Personally I’m ok with the bank being on the hook and their app checking there isn’t malware loaded on the OS. I have my raspberry pi and steam deck for full modding without intermingling it with extremely sensitive computing.
define "malware".
Users would also lose them far more than they lose their phones.
In both cases the authorisation challenge/response involves part of the destination account number, so if the details are tampered with by malware the code won't work.
Remote attestation doesn't check that there isn't malware; it checks that the OS is approved by one of a short list of corporations. Passing that check is correlated with a reduced risk of certain types of malware being present, but is not quite the same as checking for malware.
/s
For example, an application needs "access to your disk storage", because it needs e.g. to save photos. Okay, let's give it access to its own directory. Or maybe to a subdirectory of "my pictures". But it doesn't need the access to the entire disk, right? Yet in Android, it is all or nothing.
Perhaps with better system, we wouldn't have to ban installing game mods, only to make sure that those game mods do not have unreasonable access rights. Or maybe the banking operation could state "I can only be installed when no other app has an access to my private data" or something like that.
Preserving such mindshare into the future might enable us to show people why they should care about free software and perhaps finally obviate how much malfeasance the perpetrators of closed platforms can do contrasted to the remaining open platforms on pcs (assuming people don't just completely abandon pcs...). This may also help push and convince law makers into legislating in favor of free software and open platforms.
Thus FOSS has plenty of time (decades to centuries) to learn from for-profit tech's mistakes
People don't even do that. They don't even search for software on f-droid first and try the UI. Nope they go to play store and search software which is going to advocate for closed software because ads/review buying...
You really have to expect something from the general populus as well imo. Maybe they don't know about f-droid but people say to me its not about knowledge but rather caring, they don't care and I don't know wtf to say to that.
It's a very weird chicken and egg problem.
https://nlnet.nl/mobifree/eligibility/
>‘decentralized app stores’, a technology that uses the F-Droid app store architecture, for organizations or other entities that wish to distribute their apps to a select user population (e.g. employees), plus an app distribution system that makes it simple and cost-effective for developers to distribute their applications to multiple app stores.
For mixed approaches, I like to think about why Google et al haven't beaten Apple at the appstore game (outside China)
You mention chicken and egg which suggests that there's a 2-sided-market type of problem to try to solve here even if one isn't well-versed in marketing
Basically that people expect a lot from open source yet they want it right now but nobody mentions anything about donating to them or they will donate to it once the software gets a lot of features but the software will only get it if you donate to them in the first place imo otherwise the whole situation would feel entitled.
There is no reason to expect good UI/UX from open source when at scale, the society doesn't fund open source with donations at all. They are severely underfunded but I don't know what people want from them. Nobody cares about it. Oof.
This is a chicken and egg problem that open source can get really good if people donate to the creators but they will only donate (I doubt that actually as well now) once it gets good but ... it will only get good once they donate.
Open source is stuck in this chicken and egg problem. I was thinking about how the creators of deltarune/ undertale if they were open source, I just checked and undertale has made 114 million $ in sales and its price is 10$ which might be worth it...
10$ isn't that bad and people still pirate it, I think this model can be decent for games which is why people don't open source games. Imagine the amount of money that could've lost if lets say undertale was open source. I am pretty damn sure that nobody would've donated 114 million $ to them if it was open source.
Just some thoughts. I have mixed opinion now. Its a chicken and egg problem and actively hurts the devs financially in the process as well and people don't want anything to do with open source aside from us people who already know about it. Like wtf. We are taking a cut for a ideology and uh I am just a bit speechless. Its messed up & my question is: can we change it? I genuinely didn't want to be pessimistic but I don't think that there is much of a way, is there? I want to find some hope to cling upon but I genuinely can't find any hope. Everyone I talk to is so down right pessimist or nihilist or doesn't care about open source for a fix that I feel like I am in the wrong for looking for ways to change and now I genuinely doubt if change is even possible.
They should get more wellknown
Judging by the lack of upvotes and nondisclosure of how much they get, my guess is that 99% of people have for some reason conflicted feelings about funding opensource even from taxes
Now there are 2 ideas that I have: One, to raise more awareness about open source and how it has some gems. The best low hanging fruits of privacy for the world might be f-droid, signal (doesn't require any specific hardware as long as they have android) and grapheneos(depends if they have a pixel)
But that being said, I thought that if I share about open source and how it can be good but it requires your funding to fix the chicken and egg problem. People would feel convinced to donate.
I might say them to donate to nlnet. But I don't think many people would.
I don't think open source needs an evanglist or somebody telling somebody else to do something. I am deeply pessimistic about the state of open source in the sense that it's out of my control and my trust of human society is eroding day by day.
Literally nobody I talk to makes me feel like something can be done about this and I doubt it so much now. I was so much optimistic about its future but I am genuinely pessimistic now and the only reason I try to be hopeful is that I don't want hopelessness. I don't want to sit down and watch but fucking hell, the world sure damn well wants me to.
Real revolutions today have to be quiet. Besides NLnet, which I personally find trustworthy, and to which anybody can try to apply for funding, there's also Linux and FreeBSD. Those are real techno revolutions, but I'm optimistic that they can be taken to the next level. (2% support)
Be the change you want to see in the world, like Gandhi says. It's simple, though not easy. Join NLnet, or contribute to F-droid, or work on reverse engineering advanced proprietary tech. Find and learn and think about how revolutionary tech orgs are run. Most important thing to learn: how they can survive on support from only 1% of humanity. Thinking like that, it's actually easier now than any point in history.
(In another sense 1% is already a sweet spot, see
https://news.ycombinator.com/item?id=45572427
World domination is a bug not a feature. The Linux kernel is the revolution. Desktop Linux is not)
I'm not saying that Ubuntu/Gnome was everything Linux had to offer (I myself was on Arch and i3wm at the time), but that period was certainly when the largest percentage of people around me were enthusiastically adopting the Linux desktop.
For everything else continue to use and improve the open offerings.
In the meantime, keep fighting and supporting organizations to get laws pushed to ensure open devices can access essential services. (Administrations change, whats dire now may be hope tomorrow).
I've come to realize that a lot of closed digital services are just fluff and not needed. So I try to accept that I dont need them. Its a journey.