News for hackers. Stuff that matters.
Re:Spotify CEO renews attack on Apple after Musk's salvo by marricks on Wednesday November 30, 2022 @07:05PM (#33810048)
The way I see it the users have two crappy options based on business model:

1) Apple's freedom from inspection: they control your device and their ecosystem because they make money off the ecosystem. The take a cut of the phone/computer/watch you buy then anything you buy in their ecosystem because the ecosystem is their production. Your data is (mostly) safe from advertisers because that's not their business.

2) Google's device freedom: you can do whatever you want with your device because your are the product. Sure you can load a complete separate system of mail and chat clients and not sign into google, but really, will you?

Of course there's option 3, linux. Neither the ecosystem or you is the product, but where's the money in that. No one is going to spend billions of dollars to get you to buy Linux.

Whether Apple or Google (or MS or w/e) is the arch villain is really just a matter of perspective. Is two or three options a great place for consumers? No, of course not it all sucks, I think a system built around who-gets-the-most-money-wins is the real problem.

Re:Spotify CEO renews attack on Apple after Musk's salvo by sureglymop on Wednesday November 30, 2022 @07:27PM (#33810367)
And with Apple you are not the product? You're being tracked and shown ads on Apple devices too, it's just that you have even less control and Apple has a "worked" on their image in that regard.
Re:Spotify CEO renews attack on Apple after Musk's salvo by voisin on Wednesday November 30, 2022 @07:40PM (#33810521)
Are you honestly suggesting that Google and Apple are the same in this regards?
Re:Spotify CEO renews attack on Apple after Musk's salvo by woodruffw on Wednesday November 30, 2022 @07:50PM (#33810640)
Apart from App Store recommendations, where are you seeing Apple-originated ads on an iPhone?
Re:Spotify CEO renews attack on Apple after Musk's salvo by smoldesu on Wednesday November 30, 2022 @08:18PM (#33810897)
News, Stocks, Apple Music are all big sources of ad junk. That's without mentioning all of the iCloud/service nags like AppleTV.
Re:Spotify CEO renews attack on Apple after Musk's salvo by zaroth on Wednesday November 30, 2022 @08:25PM (#33810961)
So just long tap and uninstall them? It’s not analogous to the Windows Start Menu showing ads you can’t turn off.

What are the nags? I also don’t use Apple TV and don’t recall being nagged to use it.

The only thing that annoys me is the prompt to “finish setting up” my phone when I don’t want to turn on Siri. I get the prompt a few times and then it gives up trying to get me to turn on Siri and stays happily disabled.

Re:Spotify CEO renews attack on Apple after Musk's salvo by smoldesu on Wednesday November 30, 2022 @08:35PM (#33811067)
I mean, I can also click the little 'x' button on YouTube banner ads, but that doesn't make them any less annoying. Apple's promotion of their own services in MacOS makes it impossible to live in for me in the same way I can't browse the web without uBlock Origin. Blocking out nagware helps me focus.
Re:Spotify CEO renews attack on Apple after Musk's salvo by zaroth on Wednesday November 30, 2022 @08:57PM (#33811265)
I would totally agree but isn’t the uninstall a one time thing and then you never deal with again?

If Apple News keeps advertising to you after you uninstall News then Apple has overstepped and should be held to account. I don’t hold it against them showing Apple News content on the Home Screen / Notification Tray iff Apple News is actually installed.

Re:Spotify CEO renews attack on Apple after Musk's salvo by ChuckNorris89 on Thursday December 01, 2022 @05:02AM (#33814360)
>So just long tap and uninstall them? It’s not analogous to the Windows Start Menu showing ads you can’t turn off.

On the contrary, it's exactly analogous to Windows start menu ads as they are just icons that you can tap/right-click and uninstall, exactly like on Apple.

But I do love the HN double standards here:

Apple ads: "Pfff, just tap and uninstall, nothing newsworthy here."

Windows ads that you can also right-click and uninstall: "OMG, the audacity from Microsoft, let's up-vote every single FUD blog post about this while frothing at the mouth."

Re:Spotify CEO renews attack on Apple after Musk's salvo by zaroth on Thursday December 01, 2022 @08:30AM (#33815958)
If that’s the case for Windows ads (I don’t actually know) then I totally agree the response is highly overblown there too!
Re:Spotify CEO renews attack on Apple after Musk's salvo by woodruffw on Wednesday November 30, 2022 @08:26PM (#33810980)
Oh, I don't use those things. But that's good to know.
Re:Spotify CEO renews attack on Apple after Musk's salvo by smoldesu on Wednesday November 30, 2022 @08:28PM (#33811002)
Me neither, but every time I put on my Sony XM4s Apple Music gives me a nice modal asking me to pay for their service. It's really lovely UX.
Re:Spotify CEO renews attack on Apple after Musk's salvo by woodruffw on Wednesday November 30, 2022 @08:33PM (#33811047)
Well, that's a little bit different from an ad, but I take your point.

That doesn't happen to me when I use the cheap earbud things that Apple sells (I use a Subsonic client app for music); do you have any idea what triggers it?

Re:Spotify CEO renews attack on Apple after Musk's salvo by smoldesu on Wednesday November 30, 2022 @08:37PM (#33811086)
Probably not being logged into iCloud.
Re:Spotify CEO renews attack on Apple after Musk's salvo by ace2358 on Wednesday November 30, 2022 @11:47PM (#33812461)
Curious which subsonic client? I’ve been using play:sun for a few years and sometimes AVSub. These clients are okay, but I do get some weird issues with them sometimes.

Having said that, I love subserver more than any other media server options.

Re:Spotify CEO renews attack on Apple after Musk's salvo by woodruffw on Thursday December 01, 2022 @06:48AM (#33815061)
I currently use iSub, but I’m in the same position: occasional weird issues, some that I think are compounded by my use patterns (I tend to listen on the subway, so the frequent network disconnects seem to break the cache.)
Re:Spotify CEO renews attack on Apple after Musk's salvo by spacemadness on Wednesday November 30, 2022 @11:50PM (#33812478)
What ad junk? Can you give an example? Do you mean notifications?
Re:Spotify CEO renews attack on Apple after Musk's salvo by snapplebobapple on Wednesday November 30, 2022 @08:47PM (#33811183)
I wouod sqy you werent the product originally but apple figured out they were leaving money on the table and quickly converted to adding that business model on top of overcharging for devices over the last decade. Nowbitvis atleast as bad as android if nit worse
Re:Spotify CEO renews attack on Apple after Musk's salvo by ProAm on Wednesday November 30, 2022 @07:26PM (#33810347)
> Your data is (mostly) safe from advertisers because that's not their business.

I think with Apple this ship is slowly sailing, and the tracking will soon be just as bad as Google.

Re:Spotify CEO renews attack on Apple after Musk's salvo by s3p on Wednesday November 30, 2022 @07:31PM (#33810424)
How so? I think their strides in fields like differential privacy show how willing they are to protect their end users.
Re:Spotify CEO renews attack on Apple after Musk's salvo by ProAm on Wednesday November 30, 2022 @07:47PM (#33810609)
I personally think their migration to subscription based revenue and advertising says differently (just personal opinion). Were now the product with Apple too, not the customer. We used to pay more to not deal with that.
Re:Spotify CEO renews attack on Apple after Musk's salvo by api on Wednesday November 30, 2022 @08:37PM (#33811089)
It seems that advertisers can outbid users to the point that nobody is willing to pay enough to be the customer.

The amount of money in advertising is staggering. Can it actually work that well? Or is this a category of spending that just tends to be greenlit in big companies?

Re:Spotify CEO renews attack on Apple after Musk's salvo by jonathankoren on Wednesday November 30, 2022 @08:43PM (#33811149)
There’s a huge difference, including from a privacy perspective, between subscriptions and internet targeted advertising.

How are you the product, when you’re giving money? That’s like saying, when you buy a ticket to Black Panther, you are the product Hollywood is selling, not the movie.

Re:Spotify CEO renews attack on Apple after Musk's salvo by satvikpendem on Wednesday November 30, 2022 @08:47PM (#33811181)
> How are you the product, when you’re giving money?

Why can't you be both? After all, an advertiser's best target is someone who already has a propensity to spend. Companies can and do sell you stuff then also target you for ads.

Re:Spotify CEO renews attack on Apple after Musk's salvo by jonathankoren on Thursday December 01, 2022 @12:11PM (#33819227)
I shouldn’t have to say this, but those are two different things, and just because you on tape them together doesn’t mean they’re identical.
Re:Spotify CEO renews attack on Apple after Musk's salvo by satvikpendem on Thursday December 01, 2022 @12:15PM (#33819297)
I don't understand what you're saying. Why can't a company sell you something then also advertise to you?
Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Wednesday November 30, 2022 @07:10PM (#33810110)
Android is Linux.
Re:Spotify CEO renews attack on Apple after Musk's salvo by adamwk on Wednesday November 30, 2022 @07:31PM (#33810418)
Android is linux as much as iOS is BSD
Re:Spotify CEO renews attack on Apple after Musk's salvo by surajrmal on Wednesday November 30, 2022 @09:49PM (#33811710)
What you are referring to isn't Linux. It's Linux + a free desktop compliant userspace. Linux is just a kernel which is in fact shared between both. I'm not sure why the community hasn't come up with a better name to help disambiguate the two.
Re:Spotify CEO renews attack on Apple after Musk's salvo by bigfudge on Thursday December 01, 2022 @02:42AM (#33813461)
People talk about the Linux kernel vs linux (the complete system).

I’m not sure why nerds are still litigating this sort of thing years after the who gnu linux thing.

Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Thursday December 01, 2022 @08:24AM (#33815874)
> linux (the complete system)

Like Android?

>I’m not sure why nerds are still litigating this sort of thing years after the who gnu linux thing.

Because most Linux users are no longer interacting with GNU/Linux.

Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Wednesday November 30, 2022 @09:49PM (#33811714)
How do you mean? The "Android kernel" is not meaningfully different from the Linux kernel.

4.4BSD however was released in 1993, so iOS would've had decades to diverge from it.

Re:Spotify CEO renews attack on Apple after Musk's salvo by xnickb on Thursday December 01, 2022 @04:29AM (#33814137)
But we'll not know unless they open source it. chuckle
Re:Spotify CEO renews attack on Apple after Musk's salvo by mort96 on Thursday December 01, 2022 @06:55AM (#33815110)
Darwin is open source. Here's the repo for their kernel: https://github.com/apple-oss-distributions/xnu/tree/main. The userspace stuff can be found here: https://github.com/apple-oss-distributions/distribution-macO.... Some stuff that's missing from those links, such as launchd, can be found here: https://github.com/apple-opensource?tab=repositories
Re:Spotify CEO renews attack on Apple after Musk's salvo by ogsalmanxx on Wednesday November 30, 2022 @07:25PM (#33810335)
Android is Linux w/ Malware … omegalol
Re:Spotify CEO renews attack on Apple after Musk's salvo by yarg on Wednesday November 30, 2022 @07:49PM (#33810632)
With a license that prohibits OEMs from distributing forked versions.
Re:Spotify CEO renews attack on Apple after Musk's salvo by grepLeigh on Wednesday November 30, 2022 @07:57PM (#33810698)
Sure, in the way orcs were elves once.
Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Wednesday November 30, 2022 @10:35PM (#33812023)
That's a ridiculous comparison, the Android kernel patchset is tiny https://android.googlesource.com/kernel/common-patches/

It consists of "massive" changes such as:

> Enable writable clock debugfs files which are required for debugging and testing

and

> Allow drivers to register hooks when IPIs are sent and handled. The statistics of these IPIs are helpful in predicting CPU idle states

Re:Spotify CEO renews attack on Apple after Musk's salvo by anonymous_sorry on Thursday December 01, 2022 @03:30AM (#33813755)
This disagreement is purely about semantics.

In case its not clear, Linux the operating system typically means the Linux kernel plus a set of unix-inspired GPL-licenced userspace tools. Some (still) call this GNU/Linux, although that is a bit of a mouthful.

Android has a completely different userspace to "Linux". The kernel is not the issue.

Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Thursday December 01, 2022 @07:55AM (#33815630)
Well that's silly, the userspace you are talking about is strictly useless on phones. Every single attempt at building a reasonable mobile userspace for GNU/Linux has been a complete failure. What would that even look like? Almost all graphical GNU/Linux tools depend on X11, which is completely unsuited for phones.

But if you want, you can totally install all the GNU userspace tools on Android. Nothing is stopping you from doing that.

Re:Spotify CEO renews attack on Apple after Musk's salvo by anonymous_sorry on Thursday December 01, 2022 @08:25AM (#33815886)
Nevertheless, there is something people call "Linux" that is a full OS (rather than just a kernel). Android differs substantially from that.

Just semantics.

Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Thursday December 01, 2022 @08:32AM (#33815976)
Yes, but that is fundamentally incompatible with phones! It's an oxymoron, like a Windows 2000 phone.

Marricks's comment simply does not make any sense if we're to use that definition of "Linux".

Re:Spotify CEO renews attack on Apple after Musk's salvo by anonymous_sorry on Thursday December 01, 2022 @04:29PM (#33823069)
Marrick's comment makes even less sense using a definition of Linux that includes Android, since they lists three different options: iOS, Android and Linux.

"No one is going to spend billions of dollars to get you to buy Linux.", Marrick said. Perhaps they were including the resources required to make something that is recognisably Linux that is compatible with phones, and polished enough to be appealing to the average consumer?

Re:Spotify CEO renews attack on Apple after Musk's salvo by rosnd on Friday December 02, 2022 @07:30AM (#33829670)
>Marrick's comment makes even less sense using a definition of Linux that includes Android, since they lists three different options: iOS, Android and Linux.

They could just have not known this, it's not obvious if you've never tried to open a terminal on an Android phone.

But how is Android not recognisably Linux? You can natively run all the Linux stuff you'd like on Android.

Re:Spotify CEO renews attack on Apple after Musk's salvo by fsflover on Thursday December 01, 2022 @09:27AM (#33816629)
This is false. Sent from my Pinephone with Mobian.
Re:Spotify CEO renews attack on Apple after Musk's salvo by bakugo on Wednesday November 30, 2022 @07:31PM (#33810415)
Great to see Apple users are still deluding themselves into thinking they're not the product despite constant reports of Apple spying on them just like everyone else
Re:Spotify CEO renews attack on Apple after Musk's salvo by marricks on Wednesday November 30, 2022 @11:15PM (#33812255)
The extent really matters. I don't care if Apple tracks App Store clicks or what I (don't) read on Apple News. I would care, a lot, if they tracked my browser history, chats, and email.

Could Apple conceivably be spying on my every move? Well... they really don't need to to make App Store recommendations so I doubt it.

When, and if, ever launches its own web advertising client which they bill as "privacy focused" I'll start being skeptical but until then there's way better things to throw tin foil at.

Re:Spotify CEO renews attack on Apple after Musk's salvo by saurik on Wednesday November 30, 2022 @07:48PM (#33810619)
The big competitor to Apple is Samsung, and Samsung devices tend to be just as locked down as Apple devices (though the prevalence of jailbreaks has been higher, and of course you can sideload apps). Those two companies make up over 75% of smartphones in the US, and neither of their next competitors down (OnePlus and Lenovo) are Google.

People talk about Android like it is the "do anything you want device marketed at end users", but it is the "do anything you want operating system marketed at device manufacturers". One of the many things you can do with such a device is lock it down, and that's what companies who make devices that run Android, like quite-notably Samsung, have largely decided to do.

Google's first-party devices are often quite open, and that's cool and all, but they do not have much marketshare because, in the end, they kind of suck with the various limited hardware tradeoffs they make. Users, generally, are unable to provide a very strong purchasing signal preference on "is an open device" because they are too busy optimizing for having good cameras or screens or whatever it is that they consider the primary point of owning the phone in the first place is.

At the end of the day, Android then become more of a coalition of brands herded by Google--but led by Samsung, whom at least used to make the vast majority of the actual profit, disproportionate even to their marketshare--in attempts to reign them in on what crazy changes they make, but those limitations do not enforce the device to be open... far from it, really! And so we have seen Google also the target of lawsuits for anti-competitive behavior with their store (including by Epic, whose argument almost made more sense against Google than Apple).

Re:Spotify CEO renews attack on Apple after Musk's salvo by metiscus on Wednesday November 30, 2022 @07:52PM (#33810659)
I have owned many Samsung android devices over the years and have always been able to install fdroid and other alternate app stores as well as "side load" applications from apk files. Is there a new thing where Samsung have removed this feature in recent (last two years or so) devices?
Re:Spotify CEO renews attack on Apple after Musk's salvo by rjzzleep on Wednesday November 30, 2022 @08:05PM (#33810782)
He might be talking about the fact that the moment you unlock the phone the e-fuse is tripped and a bunch of features get downgraded permanently on their devices. I think they're generally good devices, but they have a nightmare support system and this e-fuse thing is just a major turn off to a lot of people.
Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Wednesday November 30, 2022 @08:03PM (#33810766)
The bootloader in on Samsung Android devices is extremely locked down to prevent rooting. Sideloading is a basic android feature.

Ability to root and sideloading are two different but similar issues on the topic of freedom.

Re:Spotify CEO renews attack on Apple after Musk's salvo by smoldesu on Wednesday November 30, 2022 @08:16PM (#33810880)
That's sorta the status-quo. But I'd fully support any legislation that mandates open bootloaders on all devices, definitely would help save the iPad from obscurity.
Re:Spotify CEO renews attack on Apple after Musk's salvo by FalconSensei on Sunday December 04, 2022 @12:11AM (#33850807)
> help save the iPad from obscurity.

wait what? It's basically the most used/desired tablet, afaik, at least in Canada/US

Re:Spotify CEO renews attack on Apple after Musk's salvo by GuB-42 on Wednesday November 30, 2022 @09:24PM (#33811490)
My experience is that Samsung devices are quite easy to root. There is that e-fuse thing that disable some features permanently, but to my knowledge, these are mostly intended for corporate devices and you can ignore them for personal use.
Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Thursday December 01, 2022 @12:05AM (#33812560)
With Galaxy phones they are extremely hostile to unsigned flashes to the device. You essentially need to exploit a zero day in the stock rom to get temporary root and then while you have temporary root you flash a new recovery. And then you gotta make sure it doesn't flash the stock recovery back in the next boot by making sure your next reboot goes into the recovery. And then you can flash your custom ROM. I skipped some steps too.
Re:Spotify CEO renews attack on Apple after Musk's salvo by visarga on Thursday December 01, 2022 @02:32AM (#33813411)
Having to jump through so many hoops is why I never bothered to root my phones. It sounds like 90% chance to brick it.
Re:Spotify CEO renews attack on Apple after Musk's salvo by TeMPOraL on Thursday December 01, 2022 @03:14AM (#33813658)
It doesn't matter anyway. Thanks to Google pushing remote attestation, all you can expect from a custom ROM is the actually important apps (like bank) no longer working.
Re:Spotify CEO renews attack on Apple after Musk's salvo by GuB-42 on Thursday December 01, 2022 @04:46AM (#33814244)
I think you mean hardware attestation. And yes, it is the biggest problem I have. I can do without KNOX, but it is becoming harder to do without these locked down apps (ex: bank), and workarounds are harder to get by, no matter the manufacturer.

And of course forget about anything that isn't iOS or Android. I don't expect banks to support alternative OSes anytime soon.

I probably won't root my next phone, not worth the hassle for a daily driver.

What could be nice is if phones could run VMs, so you have your stock ROM with all your "important" apps, and a VM where you can run anything you want: hacked Android, Linux, maybe even a desktop OS. Modern phone hardware should be more than powerful enough to do that.

Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Thursday December 01, 2022 @01:35PM (#33820514)
The only two apps that are affected by Knox is Samsung Pay and Samsung Health. And that is only an issue if you decide to flash the stock rom back on the device. If you use custom roms they typically have a workaround to get both of those apps working with the Knox fuse tripped.

The easiest daily driver to root is Sony and Google phones. You simply unlock the bootloader and flash. There's no nonsense to deal with.

Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Thursday December 01, 2022 @10:37AM (#33817666)
It's not possible to hard brick. Only soft brick. You can always recover back to stock if you mess up using the official flasher with the stock rom.
Re:Spotify CEO renews attack on Apple after Musk's salvo by GuB-42 on Thursday December 01, 2022 @04:29AM (#33814139)
After looking a bit into it, it looks like most US/Canada models have a locked bootloader. Other models, including mine (Europe) don't and it only needs booting into download mode using a key combination and flashing a custom recovery using Odin.
Re:Spotify CEO renews attack on Apple after Musk's salvo by Benjamin_Dobell on Wednesday November 30, 2022 @09:32PM (#33811585)
Typically, no, Samsung are one of the few manufacturers who consistently don't lock bootloaders. I've been flashing Samsung Android phones for over 10 years: https://github.com/Benjamin-Dobell/Heimdall

That said, they have locked bootloaders on some devices. Predominantly in the US market, I believe at the request of carriers. However, it's traditionally been the minority of devices.

Re:Spotify CEO renews attack on Apple after Musk's salvo by KennyBlanken on Wednesday November 30, 2022 @10:24PM (#33811949)
What? Samsung is the most hostile of manufacturers in this regard. Unlocking the bootloader, installing another bootloader, or running a different kernel burns fuses permanently in the device and renders it unable to use their version of hardware-secured storage, aka "Knox."

Kiss some multimedia apps, payment apps, and enterprise security features goodbye...along with a bunch of random features like private mode in their browser.

Re:Spotify CEO renews attack on Apple after Musk's salvo by Benjamin_Dobell on Wednesday November 30, 2022 @10:34PM (#33812017)
Flashing an unsigned (or potentially differently signed) bootloader burns fuses. Sure. However, other manufacturers don't just burn fuses, you specifically need to apply for permission to flash your bootloader e.g. https://www.oneplus.com/support/answer/detail/op588

Samsung at least don't require personal details for you to take control of your device. Sure, you lose access to some multimedia, but don't blame Samsung for that, blame Widevine DRM certification. Knox goes out the window, but the entire point of Knox is to (try) guarantee a device isn't tampered with. At least you can remove it!

Re:Spotify CEO renews attack on Apple after Musk's salvo by williamscales on Thursday December 01, 2022 @12:03AM (#33812556)
What does “tampered with” mean? Particularly in the context of a device you own?

I would consider a device tampered with if someone besides me (the owner) did something with it, without my authorization. But anything short of that is surely just me using the device. I mean, I have physical possession after all.

Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Thursday December 01, 2022 @12:09AM (#33812588)
Signing images and requiring that the bootloader can't flash anything else is just vendor lock in / ceding your power as an end user. It doesn't make you more secure in any way since a bad actor will figure out a way to bypass making writes to the system partition.
Re:Spotify CEO renews attack on Apple after Musk's salvo by moonchrome on Thursday December 01, 2022 @04:26AM (#33814120)
Umm I remember ordering Chinese phones way back when (think android 4) with unlocked boot loaders - both had some random junk installed via custom ROM and you couldn't uninstall it.
Re:Spotify CEO renews attack on Apple after Musk's salvo by tremon on Thursday December 01, 2022 @04:51AM (#33814280)
It's a good thing they had unlocked boot loaders then, or you would not have had any option to remove the malware.
Re:Spotify CEO renews attack on Apple after Musk's salvo by cute_boi on Thursday December 01, 2022 @01:13AM (#33812952)
well, Miami and one plus requires you to provide phone number etc., so that seller and other people don't sell you malicious second hand phone or tampered phone. However, there are no fuses, so your phone will still be on warranty if you unroot it.
Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Thursday December 01, 2022 @10:39AM (#33817691)
I'll stick to Sony where I don't have to tell them anything. OnePlus can fuck off.
Re:Spotify CEO renews attack on Apple after Musk's salvo by achow on Wednesday November 30, 2022 @10:55PM (#33812126)
Why would Samsung allow its proprietary 'Knox' to work with other bootloaded OS? They have every right to not support any other OS other than their own.
Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Wednesday November 30, 2022 @11:55PM (#33812506)
Knox is actually irrelevant as most custom roms just fake whatever value is needed to get certain apps going and it's really just Samsung pay I believe.
Re:Spotify CEO renews attack on Apple after Musk's salvo by TeMPOraL on Thursday December 01, 2022 @03:11AM (#33813637)
They aren't "not supporting any other OS", they're causing the hardware to damage itself to prevent that software from working.

It's like your laptop's motherboard detected you installed another OS in place of the OEM-provided Windows installation, and overvoltaged your NVidia GPU to burn it out. "We have every right to not support high-performance graphics on any other OS other than our own - if you want to install your own OS, you can still use the integrated Intel GPU".

Re:Spotify CEO renews attack on Apple after Musk's salvo by Goz3rr on Thursday December 01, 2022 @04:08AM (#33814017)
Damaging the hardware is a bit of an overstatement. What people are calling fuses isn't really a fuse in the traditional sense. An eFuse usually is just write once memory. All the limiting features are implemented in software which reads out the state of this memory.
Re:Spotify CEO renews attack on Apple after Musk's salvo by TeMPOraL on Thursday December 01, 2022 @05:50AM (#33814664)
Correct me if I'm wrong, but once the eFuse is triggered (which, if it's write-only memory, still involves a physical change that could be interpreted as damage), it's effectively unfixable without replacing the whole motherboard, reflashing it with your original serial number, IMEI, etc. At least that's what I recall from reading about it - Samsung service can "reset" the Knox lock-out, but they do it by replacing the whole board.

In other words: there's no way for me to just take the phone to my workshop / local hackerspace, and fix it with a soldering iron. Even if I could source the right parts, it's going to be a PITA to make them work. I didn't investigate it further, but I assume that these days, cryptography is used for critical parts to attest each other as genuine (similar to what new iPhones do, which is why you can't just replace the "home" button if it breaks).

Additionally, since I haven't heard of people doing software workarounds, whatever in Knox is reading the state of the eFuse, cannot be trivially patched. I recall reading somewhere that triggering the eFuse somehow overwrites Knox itself - if that's correct, then they may not even be anything left to enable afterwards.

----

I'm going to concede here that my example was somewhat hyperbolic - burning a single eFuse isn't the same as overvolting the whole GPU. But only somewhat - the reasoning/intent behind the two cases is the same. Additionally, cryptography blurs the line between what's hardware damage and what's a software limitation. Take, for example, secure erasure of data: you can smash a hard drive with a sledgehammer and then microwave the remains to slag, but you can get the same result by keeping the data encrypted, and then... losing the keys.

Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Thursday December 01, 2022 @10:36AM (#33817645)
This entire comment is irrelevant. The Knox fuse only matters if you're flashing the stock rom back. Only the stock rom actually cares about Knox. The custom roms all ignore the value from Knox or simply spoof it. In other words it's just punishing you for daring to flash a custom ROM.
Re:Spotify CEO renews attack on Apple after Musk's salvo by fluoridation on Thursday December 01, 2022 @08:57AM (#33816233)
If someone goes to the trouble of implementing an efuse, they will also implement the check in the hardware so it can't be bypassed. An easy example is optical drives with fixed numbers of region switches that refuse at the hardware level to read discs from the wrong region and also refuse at the hardware level to switch regions once all the fuses have been blown.
Re:Spotify CEO renews attack on Apple after Musk's salvo by hparadiz on Wednesday November 30, 2022 @11:57PM (#33812518)
Well my experiences with the galaxy S10+ was horrible trying to get an unsigned rom to stick. I personally prefer Sony devices now.
Re:Spotify CEO renews attack on Apple after Musk's salvo by kyriakos on Thursday December 01, 2022 @12:25AM (#33812676)
But as an app developer Samsung doesn't claim a cut out of my sales. That's where you start to see the difference.
Re:Spotify CEO renews attack on Apple after Musk's salvo by snarkyturtle on Wednesday November 30, 2022 @09:02PM (#33811298)
yeah but you're also knowledgeable about all that shit and 99% of people with Android devices won't use alternate app stores. they'll download apps from the google play store, use google services, stream on google chromecast, watch things on youtube tv. google and/or samsung will get all that data and that's how they make money.
Re:Spotify CEO renews attack on Apple after Musk's salvo by ApolloFortyNine on Thursday December 01, 2022 @12:34AM (#33812745)
Just desparate apple apologists equating installing your own OS to installing an app.

Would I like to have an unlocked bootloader? Sure. Is having a locked bootloader equivalent to only being allowed to install Apple approved apps? Of course not.

Re:Spotify CEO renews attack on Apple after Musk's salvo by Mikeb85 on Thursday December 01, 2022 @02:07AM (#33813247)
> The big competitor to Apple is Samsung, and Samsung devices tend to be just as locked down as Apple devices

Please, you can sideload apps by selecting a single option... Not to mention you have all the options to make alternative apps default like any Google device.

That alone is significantly more open than Apple devices...

Re:Spotify CEO renews attack on Apple after Musk's salvo by rhaway84773 on Wednesday November 30, 2022 @08:12PM (#33810853)
Apple already implements a solution on the Mac.

The Mac defaults to signed apps. And you need to change a setting to allow unsigned apps.

iOS could easily default to what we have today, but allow the installation of non App Store app after users change a setting and confirm after reading a scary earning pop up, that tells users they may be exposing themselves to data theft, hacking, viruses and money theft.

Re:Spotify CEO renews attack on Apple after Musk's salvo by biztos on Wednesday November 30, 2022 @08:54PM (#33811238)
I really want this to happen, and I hope Apple is forced to make it happen — a fairly likely scenario in the EU I think — but if they do allow side-loading I fear they will disable all sorts of Apple services when you flip that switch.

No more Apple Pay, for starters. Maybe no iMessage. Things where they can argue they have to turn them off to protect the user, and/or themselves, from rogue apps.

And then you could have a kind of freedom, but it wouldn’t be a very useful one. You can already load whatever you want on your own phone if you have the source and do the build yourself. I can pretty easily imagine Apple making it so you can side load closed apps but almost nobody ever does.

Re:Spotify CEO renews attack on Apple after Musk's salvo by fingerlocks on Wednesday November 30, 2022 @10:26PM (#33811964)
Agreed. The real reason is the inevitable avalanche of support requests that hit when some popular side loaded app introduces a 0-day. No one at the Genius Bar is going to touch your toxic device. That means no Apple Care or iCloud backups either.

Support is expensive. Apple spends a lot of money to provide what is generally very excellent support. It’s a huge component of the overall brand for many users that stay in their ecosystem.

Re:Spotify CEO renews attack on Apple after Musk's salvo by behnamoh on Wednesday November 30, 2022 @11:45PM (#33812450)
Apple wouldn't want that in the first place because a customer who's angry at a 0-day (even if it wasn't caused by Apple) still hurts Apple's brand image.

Apple has gone a long way by sticking to the safest paths, meaning they do things that cause the most customer satisfaction, and don't do anything that can go wrong. That's why Apple abandoned the iCar project because while many would like the concept, a car experience is not something that Apple can have control over; if users get into car accidents, for example, that hurts Apple's brand no matter the cause of the incident. In comparison, making phones, Macs, tablets, etc. is fairly safe as long as Apple retains its full control over the experience (which must be perfect for most consumers).

Because of this, I don't really see Apple allowing app sideloading, even though I personally like it. I think the more pressing issue right now is the 30% cut on AppStore.

Re:Spotify CEO renews attack on Apple after Musk's salvo by whywhywhywhy on Thursday December 01, 2022 @07:00AM (#33815147)
Hear these excuses time and time again that it’s impossible for them to do this when they ship an entire product line and have for decades that does exactly what people claim is impossible for them to support.
Re:Spotify CEO renews attack on Apple after Musk's salvo by SxC97 on Wednesday November 30, 2022 @10:23PM (#33811942)
Yes, if you disable SIP on ARM Macs, apple already disables Apple Pay and running iOS apps as I found out the hard way.
Re:Spotify CEO renews attack on Apple after Musk's salvo by satvikpendem on Wednesday November 30, 2022 @08:19PM (#33810914)
> Your data is (mostly) safe from advertisers because that's not their business.

I beg to differ.

Apple is becoming an ad company despite privacy claims

https://proton.me/blog/apple-ad-company

https://news.ycombinator.com/item?id=33736259

Re:Spotify CEO renews attack on Apple after Musk's salvo by marricks on Wednesday November 30, 2022 @08:32PM (#33811043)
Both your links go to the same Proton article and the heart of it seems to be this:

> Apple monitors your every move in the App Store and its News and Stocks apps and then uses that data to sell ads targeting you in those same apps. To meet its growth forecasts, experts expect Apple to start selling ads in its Maps, Podcast, and Books apps, meaning it could replicate this model across more of its services. Much more of your activity could be monitored in the future.

Tracking every click in the App Store/News/Stocks is not great but it is in NO WAY similar to tracking every website I view and reading every email I send.

Re:Spotify CEO renews attack on Apple after Musk's salvo by satvikpendem on Wednesday November 30, 2022 @08:35PM (#33811070)
Why do you assume Apple doesn't also track every website and email you read (especially if you use the default Apple-made apps)? After all, they make the OS, they can track whatever they want.
Re:Spotify CEO renews attack on Apple after Musk's salvo by majormajor on Wednesday November 30, 2022 @08:42PM (#33811136)
Nobody's reported seeing that sort of network traffic sent off of iOS devices. It's trivially easy to spot it, and it's well documented, going to Google and others across the web, though.
Re:Spotify CEO renews attack on Apple after Musk's salvo by mortehu on Wednesday November 30, 2022 @09:16PM (#33811425)
On my iPhone, Safari browser history synchronization to iCloud was enabled by default.
Re:Spotify CEO renews attack on Apple after Musk's salvo by musicale on Wednesday November 30, 2022 @10:32PM (#33812003)
According to Apple, Safari history and bookmarks are end-to-end encrypted and Apple cannot read them:

https://support.apple.com/en-us/HT202303

Is there any evidence that Apple is lying, and is actually decrypting them and using them for advertising purposes, rather than for the "coherence" feature?

I don't actually want browsing sessions to be unified across devices, so I do wish that it was turned off by default. (Though being able to close tabs remotely is a sort of interesting capability.) However, it doesn't seem to be actual spyware used for advertising or tracking purposes.

Re:Spotify CEO renews attack on Apple after Musk's salvo by pyuser583 on Thursday December 01, 2022 @12:11AM (#33812596)
That’s not what your link says. The link says browsing history is end-to-end encrypted, but Bookmarks are not.
Re:Spotify CEO renews attack on Apple after Musk's salvo by acomjean on Wednesday November 30, 2022 @11:55PM (#33812504)
Safari on iOS is auto-completing stuff as you type. The option to search with google comes up if you get far enough.

And it’s not going to google first. If you type an address the “link” at the top is to Apple Maps. They seem to do a similar thing with place names. I’m not sure but one can be fairly certain they’re using the phones location to help….

Re:Spotify CEO renews attack on Apple after Musk's salvo by heavyset_go on Thursday December 01, 2022 @04:09AM (#33814019)
You will have no idea what is being carried via encrypted channels to Apple's opaque backend servers.
Re:Spotify CEO renews attack on Apple after Musk's salvo by manigandham on Thursday December 01, 2022 @06:16AM (#33814878)
> " It's trivially easy to spot"

Is it? How exactly are encrypted payloads to a secure, opaque and generic endpoint easy to distinguish?

Re:Spotify CEO renews attack on Apple after Musk's salvo by majormajor on Thursday December 01, 2022 @12:54PM (#33819878)
It's trivially easy to spot it going to Google/FB/whoever if you visit a page with a GA or FB or whatever pixel. That's part of the second sentence, not the first.

For spotting it going to Apple you'd have to do more fancy correlation over time and such, but you can find people out there who are researching this stuff... so that's who I'm waiting for to hear more from.

Re:Spotify CEO renews attack on Apple after Musk's salvo by chrononaut on Wednesday November 30, 2022 @11:05PM (#33812189)
Burden of proof fallacy
Re:Spotify CEO renews attack on Apple after Musk's salvo by piyush_soni on Thursday December 01, 2022 @04:50AM (#33814272)
People keep saying Google reads your emails (even when Google explicitly says otherwise), but have no proof, and trust Apple's words as the gospel of truth - how strange. It's almost as if it's fashionable to criticize them.

This's on Gmail's homepage:

"We never use your Gmail content for any ads purposes. Gmail uses industry-leading encryption for all messages you receive and send. We never use your Gmail content to personalize ads."

Re:Spotify CEO renews attack on Apple after Musk's salvo by roody15 on Thursday December 01, 2022 @09:23AM (#33816565)
Interesting.. I just saw an add in my Apple Maps yesterday and I was really confused at first. Had no idea they are considering moving in this direction and must already be testing it.

On a different note I attended an apple event for IT Government and Education in Chicago. Eye opening.. Apple's "privacy" stance is all just a horse and pony show for marketing. Unbelievable how open they were about tracking everything at the event.

Re:Spotify CEO renews attack on Apple after Musk's salvo by davidlumley on Wednesday November 30, 2022 @09:11PM (#33811372)
My understanding around how this works (and I might be wrong!) is that Apple tracks a variety of usage on device and your device itself knows which ad to serve, versus say Google or Facebook collating your data on their own servers.

I'd not be surprised to learn there was some level of phoning home though.

Re:Spotify CEO renews attack on Apple after Musk's salvo by fshbbdssbbgdd on Wednesday November 30, 2022 @10:08PM (#33811826)
There’s a common misconception that ad tracking is all about targeting ads. That’s part of it, but the truth is that tracking conversions is a more important differentiator for advertising platforms. A conversion is where the user clicks on the ad and then makes a purchase. The top digital ad companies (Apple, Google, Meta, Amazon) all charge for conversions. There is no way to charge for conversions without sending data about the user’s behavior off the device (which ads they saw, and which purchases they made).
Re:Spotify CEO renews attack on Apple after Musk's salvo by 7e on Wednesday November 30, 2022 @10:48PM (#33812093)
That’s not true. They could use differentially private on-device joins using anonymously downloaded ad data. Or they could securely aggregate the results. Or both.
Re:Spotify CEO renews attack on Apple after Musk's salvo by fshbbdssbbgdd on Thursday December 01, 2022 @12:00AM (#33812535)
Can you elaborate? I see an ad in the News app, then click on it and make a purchase from Clash of Clans in the App Store. Apple needs to charge Clash of Clans for the conversion. How do they do it?

Apple knows that I bought the app (they charged me for it).

In order to charge Clash of Clans for the conversion, my phone needs to connect to Apple and send them a record of the ad click. What if clicking on that ad and buying the app are the only thing I ever did on the phone? There’s nothing to aggregate locally, and Apple knows they got the conversion data from me.

Perhaps the claim is that my phone is going to send all these records to Apple, and Apple is just going to do the right thing and run programs that do the business without letting any of their people look at anything they aren’t supposed to look at (they could internally accomplish this by differential privacy, rigorous internal controls, etc). That’s the same claim Google and everyone else is going to make.

Re:Spotify CEO renews attack on Apple after Musk's salvo by 7e on Saturday December 03, 2022 @02:24AM (#33841480)
Re:Spotify CEO renews attack on Apple after Musk's salvo by manigandham on Thursday December 01, 2022 @06:17AM (#33814893)
That's not at all how adtech works. You cannot download all activity between ad supply (website/app/etc) and advertisers and every vendor in the middle onto your device for some joins.
Re:Spotify CEO renews attack on Apple after Musk's salvo by 7e on Saturday December 03, 2022 @02:29AM (#33841513)
You misunderstand, completely. A device needn't download all activity, or indeed download anything additional at all. It knows which ads it clicked on and it knows the conversion signal for each ad the user saw. It can thus easily count the user's conversions on the device, then privately aggregate the result with its peers using secure multi-party computation (or a secure enclave).

Even the ads can be anonymously downloaded using a shuffler/mixer, such that nobody knows which ads out of the universe of ads the device chose to target the user with.

Re:Spotify CEO renews attack on Apple after Musk's salvo by bb88 on Wednesday November 30, 2022 @09:51PM (#33811731)
I have no idea if this is true, but let's say it is.

The ad still has to come from a server, unless the phone downloads all possible ads the person might be interested in (which I doubt).

The transfer would at a minimum include the IP address of the phone.

Re:Spotify CEO renews attack on Apple after Musk's salvo by 7e on Wednesday November 30, 2022 @10:50PM (#33812101)
Use a shuffler.
Re:Spotify CEO renews attack on Apple after Musk's salvo by heavyset_go on Thursday December 01, 2022 @04:13AM (#33814042)
This is just has all of the negative privacy implications FLoC does[1], which is also something pushed by Google that was heavily criticized. I guess now that Apple is doing it, it's okay.

[1] https://en.wikipedia.org/wiki/Federated_Learning_of_Cohorts

Re:Spotify CEO renews attack on Apple after Musk's salvo by davidlumley on Thursday December 01, 2022 @04:47PM (#33823337)
Similar! The biggest difference in my mind is that any website using FLoC would be able to know what cohort I belonged to.

FLoC is definitely more anonymous than "davidlumley visited nytimes.com twice on December 1st 2022". However, that particular usage information was previously only available to nytimes.com, any ad/data vendor using third party tracking cookies that were present on nytimes.com at the time of my visit, and finally any company that purchased data from the ad/data vendor.

My FLoC was theoretically available to any website and had much of the same intent data that intent ad/data vendors were/are selling.

If my understanding of Apple's ad platform is correct, advertisers don't know which cohort the user davidlumley belongs to, or that their ads are being served to me because that's all handled on device.

Re:Spotify CEO renews attack on Apple after Musk's salvo by tremon on Thursday December 01, 2022 @04:58AM (#33814327)
is that Apple tracks a variety of usage on device and your device itself knows which ad to serve

This is a distinction without a difference. Do you regularly share your phone with other people, to the extent that "device data" can not be correlated back to you?

Re:Spotify CEO renews attack on Apple after Musk's salvo by djbusby on Wednesday November 30, 2022 @09:15PM (#33811415)
RIM had a chance, I think. They had cool devices, could have forked Android and owned enterprise/privacy focused buyers. Maybe Nokia can come back.
Re:Spotify CEO renews attack on Apple after Musk's salvo by ThePowerOfFuet on Wednesday November 30, 2022 @11:33PM (#33812369)
> 2) Google's device freedom: you can do whatever you want with your device because your are the product. Sure you can load a complete separate system of mail and chat clients and not sign into google, but really, will you?

Typing this from a Pixel running GrapheneOS, and it's a great experience.

So, yeah, I did.