Hans-Christoph Steiner @eighthave@librem.one

@guardianproject #Apple is a huge company, amazing how they could let something like that slip. I wonder how #Android's implementation of this is faring?

#Microsoft #Apple #Google etc have massive piles of "cash on hand". They are supposed to be innovative companies which hire as much talent as they can, so something is clearly wrong with this picture. Lots of skilled people also have morals, and want to build things they believe are beneficial and #ethical. So many developers would rather work on things they believe in and are willing to get paid a fraction of what they could earn: so they reject working for #BigTech

https://www.investors.com/etfs-and-funds/sectors/sp500-companies-stockpile-1-trillion-cash-investors-want-it/

It makes me happy to read that #Amazon's #drone delivery program is barely functional. It would be such a nightmarish thing if it ever caught on. All that buzzing noise, drones falling out of the sky when they hit things like birds, ever more resources used for unnecessary delivery. Its like flying cars and space tourism; oligarchs like #Bezos keep investing in these ideas while ignoring the hard technical realities as well as the well being of most people on this planet

https://news.yahoo.com/look-sky-soup-155037137.html?guccounter=1

This #GDPR complaint against #YouTube for illegally gathering user data with explicit consent gives me a lot of optimism that it is possible to defeat the "free" #tracking business models and bring back real freedom in media distribution to the internet. Paying with your data and privacy gives the illusion of freedom when getting media on the internet. These regulations will pop that bubble if the #EU actually enforces them.
https://www.theregister.com/2023/10/26/privacy_advocate_challenges_youtube/

@Runyan50 @micahflee There is that video, but its pretty grainy and hard to confirm anything. It could just as easily be an incoming artillery shell that was fired to try to hit the rocket launchpad.

It looks like the future of mobile #malware is exploiting messenger apps. #NSOGroup #Pegasus has clearly demonstrated it is possible to silently exploit and own devices via messenger apps. Now #ransomware gangs have a proven pattern to follow with their millions for dev budgets. And it could spread from there. Could it be that this becomes a bigger threat than install by #sideload?

I wonder why they stopped publishing this report in 2018? Since then, they have implemented and rolled out a number of key #security features in #Android that make installing outside of #GooglePlay a lot safer. I think the changes to "Unknown Sources" improved both the user experience and the security of the platform. I would have thought they would want to advertise that.

#ArsTechnica just posted a pointer to a bit of related data:

"Google hasn't published detailed stats about the dangers of sideloading in a while, but in 2018, it used to publish yearly security reports with statistics on malware installation sources. Back then, Google found that 0.04 percent of all downloads from the Google Play Store were "PHAs" (potentially harmful apps), while sources "Outside of Google Play" had a 0.92 percent PHA install rate."

https://arstechnica.com/gadgets/2023/10/android-will-now-scan-sideloaded-apps-for-malware-at-install-time/

@Runyan50 @micahflee one thing that is well documented is that the IDF uses munitions that can detonate at specified elevations. For example, they use them to do their "warning knock" bombs. Low tech weapons rely on hitting the ground to explode. High tech weapons make that controllable to enable maximum damage. Detonating at 10m means blast/shrapnel will cover a much larger area. The nuke on #Nagasaki, was at 580m. You can also see this in anti-tank weapons, they explode 1-2m above the tank.

For example, the biggest #mobile #malware incident that I know about remains #XCodeGhost https://en.wikipedia.org/wiki/XcodeGhost, which got into over 4000 apps, which all passed #Apple's review and were shipped by the Apple App Store. All told, those apps were installed 128 million times. Another measure is #NSOGroup #Pegasus which seems to have maintained zero click access to #Android and #iOS for years. That is spread by exploiting messenger apps, not by #AppStore or "sideloading" 3/

Google and Apple provide data about the malware they catch in their app store review processes. Both of them talk about "sideloading" as a security risk. Notably, neither Apple nor Google provide data on how much malware comes from outside of their app stores. Nor do they provide data-based analysis of which is the bigger threat: malware that makes it into their app stores or from other channels. They have this data, they track installs and active apps plus there is #PlayProtect #XProtect etc 2/

In my work with #FDroid I've discussed our work with gov regulators for South Africa, UK, EU and Japan as well as competition litigators from multiple US States and the EU. From this, I'm starting to see a picture of #Apple's and #Google's semi-related strategies of making "sideloading" (installing apps outside of their #gatekeeper control) look bad as a way to keep their monopolies in the face of #DMA and other regulatory actions. I'm still looking for data about the actual real world risks 1/

@jakubmueller Society already has many ways for people to get advice on who to trust: government services, non-profits, certification agencies, trusted media, friends, religious organizations, reputation, family, and more.

A large part of how people came to trust Google or Apple is because of their own massive spending on marketing and PR to convince people to trust them. Being on the receiving end of that is a poor method for reliable verification of whether something is trustworthy.

When organizations that use #Debian maintain the packages they use in Debian, the whole ecosystem gains. The more organizations that do that, the more efficient the whole ecosystem becomes for all users. Here's a recent example from #FDroid:

https://f-droid.org/2023/10/10/f-droid-maintains-in-debian.html

I'm a Debian Developer, I'm happy to help get organizations working in this way. Reach out if you're interested!

@vitriolix https://meshed.cloud/@webmink/111221486835309132 just announced @meshedinsights.com

"#Apple may be exaggerating a bit here. It wants to provide a safe experience, but in 2022 the company still removed 186,195 apps that had been previously approved. So its review process has some gaps."

https://www.theregister.com/2023/10/09/apple_app_store/

I hope the #EU will keep the pressure on #DMA #gatekeepers like #Apple and give #FreeSoftware app stores the opportunity to compete with Apple by providing more trustworthy reviews that include reviewing the source code.