOS users pay. Please do it, M... by vetinari on Friday May 07, 2021 @02:05PM (#27078854)
You don't have to. I don't have Facebook or Messenger app installed and do not intend to. They are not going to sneak in, unless I specifically click on the Install button in the play store.

No need to pay someone to hold my hand in not clicking that button.

Re:Facebook threatens to make iOS users pay. Please do it, M... by BobbyJo on Friday May 07, 2021 @02:06PM (#27078856)
Same. Android since day 1, but my next phone will be an iphone. If it makes the reptilians angry, I'm all for it.
Re:Facebook threatens to make iOS users pay. Please do it, M... by tomjen3 on Saturday May 08, 2021 @05:07PM (#27090700)
I have been researching making the same transition (I also own an M1 now so they will work nicely together), but I am going to wait until they release the new phones in September.

I just wish I didn't have to choose between control and privacy.

Heck maybe I should just give up on the entire concept of phones.

Re:Facebook threatens to make iOS users pay. Please do it, M... by dreamcompiler on Friday May 07, 2021 @01:40PM (#27078608)
Or you could delete the FB app and access FB via the phone's browser, which prevents some of FB's nonsense.
Re:Facebook threatens to make iOS users pay. Please do it, M... by throwaway744678 on Friday May 07, 2021 @02:35PM (#27079242)
Or even, don't access Facebook at all? I know, I know, just kidding.
Re:Facebook threatens to make iOS users pay. Please do it, M... by lamontcg on Friday May 07, 2021 @01:23PM (#27078407)
firefox + facebook container
Re:Facebook threatens to make iOS users pay. Please do it, M... by websites3434 on Friday May 07, 2021 @02:01PM (#27078817)
The fact you even have to go to such lengths, and that a mainstream browser even developed such a feature is such a red flag. It's like taking Tums after ever meal. There's something wrong there, and I hope users are taking a hard look at those hoops they jump through and determining whether it's really worth it or not.
Re:Facebook threatens to make iOS users pay. Please do it, M... by lamontcg on Friday May 07, 2021 @04:30PM (#27080516)
I'd love to never touch facebook again, but my 80 year old mother uses it and won't give it up because its how she stays in touch with all her friends, and I'm kind of stuck with using it to communicate with her.

I also suspect that through browser fingerprinting that facebook can track everyone across the web anyway, particularly people who run a lot of customization on their desktop (O/S, graphics card, fonts, config settings, etc) that shows up in the fingerprint. If you're visiting sites which cause you to make requests to facebook servers you're leaking information to them, even if you've deleted your facebook account (and they can probably still track who you are).

Re:Facebook threatens to make iOS users pay. Please do it, M... by websites3434 on Friday May 07, 2021 @05:57PM (#27081317)
>If you're visiting sites which cause you to make requests to facebook servers you're leaking information to them, even if you've deleted your facebook account (and they can probably still track who you are).

This is an important point that raises the question of threat model.

For me, the threat is not "Facebook can track me," in the same way that my threat model doesn't include state-level actors. Because, let's be real, Facebook is as good as a state-level actor.

The threat is in showing me ads or content that modify my behavior. For this reason, I:

* Block facebook/insta at the DNS level * Don't have a Facebook account * Block all ads * Block all comment sections, like buttons, etc

I know this isn't something everyone can do. I know that there are tons of people out there who find value in Facebook. I just hope they are taking steps to at least block ads and are aware of when the platform is manipulating their emotions through targeted content, and have the sense to walk away from it from time to time. Perhaps that's asking too much, but I'm not going to stop making noise about it, not going to stop telling people they need to watch what they post / look at, because I think the platform is really damaging to people's attention and mental health.

For your grandmother -- I doubt it's making her buy stuff (fixed income) and I doubt it's making her turn to rage-tweeting about politics, so it's probably OK. And you're probably OK, too, being someone in tech who knows how this shit impacts people. But everyone else? I just worry, y'know?

Re:Facebook threatens to make iOS users pay. Please do it, M... by lamontcg on Saturday May 08, 2021 @03:49PM (#27090120)
> For your grandmother

mother. I'm old.