Live data from Hacker News

We should have the ability to run any code we want on hardware we own

hugotunius.se

261–270 of 1001 posts

Re: We should have the ability to run any code we want on hardware we own

#261
For a technical user, being able to install any software you like means you have full control. But another perspective is that if someone else installs the wrong software (such as if a housemate installs spyware), your phone could betray you.

Security-conscious people might actually prefer to own hardware-limited devices. An example of this is having a camera with a physical shutter, or a light that shows camera activity that can't be disabled by software.

Similarly, some people might prefer to own devices that don't allow side-loading at all, since it disables a potential vulnerability. Maybe it would be best if Google allowed this to be a configurable option when buying an Android phone. (I suppose they could buy an iPhone, though.)

Re: We should have the ability to run any code we want on hardware we own

#262
post #165

> In this context this would mean having the ability and documentation to build or install alternative operating systems on this hardware It doesn't work. Everything from banks to Netflix and others are slowly edging out anything where they can't fully verify the chain of control to an entity they can have a legal or contractual relationship with. To be clear, this is fundamental, not incidental. You can't run your o…

This is a sad reality. I see 2 paths forward 1) we somehow build the right layers into the internet that we can withstand open hardware. 2) open hardware running any software becomes an education use and hobbyist market only. I could see an edu slice to every corporate entity deploying open and free stuff just as onboarding to paid. Hackable hardware with kiddyflix.

Re: We should have the ability to run any code we want on hardware we own

#263

This makes the point that the real battle we should be fighting is not for control of Android/iOS, but the ability to run other operating systems on phones. That would be great, but as the author acknowledges, building those alternatives is basically impossible. Even assuming that building a solid alternative is feasible, though, I don't think their point stands. Generally I'm not keen on legislatively forcing a deve…

Well there's Huawei's Harmony OS. Can someone who knows what's going on with that report in? Is it anything close to an open platform?

It is also equally closed, so not the champion you are looking for. It could still be a major player breaking the duopoly.

Re: We should have the ability to run any code we want on hardware we own

#264
Where do you draw the boundary between code and hardware? System code has become more like a firmware. Vendor sees it as device, not as code + hardware. It's like a TV or a cassette player. There is no code. You can bring your content and "play" it. Any additional ability that you build on your own (you want the cassette player to play DVDs?), would void the warranty. But you can buy a DVD module from the vendor that is made to fit into your cassette player.

In reality, what you are expecting is, to be able to use your common tools to modify the device. But the vendor uses some weirdly shaped screws for which you don't have tools to work with. That is the real complaint.

Re: We should have the ability to run any code we want on hardware we own

#265
I don't really agree with this take.

I do think that it should be easier for people to build and install alternative OSes on their phones.

However, building your own mobile OS is just really hard. And on top of the technical challenges, the UX challenges, the overall polish challenges, there are non-technical challenges that are often impossible for alternative OSes.

* Industry connections problems. As an example, no open source mobile OS has a contactless payments app, at least not one that is generic and can support more or less any credit card out there. That is, you can't build an Apple/Google Wallet analogue and have it work.

* As much as I wish Jobs had stuck to his guns on the "no iPhone SDK" thing, and had instead developed and improved the mobile web stack, that's not the reality today. There are many things you just cannot do current mobile OSes through its web browser. Native apps are required there. And so that means companies need to choose the platforms they build for. Today that's easy: iOS and Android. But getting governments and banks and various companies to build apps for your niche mobile OS is going to be essentially impossible. And with closed-source kitchen-sink libraries like Google Play Services, it's incredibly difficult even to get a lot of Android apps running properly (and consistently reliably) on "de-Googled" Android phones.

Ultimately the real problem is that there's no capable, standardized, OS-agnostic platform for building mobile apps. The web platform could have been it, but it's not, and now Apple and Google have a vested interest in ensuring that it never can be, because building native iOS and Android apps locks people and companies into those ecosystems.

Ultimately^2 the real problem is that free markets are a myth, and don't work. Companies want to become monopolies, and want to bar new entrants. I would absolutely love some mandate/legislation/whatever that made it mandatory that we have a fully open source mobile OS, and that all the players involved need to be allowed to build equivalent functionality into it that Android and iOS have. I know that sounds radical and like government overreach (and current governments wouldn't go for it anyway). But the alternative is what we have today: monopolists that don't care about the rights of their customers. There's really no "free-market" way out of this.

Re: We should have the ability to run any code we want on hardware we own

#266
post #165

> In this context this would mean having the ability and documentation to build or install alternative operating systems on this hardware It doesn't work. Everything from banks to Netflix and others are slowly edging out anything where they can't fully verify the chain of control to an entity they can have a legal or contractual relationship with. To be clear, this is fundamental, not incidental. You can't run your o…

>It doesn't work. Everything from banks to Netflix and others are slowly edging out anything where they can't fully verify the chain of control to an entity they can have a legal or contractual relationship with.

Theres nothing stopping a hardware vendor from being able to delete the system installed keys/certificates, breaking trust to allow you to install your own. Sure netflix might not like it but you still have the right to run your own code and netflix has the right not to trust your OS.

>Governments shouldn't be able to prevent me from end to end encrypting things.

Agreed.

Re: We should have the ability to run any code we want on hardware we own

#267
post #241

Earlier quoted context omitted.

Really not a libertarian, but why shouldn’t Netflix have the right to choose who they distribute content to? They negotiated conditions with the creators, why shouldn’t they be able to specify the DRM? No one is forcing you to subscribe to Netflix. Or even to buy an iPad.

The issue is the means of enforcement requires taking away other rights they shouldn't be able to. What if I want to require (for anti-piracy reasons) that to use my software you must also give me complete access to your computer, all the data on it, and all your communications. You might say, "Well, if anyone is stupid enough to make that deal, let them." But it's easy to sugar coat what you're doing, especially wit…

> What if I want to require (for anti-piracy reasons) that to use my software you must also give me complete access to your computer, all the data on it, and all your communications.

That's exactly what happens with anti-cheat kernel modules. As one might expect, ordinary people couldn't care less, as long as it works good enough.

Re: We should have the ability to run any code we want on hardware we own

#269
post #165

> In this context this would mean having the ability and documentation to build or install alternative operating systems on this hardware It doesn't work. Everything from banks to Netflix and others are slowly edging out anything where they can't fully verify the chain of control to an entity they can have a legal or contractual relationship with. To be clear, this is fundamental, not incidental. You can't run your o…

My parents are getting old and they aren't tech savvy. The missing piece here is that I want my parents to have a computer they can safely do their banking on, without leaving them vulnerable to scams and viruses and the like. I like that they have iphones. Doing internet banking on their phone is safer than doing it on their desktop computer. Why is that? The reason is that the desktop PC security model is deeply fl…

> My parents are getting old and they aren't tech savvy. The missing piece here is that I want my parents to have a computer they can safely do their banking on, without leaving them vulnerable to scams and viruses and the like.

Purists always forget this point :) What is best for 99% of people.

And dumb Euro bureaucrats.

Re: We should have the ability to run any code we want on hardware we own

#270

As for the new Android restrictions I assume my Galaxy S20 will be immune to them because it's not getting (major) updates anymore. I'll continue using it as long as I can to avoid this. Does anyone know the most recent Galaxy phone that will be safe from this? I want to get a backup.

It likely won't be safe - they're probably going to enforce it through a Google Play Services update rather than an Android update, which means all previous Android OS versions after 5.0 (Lollipop, released in 2014) will be hit with the changes. In order to bypass that you'd need to install a Custom ROM or stop using and uninstall the Google Play Store entirely (since it's not possible to selectively disable just thi…

I seriously doubt they can restrict sideloading through Google play services.

But if they do then it’s worse than what I thought.

Post reply on HN