Hacker News Reader

Comment by malka | Hacker News Reader

... you trust Google ?

Everyone trusts Google, whether they like it or not. This is the definition of trust that security operations use: A trusts B if B is capable of doing something nasty to A.

Google has a heck-load of money. They could pay a disreputable aggregate company to deliver a load of tonne-bags of gravel to my front garden, blocking my car in, and generally destroying the landscaping. I trust them not to do this, and the reason this is true is because I haven't taken 100%-effective steps that would prevent them from doing so, and therefore they are capable of it. This example may seem a little ridiculous (there are no 100%-effective steps I could take, and I think they're trustworthy on this particular score), but it is a technically correct example of how everyone trusts Google.

In this case you also probably trust the legal system to let you sue Google when they do this.

That is a pedantic and useless definition of trust.

To be fair, that's trust in the security sense, fairy widely used in those circles.

This is a bad example.

Putin or Kim Jong Il or Brad Pitt could also pay to get gravel delivered to your address. You have not taken any specific 100% effective steps to prevent them, any more than you’ve done with Google, right?

Everyone running android play services on their phone has to trust Google, right?

Many might not have a choice. If you need a SmartPhone and can’t afford an iPhone, you’re out of options. Most of the apps people actually need has to be installed via the Play Store.

You basically get a (more) privacy focus OS from a luxury brand or you get your OS from an advertising company.

They can run an ungoogled ROM, like LineageOS.

I don't, but I have no other alternative that feels better to me.

1. Buy a standard android but spend ages trying to de-google it.

2. Buy an iphone, but then I just have to trust another trillion $ company, and pay much more too.

3. Live my life without a phone.

I choose 1 because that seems the least worse option right now.

For one, I don't. But since having a smartphone is mandatory, I have one.

To some extent, but this is beyond what is acceptable. Even if this is so support COVID notifications. Any install on an unmanaged device should be asking for permission to install something, unless you opt-in or something.

Reply on news.ycombinator.com