I don't understand why ensuring general-purpose computing is not a priority of the European Union.
All that talk about sovereignty, and we are giving full control of our digital lives to 2 American companies.
All that talk about sovereignty, and we are giving full control of our digital lives to 2 American companies.
Only a few politicians, some of whom happen to be currently in power, in the EU or elsewhere, are pushing for those agendas. But fortunately, they do not represent the majority.
These things wouldn't go away if the EU or a company within the EU would provide a phone OS.
They would just serve different masters.
Andy Rubin was no saint, on so many levels, but when he was removed from Android leadership and the Chrome culture effectively took over this was always how it was going to go.
No you don't, otherwise we wouldn't have banking apps on it.
It wasn't hard before LLMs and it's nearly trivial now.
> which are like you said handled
Also, I corrected your misstatement about payments. They have absolutely nothing to do with decomp, and certainly can't be used to dismiss the entire attack surface of a mobile banking app. Your example is complete nonsense.
You are really digging a hole here.
I just know that the app can just be cracked - there are plenty of sites that do that for android. Because you can't just load your app on iOS - this is just not possible (well perhaps there are a few percent of some jailbroken iPhones, but that is neglibile).
On Android though, you can soon see such app stolen and on some of the apk warez sites. It just breaks the model.
Think about Windows and software privacy
No, smart normies are sideloading with the 7-day limit and leveraging automation to have their pirated apps automatically re-sign and re-push. If you pay the $99 to Apple for a dev cert (or like $10 to a service that'll sell you a cert off someone's account), it'll even just sign out for the year for you. No screwing with Xcode or anything, just drag-drop-sign. Even gives you the options to patch the app out at resigning so you can do hacks and mods like the good old jailbreak days.
- You have to setup a developer account with Apple first, and dev-signed apps can only be installed onto specific provisioned devices only[0]
- The free tier of that developer account is inconvenient for actually using dev-signed apps as a daily-driver, and won't let you use certain entitlements
- Apple's dev tooling is designed to make it feel like you can only sign code you're compiling yourself
On the surface level, this might seem like a big difference, because Android has a command that lets you load arbitrary APKs with no particular fanfare or ceremony, while Apple's dev signer is buried inside of a compiler/IDE suite. But people have built tools to make it easy to take an arbitrary .ipa, sign it using your dev account, and resign it once the free tier's 7 day limit expires.
Of course, this still requires you actually go and obtain an .ipa of the app you want to use, and Apple distributes App Store[1] app binaries[2] encrypted. That part requires actually having a jailbroken device to dump the app binary with. But once the app is cracked anyone can install it.
If you want an actual "uncrackable" app you need to put a critical part of your app's workflow onto a server, and then have your app send an iOS DeviceCheck or Google Play Integrity attestation that the phone is running the actual App Store/Google Play version of your app. But that's also incredibly draconian behavior towards your customers as it basically forces your app to be always-online... which is why a disturbingly high number of games do this.
[0] Yes, I know about Enterprise signing, but Apple specifically forbids distributing Enterprise-signed apps outside of your organization and those apps get revoked all the time. Signing with your own dev account is way more robust and that's what most iOS power users actually use.
[1] I have no clue if FairPlay encryption applies to EU-DMA-compliance signed apps.
[2] ONLY binaries - all your resources are unencrypted and can be downloaded off the App Store CDN and inspected by anyone. Code signing signatures do apply to resources, AFAIK
Just look at how many pay for music and video streaming services, when it's trivial to download anything for free from illicit sources.
There's MNT in the EU.
And they need a plan to spend it.
The EU has enough tech talent to do it, but the political and managerial class lack both the strategic ability or the willingness to adequately reward the effort it would take, almost certainly preferring to, again, outsource the concern, and then be shocked Pikachu later.
Anyone doubting this should see how BMW think about their in car software. And that is for a supposedly premium product.
BMW isn't the EU government. Like I said, someone has to actually do it. BMW Actually Did It in a really user hostile way, and that's the best we have. Why is nobody Actually Doing It but good? Or why aren't we buying MNT products?
As is your comment. It is basically “someone else should do this properly and I will take the benefits” but not actually willing to put up the hard bit themselves.
The root problem here is the EU is culturally broken, and until some grand disaster will simply decline ever further with everyone involved wondering why no one else is doing anything about it.
Take up the White Man's burden—
Send forth the best ye breed—
Go bind your sons to exile
To serve your captives' need;
To wait in heavy harness
On fluttered folk and wild—
Your new-caught sullen peoples,
Half devil and half child.
Because there is way more impact potential of doing so from within the US than from Europe.
Also, because moving to another country with the primary intent to "export culture" is not something (I suspect) most people are interested in (I know I am not). Overall, it feels like a weird proposal. And I expect most of the residents of those countries to treat you with both suspicion and bewilderment, if you told them that this was your reason for moving to their country (and rightfully so, in my opinion).
Because kids, because pornography, because terrorism, whatever. This is too powerful an option for control freaks to resist.
What is so pernicious about the EU approach is the enthusiasm and efficiency with which it stops anyone from doing anything, while simultaneously attempting to regulate what everyone else in the world can do. If they put even a small part of that energy into encouraging the right thing to happen they would be in such a better place it is insane.
They said if the government “drive the process of forking” which could mean encourage a group of academics to do it, or a commercial consortium. It does not mean the EU government take on the task themselves. *
It is self evident from actual EU behaviour that any mobile os that gets to users will be legally required to be a surveillance disaster area, regardless of origin, and the only people that have prevented this already are evil US corporations.
* edit to add, the EU did encourage many technical efforts vital to the mobile phone industry at different times with a mix of funding, political support etc. The Arm people would tell you AMBA (a standard relating to SoC component integration) wouldn’t exist without this, and yet no one would classify this as “a creation of the EU” but very much enabled by them. For whatever reason since about 2005 their strategic ability in this area has not merely disappeared but become actively wrong.
Look at how they treat Graphene, and that is an afternarket mod niche.
Wrt Graohene the problem isn’t the politicians making announcements, the police assume you are a criminal if you have Graohene and are profiling you on this basis.
In practice they’re the same thing.
And, for a nominal one-time payment, you can register as a developer, and compile, install and run absolutely anything you want on a non-rooted Android phone with a locked bootloader (within the constraints of the security system, which is, of course, A Good Thing).
But also, I doubt any polity would have its sovereignty undermined if their general-purpose computing hardware doesn't fit into their pockets.
Gonna have to post the storage dimensions of your preferred pockets.
So maybe they prefer another solution to the sovereignty issue.
Note that there are competing political groups and MEPs in the EU from far right neo-fascists, to corporate lobbyist right-wingers, to Greens and even digital privacy maximalist Pirates.
Lobbyist right-wingers are now the biggest group and they pass laws like Chat Control because it gives the impression that they do something and it makes corporations money. EU has been founded as a maximally neo-liberal union. The broad human rights are remnants of the Soviet scare and world-war trauma.
Links?
Which, if one's comfortable with the HAP bit flip as a solution to that problem, then one should arguably also be comfortable with bit flips controlling baseband radios which still haven't been demonstrated to transmit when disabled.