Hacker News new | ask | show | jobs
by stanmancan 3129 days ago
Clearly the ability to take a cut of all app sales was a huge part of that decision, but was far from the only one. Security and easy of use are also very important. My grandma can install apps on her tablet no problem. But telling her to go to {domain}.com => downloads => download the 64bit windows executable and then find the file and run it, is a totally different story. Not to mention how many people will just google the name of the app, click the first link, and look for any link that says download and click next, next, next until they've succesfully added a bunch of spyware and 7 more IE tool bars.
6 comments

Clearly Apple's decision is based on paternalism, which most people don't appreciate when it's combined with government power. Compare:

"Clearly the ability to eliminate opposing viewpoints was a huge part of the Chinese government's decision, but was far from the only one. Stability and economic prosperity are also very important. My grandma can obey simple laws. But telling her to go to research contradictory political perspectives and decide the correct course of action is a completely different story. Not to mention how many people will just vote for the candidate that pushes their emotional buttons, and read whatever crap on Facebook and click next, next, next until they've elected Donald Trump."

The core problem with trusted computing is that users are never allowed to install their own root certificate. My grandmother should be able to install a root that someone she trusts controls, which will include but not be limited to the OS vendor.
"What is a root certificate?" - All grandmothers everywhere
"Hey grandma, run this and click Ok. Nevermind, just let me see it for a minute." Don't be a ridiculous strawman, everyone has friends or family they trust that are better aligned to their cause than multinational hardware vendors.
How do you make sure that grandma only does this if you tell her but not if the app she wants to watch that movie in or that email with your brother's address in the from field tell her to?
Everyone? They all have people that they trust, and at least one of those people is tech-savvy enough to evaluate root certificates?
"Hey grandma, you won a new iPad! Just click here, then click ok in the box that pops up! Free iPad!"
How would that accomplish anything? Are you going to sign the latest Firefox for her yourself?
In the world of Linux distribution, they can have multiple independent repositories. When adding another one, you usually import their PGP key to establish trust. When you install Google Chrome on Linux, you will add another repository that will be responsible for further Google Chrome updates.

In the Android world, multiple app stores exist. There are stores by Amazon, Yandex, Baidu, etc.

If Apple wanted, similar mechanism could be made for iOS too.

> In the Android world, multiple app stores exist. There are stores by Amazon, Yandex, Baidu, etc.

Do you think non-technical users regard this as a positive or a negative?

Good thing then, than in other areas of life we don't limit ourselves to lowest common denominator.

Imagine, if economy or politics worked only according to the naive users.

But to answer your question: they would get used to it. Just like to multiple tv channels or multiple car brands.

I could not disagree more with this view on designing for usability, but to each their own.
Though politics does cater for the lowest common denominator...
It wouldn't matter as non-technical users would use the default store as today.
I'm sorry but this is hypocrisy at its worst.

You say that Apple is doing this for its own financial interest yet on the other hand Yandex, Baidu, Google, Facebook and all the other companies also have to obey local laws, and are just as bad if not worse since their system of persistent user tracking is far more insidious.

Don't like Apple? Don't buy their products. Your involvement with them ends there. Don't like Google? You can't avoid them no matter what OS you are using, no matter what browser you're using etc.

> I'm sorry but this is hypocrisy at its worst.

You must elaborate that more, because I can't see it.

> Yandex, Baidu, Google, Facebook and all the other companies also have to obey local laws,

Sure, but the option of third party app stores opens also option of sideloading. In the case of Apple, when Apple says no, you are without the app, period.

> and are just as bad if not worse since their system of persistent user tracking is far more insidious.

Not sure about their tracking, but they do not have an equivalent of Play Services on the devices. If you want to be really sure, use F-Droid or apps stores with the principles of F-Droid.

> Don't like Google? You can't avoid them no matter what OS you are using, no matter what browser you're using etc.

That's not true. When you use Google Search, Gmail or Youtube, it's you who entered the URL into the location bar. You can stop doing that exactly the same way, like you can not purchase Apple products.

>Sure, but the option of third party app stores opens also option of sideloading. In the case of Apple, when Apple says no, you are without the app, period.

This is a non-issue that people have brought up countless times. First of all, are we in agreement that app stores and other legal entities have to obey local laws? So your point is moot. Side loading is possible on iOS. You don’t even need to own a Mac to develop for iOS. [1,2,3,4] There is also the open web to fall back on.

And you are incorrect about user tracking. Just a day ago Google was caught tracking users even when location services are turned off. [5] And please educate yourself about modern ad tracking [6]

[1] https://www.outsystems.com

[2] https://www.xamarin.com

[3] https://cordova.apache.org

[4] https://www.xojo.com

[5] https://qz.com/1131515/google-collects-android-users-locatio...

[6] https://donttrack.us/

"My grandmother should be able to install a root"

She can, it just yields plants, not apps.

In all seriousness, this was an unintentionally hilarious comment. You can be against walled gardens, but one of best arguments for their existence is because grandmas in general can't be trusted to install root certs.

Google pretty much solved this issue with sideloaded apps.

Nobody is stopping you from downloading only from the store. But if you want, you can also download from outside of the store. As a bonus, Google even checks those apps for malware (but like any antivirus, it's mostly based on signatures + some relatively weak machine learning that won't stop original new malware until it gets reported by someone).

The Play Store may also be slightly less secure than the App Store, but that's mainly a factor of Google not doing any manual reviews. But this is a different issue. My point is that there's no reason why Apple couldn't allow sideloading, too.

Apple has allowed sideloading for a long time now. You just need to jump through more hoops. How do you think large MNCs like IBM deploy their apps?
Yes, like Gab that is banned from the app store.
Trading some freedom (to run whatever code/apps. you want) for the security afforded by a centrally run repository is definitely a reasonable one to make, but the same mechanisms can be co-opted and used in ways that aren't in the users' interests.

It's a difficult line to draw IMO - providing _any_ way to bypass it opens the non-technical user up to malicious software (to varying degrees), but if all platforms (or even just all the major ones) become so locked down, IMO that's a big loss in itself.

That's because Windows does not have any sandboxing, although that seems to be changing with Windows 10 version 1709.

iOS apps are still sandboxed just like apps from the App Store when you sideload them using Xcode. That's all you would need to install Skype, and sandboxing is what keeps iOS secure, not the App Store. The App Store review is mostly about weeding out obvious junk and enforcing Apple's business model.

You are explaining the reason why having an app store is a good thing for the user, not why having nothing else than an app store.