Skype Vanishes from App Stores in China, Including Apple’s

But Apple does, because it decided at the start of the platform that being able to take a 30% cut and defend it's own weak services applications from competition was worth more than the inevitable human rights problems a closed app platform presents.

I didn't understand it to be an explainer of China's actions, but of Apple's.

I believe Erlang creator Joe Armstrong has proposed some sort of split security. Something along the lines of securing the most important data from everyone & allowing government access to limited data that could help them catch bad guys. He wasn't very convincing in the podcast I listened to but maybe in written form he could provide a better argument.

... yes ? that would require putting human rights above profits, though.

Yes! And go even further: actively assist in aiding dissent and revolution in nations whose disrespect for human rights is so flagrant as to threaten their business model.

I don't understand why the state is held in such regard as to casually gloss over the possibility that private entities, especially those as massive as Apple, might help to smash it.

Apple is an incredibly powerful entity in the world today. There is no reason for them to sit on the sidelines rather than to aid in bringing China down. It's inevitable; the only question is whether it takes 60 years and happens on the backs of the poor and nameless or whether giants like Apple flex their muscle to help.

This has everything to do with centralization precisely because decentralization makes it easier to break the law. I thought it went without saying when discussing bypassing censorship in China, but to be clear I am actively advocating for the ability for end users to more easily defy the law in the setting of software performing as expected that they choose to utilize on their own devices.

>(Every (even decentralised) shops need to comply with local laws.*

1: "need" and 2: LOCAL laws. Which in the case of shops based outside of a jurisdiction means only their own jurisdiction, not anyone else's. Apple is a multinational, so it cannot avoid this. But other shops absolutely could, just as they do in the PC market right now.

And again, this applies to every polity, not just China. I (and probably most of Americans on HN) am absolutely a computer law breaker. I have ripped my own DVDs and Blu-rays, which has put me in direct violation of the DMCA. I have utilized open source software like x264 (or, back in the day, gif encoders) without negotiating or paying a license fee, which puts me in violation of software patents.

In the real world, entities like RIAA and the MPAA have had to play whack-a-mole and could do nothing about places based in jurisdictions where evil laws like patenting of ideas/math are not in place, and thus there was freedom to go around them and change the course of public expectations beyond those with central power, which in turn affects the law too (which is an organic entity). If we instead imagine an alternate world where in the 90s Microsoft and Apple and so forth had iOS level hardware full stack control and central stores, would we ever have had anything like DeCSS? Hell, would open source platforms have been possible at all? Law and morality are not the same thing, not even in the most egalitarian and democratic countries. There needs to be some give at the edges for experimentation and evolution over time.

In a global market and considering a universal hardware platform, cooperation from any specific polity is entirely unnecessary. It is sufficient merely to convince one single polity that cannot be abandoned. America or the EU would do it. Both are markets that Apple absolutely cannot give up, and of course the former also has direct legal jurisdiction over the majority of Apple.

You also seem to be extremely confused about what I actually suggested should be legislated:

>I'm arguing with the underlying problem. I'm suggesting that passing laws against app stores is not a practical solution.

I never suggested that "App Stores should be banned", that's ridiculous. What I said is that Apple (or any other entity) should be required to offer (for free or at a reasonable fee [1]) owners a cert/key they can use to sign arbitrary software to run on their device indefinitely. That's it, though it might make sense to require that developers be offered that as well. That alone could be sufficient to serve as a foundation for various non-Apple implementations of side loading, up to and including full 3rd party App Stores. The point isn't that Apple wouldn't still have their own App Store, nor even that it wouldn't still be by far the preeminent choice. It's merely that there'd be a core level steam release valve available.

So in that scenario the actions of the Chinese (or any other) government would revert to the same as any standard computer: within their own borders they could pursue all legal and technical avenues their government wished, but people could try to go around it. A bypass of the great firewall (or merely a tourist visit outside of the country) would be sufficient to gain a key which could then be used on an iDevice within China (or anywhere else). Apple would simply not be involved in that, instead it'd be between a government and its people again.

The same would apply even beyond government, for example Apple doesn't allow certain content that is perfectly legal but not family-friendly enough on the App Store anywhere. A legal requirement that owners may sign software to run on their own devices would create an alternative.

----

1: which can be a thing in law, no "of course you can do it on your $500 device for $1 million" stuff.

Yes, some additional risk comes of certain avenues of malware [1] comes with decentralization. However I really want to emphasize that the risk in an optional-non-central-source scenario is not at all the same as what exists on the PC, and in turn any risk must be weighed against the direct harm that centralized censorship is already doing. First, in the scenario I'm describing everything is still signed, potentially even with an Apple-based PKI type cert. Allowing owners to have their individual cert signing for their devices isn't the same thing as giving them root or jailbreaking, while certain restrictions of Apple's are non-technical (like private API usage) a lot of jailing can be enforced by the OS. With trusted authorization and data input paths going through an HSM in iOS, an owner key does not mean any software can run willy-nilly, and the scope for malware is limited outside of security vulnerabilities that may exist anyway [2]. There is still a trust infrastructure available, and in turn the ability for alternate App Stores to have reputations of their own (and for owners to get extra warnings, do revocations, etc). Apple could still themselves issue blacklists against malware (with user control). Etc etc. Ubiquitous hardware backed signing infrastructure required for running software throughout the device offers a lot of anti-malware options regardless of whether Apple alone owns the device keys.

Users would also simply face a much higher barrier of entry to running malware. If it costs money, any money, to get an owner cert and requires any hoops then social engineering becomes significantly harder. Apple does in fact cover most of the needs in their App Store, so going outside of it would still be something unusual. With the right UX and possible dual requirement for developer signing as well, users might simply themselves (or with a technical friend) side load one single app like Skype and otherwise not bother. Apple has a number of levers to better push non-technical users in that direction too.

FWIW you didn't mention it but I will touch on piracy since that's a material concern for Apple and devs too: without getting into the weeds on effectiveness of DRM and specifics of implementation, I don't see why a device that allows running non-App Store software couldn't still effectively deny running something that's available directly in the local regional App Store itself (options for official/unofficial non-App Store offerings would be possible too, that'd be a business decision for Apple).

In short I don't discount that, amongst the entirety of Apple's user base, there might well be some users who'd experience some level of harm from a decentralized option, no matter how it's implemented. But at the same time there are definitely a lot of owners who are experiencing harm from present situation right now. Theoretical maybe harm shouldn't entirely distract from existing proven harm. I think the tradeoff of Apple giving up some control (and in turn responsibility) there would be worth it for all involved (except oppressive governments).

----

1: In a discussion of government actors it's worth considering whether in a centralized scenario could Apple be ever be pressured/legally ordered to deploy malware directly, but that doesn't diminish the primary threat of malware being from private/foreign sources.

2: If anything I'd expect vulnerabilities appearing in general malware would accelerate their patching vs the present 0-day market where they're sold for a lot of money for use mainly in APTs.

I mean I'm used to the United States where almost anything the government does the government has an answer for it (albeit probably not good answers). I guess in large part the free press sort of forces this.

So are you saying the government doesn't issue an official stance and that they just do it?

Clearly Chinese culture doesn't always amount to rolling over for the sake of social harmony, just see: Boxer Rebellion, Tiananmen Square, Communist Revolution, Xinhai Revolution, etc.

We have no way of knowing how supportive the Chinese truly are of their government if that support is given under the threat of imprisonment or loss of economic opportunities (up to and including those of family members. Under an oppressive dictatorship that persecutes freedom of speech by force, "social harmony" is really just trying to survive. In that sense, I'm sure North Korean citizens value social harmony too

I have to imagine they say something like "we are doing this to protect" etc. etc. but maybe not.

Verification - Civic/KYC solutions?

Prevent cracked apps - some game theory/staking mechanism that makes you lose if you don't play the official version

https://www.lifewire.com/skype-changes-from-p2p-3426522

This is a site "feature": the page cycles through font-sizes 17px->20px->26px on each double-click or tap.

Outside of China you can just choose US as your region and it's fine.

https://newzoo.com/insights/rankings/top-10-android-app-stor...

In this regard they actually have a sweet deal