It's mind-boggling they are doing all these gymnastics instead of just allowing alternative app stores and browsers everywhere.
Because let's be honest, most of the population does not even understand the idea of "app store" beyond THE app store the same way they don't understand the idea of "search engine" beyond Google Search. If Chrome only allowed you to use Google Search as the search engine, most people wouldn't complain. This is the same. As long as they can download their [insert Big Tech Company here] walled garden app, most will not complain. But if their phone starts misbehaving because of a rogue app from a dodgy app store or phones suddenly get more expensive to compensate for higher costs incurred by Apple for their development and support of third party app stores and browsers most will complain.
UPDATE: getting downvoted for pointing out the reality. Most people are not hackers. They don't want customisation options. They are happy with a default store or browser as long as it is good enough. If you want options, Android is there
This is a false argument because even the first party offerings have security and privacy issues. Apple has redefined what "privacy" and "security" means to imply "only things we make" as a sort of selling point. Yes, they make OK things, but who is to say someone can't make something better? Cooler? Funkier?
Also, what happens when the entire planet is vulnerable to the same flaws? It's rhetorical - you get security companies offering services to unlock and decrypt devices for anyone willing to pay them. And what happens when Apple decides to say... remove XX category of apps by a government request? You end up with people owning very expensive slabs of glass and titanium because they weren't allowed to look for apps elsewhere. Apple's way is not the way.
No one is saying that Apple apps don't have issues. The point is that allowing more entities to make and run these apps on iOs will just make it worse. And having security issues in app store or in a browser is a far more problematic thing than a security issue in a random app. Especially if the app store or browser is run by someone that is not Apple.
There is no evidence beyond second hand anecdotes.
I don't know but there's something here beyond the ability to install software like you've always been able to do on Android
I think you should show more respect for your users. Walled garden should be an opt in/out. Not long ago most of the population didnt know how to use a PC beyond turning it on, and lots of people thought Windows 95/98/2000 as equivalent to their PC.
It would be wonderful if they did and they were more transparent and open to dialogue in a more democratic way. But it's not happening
Companies have social responsibility
It would be different if Apple had made some pledges or commitments towards this. But it hasn't. Its only commitment is to make money for the shareholders. Everything else is secondary
Oh but pasteurisation costs money.
So? Tech nerds seem to have this idea that tech businesses should be able to do whatever they want just because.
I commented this already, but I would expect iOS sandboxes apps in such a way that it doesn't have any impact on other parts of the phone even if the app is hacked for example.
Of course your local kiosk guy would have no issues.
One of the largest, most valuable companies on the planet which ships phones, computers, makes their own chips, operates their own cloud service, builds frontier tech devices, but their tech support can't handle some new problems? Does that really seem likely? Or a problem that they couldn't solve if they wanted to?
> but their tech support can't handle some new problems
Now you know WHY it's one of the largest. Tech support doesn't scale. Making millions of copies of the same device and making things once then distributing does scale and brings a lot of profits.
I have used everything else (Symbian, Windows 8 phone, Windows 10 Phone, various Androids including pure Google Pixels).
They have all been tragically subpar compared to my experience with iPhone and iOS.
Other people want the choice. And they're getting it. But that doesn't affect you at all.
There seems to be a concern that Apple will use these requirements to ban every single alternative including Blink and Gecko. I doubt that is the case since the purpose of these changes is to allow reliable, responsible players to run their engines on iOS without giving the keys to the kingdom to every app that requests it. Banning Google or Mozilla would not satisfy the EU requirements. Banning BlinkButItAlsoMinesCrypto is fine.
The only additional thing I'd want as a user is transparency. I want to know if an app with a WebView is using WebKit, Blink, Gecko or EngineNobodyHasEverHeardOf.
Facebook's apps happily do this with the built-in WKWebView and then injects its own malicious Javascript to ensure it spies on what's within the page. You do not need to run a separate browser engine to do this.
It's disappointing that the rhetoric about Apple's anti-competitive restrictions being for "security" still persists to this day especially on a technical forum.
Assume for a moment that Apple will allow alternative web engines as long as they follow certain user privacy and security guarantees. (Given that the company has announced this and it's legally mandated, I think this is a safe assumption.) In that case, are users better served with or without these requirements?
Because they strengthen monopolies, while providing little (if any) security benefits.
Furthermore, there's been plenty of prior examples of malicious apps passing app review, where an optimistic interpretation would be that app review is completely ineffective, and pessimistic would be that app review was more about the security of Apple's profit than their end-users'.
> In that case, are users better served with or without these requirements?
Promoting safe development practices is good, but in practice it will change little because they have no way of enforcing them (see aforementioned gaps in app review).
Anyone who’s ever supported normal people or even talked with their extended friends and family knows that this is not something you can assume for systems used by the general public. There’s a huge industry social engineering people into installing dodgy software to get deals, porn, games, address scary security threats, etc. and the billions of dollars they made annually means that when your grandfather is on the phone with the call center person walking him through turning off every security measure, he’s probably thinking that they’re more helpful than his actual bank.
If normal people ran Linux, they’d be just as prone to run “sudo add-apt-repository“ as they are clicking through the Windows prompts now.
I have the discipline and skill. I want to be able to run what I want. I don't need "help" from Apple. You will always have a choice of not installing an alternative app store, just like on Android.
> If normal people ran Linux, they’d be just as prone to run “sudo add-apt-repository“ as they are clicking through the Windows prompts now.
I installed GNU/Linux for my relatives, and they never did that in years.
This might even be true but that just means you aren’t the target market. Nobody is stopping you from running a full open source stack but I don’t think it should come as a surprise that 99% of the people using computers pick something easier and safer to use when it’s not your job or hobby. My Linux desktop experience goes back to 1994 and while it’s a lot better now I still have zero trouble understanding that trade off.
> I installed GNU/Linux for my relatives, and they never did that in years.
Again, think mainstream. Where that’s happened historically was most server-side stuff because Linux has much greater share there, but most of the business compromising users is focused on Windows, Android, iOS, and maybe macOS because that’s where almost all of the people they’ll make money from are. If desktop Linux became more popular, attackers would spend time on it and would have comparable success rates – likely even higher due to how far behind the Linux world is compared to macOS on sandboxing and code signing. Free software is a great thing but it doesn’t have magic pixie dust obviating the need to spend time on security like everyone else.
Where are the instructions how to do it on an iPhone? No, even on Android it's impossible due to closed drivers and specs, making a lot of e-waste and, conveniently for corporations, a lot of sales of new devices every time the support is ended.
It seems to me that the duopoly removed any freedom to run what I want from me.
They put a block on your credit card preventing you from buying a Purism or PinePhone? That sure is devious – or perhaps an indication that the market is behaving rationally and the real problem you’re encountering is that the 90th percentile buyer values different characteristics than you do.
> a lot of sales of new devices every time the support is ended.
If this is your concern, you should be pushing for laws regarding recycling to cover the majority of devices which are discarded after something fails. People routinely use old devices until they break, and the thing forcing upgrades is something like their bank not supporting an OS which no longer receives security updates, which won’t be resolved by flashing a completely unsupported OS.
> and the thing forcing upgrades is something like their bank not supporting an OS which no longer receives security updates, which won’t be resolved by flashing a completely unsupported OS.
Why wouldn't it be resolved by installing a secure, supported GNU/Linux? Only because banks force you into the duopoly. More alternatives would push the change.
> If this is your concern, you should be pushing for laws regarding recycling
This is exactly why I support forcing Apple to provide a way to run what I want. Not because of the egoism. I don't even have an iPhone.
But that happens everywhere, though. These same social-engineering ads show up in Safari, can manipulate you into giving away your banking details for a Nigerian prince or tossing your SSN and debit card into a little autofill HTML box. Call-center scammers will abuse your iPhone's callerID to make people think they're talking to the IRS or their car dealership. These scams are nothing new, locking out features doesn't "help" users any more than disabling the phone or browser does. Safety is Apple's abusive catchall excuse that they wheel out when they have to make the poison-pill taste like candy.
The real kicker is that Apple's own App Store has been caught hosting malware. You can't really claim the open web is some scary harbinger of manipulative software when Apple's own first-party service has been caught hosting fake LastPass apps and abusive weekly-subscription services. Meanwhile on Android, I get my favorite apps off Github and don't have to interact with the enshittification-encumbered Google Play Store.
You're echoing Apple's own flawed defense. You can't rob someone in one hand and claim to be paying them back with the other. You're either acting altruistically to actually help users, or you're perpetuating a cycle that benefits only the service-owner. With Apple's complete lack of service-based competition I don't think it's absurd to suggest they're intentionally misrepresenting the only App Store option to try and rescue it from certain regulation.
It absolute is by anyone working in the field, and it’s not just Apple. A lot of places have been looking at ChromeOS for similar reasons, tons of people are running Kubernetes on trimmed down Linux systems which are far less “serviceable” than traditional servers because it reduces the attack surface massively.
> There are active zero-click exploits with various levels of persistence on the market today; you want to talk about relative scale in a post-Pegasus era?
Yes, actually. Your emotions are clearly strong on this issue but you really want to get some data and analyze it – for example, how long are users left vulnerable for traditional operating systems versus locked down ones or how hard is recovery?
Nobody is saying that there’s a universal optimum here but there’s clearly a trade off which people should consider when deciding what’s better for their situation. If you don’t need to run arbitrary binaries, can meaningfully segregate data between apps, etc. the benefits of breaking with tradition is pretty high and a high percentage of people will never hit a downside.
But for some reason Apple is a-okay with that.