← Back to context

Comment by BenFranklin100

9 hours ago

I hate this. If I wanted a race-to-the-bottom malware ecosystem, I’d buy Android.

This helps the tens-of-thousands fart app developers and ultimately hurts quality developers making privacy sensitive apps for well-heeled customers who gladly sign up for fat subscriptions if the value is there.

The people who want to prostrate themselves for tech giant "security" paternalism can still use the first-party app store. The people who don't want to give up freedom for security should have the choice not to do so.

It also helps the developers of apps that Apple can't or won't approve. Apps like ICEBlock could still work just fine using alternative app stores that have backbone.

Actual security / privacy person here. The iOS ecosystem is much much much worse than people currently think of it as. This is primarily due to adware SDKs and in-app browsers that Apple has done absolutely nothing to address.

I see someone really gulped down that Apple kool-aid.

Your life is absolutely untouched by having other store options. And privacy is maintained by the granularity of the permissions, the manual review process is generally a joke and it changes like the weather.

  • If your social network is only available on a store not respecting your privacy and it's normalized people install stuff from there it's a loss for you since you don't have the option for the app that's compliant with Apple's privacy rules. Either you give in to more privacy violations or you give up being able to speak to part of your social network easily.

    • A lot of crying to say "there will be another option beyond the first party store". If you don't want those apps, don't get them. Imposing your choices on everyone else is not the solution.

Don't worry, Google is making the opposite move to lock down Android, whereby now app developers have to get notarized and anyone who distributes apps Google doesn't like gets fucked.

Personally, every time I hear Apple fans talk about Android users "trying to turn their iPhone into Android because they bought the wrong device", I groan. Because over the last ten years, while Apple has more or less hasn't budged on their shitty security policy[0], Google has been stumbling head over heels trying to turn every Android into a shittier iPhone.

As for the "race to the bottom malware ecosystem", you don't need to sideload at all to get pwned on Android. That's enabled by Google themselves, because Google Play - what is supposed to be the vetted and secure place to obtain software - is absolutely chock full of scamware. If the app store is the "default", or only option, its business model doesn't actually punish the store for failing its users' trust.

In fact, while Google is demonstrably worse at every aspect running an app store, Apple's own store isn't much better. Sure, Apple can stringently review and deny app submissions from a new developer, but large established megacorporations get all sorts of special treatment on Apple devices. Think about how they made an example out of Tumblr, compared to how they manage Reddit, Twitter, or any Facebook-owned[1] app. Or how Apple blatantly violates their own ATT guidelines by not letting us turn off their own first-party tracking[2]. Or worse, how Roblox's core business model violates basically all the App Store rules and nobody at Apple seems to care, even though that app is basically a child predator's best friend. The iOS App Store is also a race-to-the-bottom malware ecosystem.

[0] To paraphrase, "Users can't be trusted not to fall for scams, and also they will rape developers, so we should have total control over their phones".

For the record, "rape developers" means "modify software in a way those developers don't like", which is "rape" in the same sense that your VCR is a home-invading rapist.

[1] It is always ethical to deadname corporations.

[2] In fact, this is so blatantly anti-competitive, the EU is mulling over - I shit ye not - forcing Apple to get rid of opt-in consent to level the playing field. Which itself sounds like a GDPR violation.