591–600 of 735 posts
Earlier quoted context omitted.
Phrasing it like that that without mentioning the $40B penalty if Apple releases the feature today feels a bit off to me.
That's how the EU enforces its laws - a fine that hurts. How else would you like them to it?
Thus the people that are mad at Apple for saying the EU is trying to stop them releasing this feature don't have much ground to stand on.
Earlier quoted context omitted.
> Just think about if Porsche would make a press release and calling the US tariffs "un-American". Like this? https://www.thestreet.com/automotive/bmw-ceo-has-blunt-new-m...
I can't find the problematic statement. Off course the tariffs are a threat to the financial success of German car manufacturers, and they need to keep their investors updated. The DMA is also threatening Apple's high profit margins. That's the whole point of the DMA.
Or is it actually a crusade against margin?
Earlier quoted context omitted.
If you don't personally find straws useful that's fine but why should something like that be dictated for everyone else let alone at such a high level of government and without a direct vote by the citizens? To make matters worse the expected environmental impact is miniscule and the entire thing is predicated on a popular misconception that gained virality. It's a perfect example of the government failing to functio…
Is that really a perfect example of a government failing to function well? In what country government does every action require a direct vote? Representative democracy is by definition imperfect. Bet you can think of a better “perfect” example of a government failing to function well. It all depends on which government you are referring to but the best example to me would probably be a government needlessly bombing a…
Yes, I think it's a particularly good example of government dysfunction. The issue itself is simple enough to easily make sense of and it's clear that it's a suboptimal outcome. The regulator should obviously not be getting caught up in nonsensical hype.
Don't confuse impact of the described action with quality as an example. The best examples of mathematical concepts are usually not particularly useful for anything in the real world.
Apple said "hey, can we not comply with the law", the EU said no, so it didn't launch. Seems pretty straightforward to me. I can see why Apple might want to request an 18 month exemption, there's clearly extra work required to comply with EU regulations. But on the other hand it also feels like a straightforward play for consumer sympathy: let them get used to using it every day for 18 months, then pressure the EU to…
Google eng mgr here. I've worked on a few projects related to compliance with various government policies. This isn't "assign a two-pizza team to it, will be done in a quarter"; these types of compliance efforts can mean completely redoing multiple core systems to handle privacy, wipeout, audit, reporting, per-location policies, etc etc. These efforts can involve hundreds to thousands of people for multiple years. Su…
Earlier quoted context omitted.
The technical problem is nothing like exchanging data with fitness trackers. One of the issues here is that there are many people with strong opinions that don't understand the thing they have strong opinions about. Which is the normal state of human affairs.
Indeed but you ignore my second paragraph: they have developed (and 3rd-party audited) a way to handoff all the data (parts of your Personal Context, etc.) to their cloud servers in a privacy preserving way on-device. Why couldn't the same process could be used to handoff the data to a 3rd-party AI provider? (genuine why, if you have an understanding of the thing you have a strong opinion about I'd genuinely apprecia…
"Given the serious risks to users, Apple designed a solution called Trusted System Agent — an intermediary that would allow virtual assistants to safely access the same features and capabilities as Siri AI for devices in the EU."
The European Commission rejected it.
1 https://www.apple.com/newsroom/2026/06/due-to-dma-siri-ai-de...
Earlier quoted context omitted.
Privacy by design isn‘t enormous effort, as every European engineering manager will tell you. It‘s just another reasonable and straightforward set of requirements. Of course, if you want to have privacy-less features in jurisdictions permitting it, that‘s a different story and that‘s a choice.
In this case it looks like EU is requiring to let competitors mess with Apple users privacy.
Earlier quoted context omitted.
> Apple claims to protect user privacy all the time. But they can't offer a product in a major jurisdiction that has actually meaningful privacy laws? Didn't they consider that while designing the product? Complying with complex privacy laws is surprisingly orthogonal to making a product with good privacy. In another regulatory area (not privacy, but something more historically regulated) we ran into strange situatio…
Complying with complex privacy laws is surprisingly orthogonal to making a product with good privacy. Maybe it's more because the privacy is largely marketing and helps with continuously shutting out competitors under the guise of privacy? If they really cared about privacy, they would end-to-end encrypt iCloud backups [1] by default and not just when ADP is enabled, which only a small subset of users do. In fact, ma…
Ironically the gaps you point to are things they have had to do to appease the European Union.
Earlier quoted context omitted.
Respectfully, it sounds like you just haven't dealt with any significant tax or regulatory tasks. There's entire industries of experts who work on these tasks, and they don't just work for people trying to skirt the rules. I've hired people for both tasks and the reason was specifically to comply.
Not privacy, but as an example: NIST, MS, and the security community all recommend against forcing people to change their passwords on fixed intervals. They should only be changed when there is an indication they have been compromised. PCI requirements demand mandatory 30 day rotation intervals on user passwords for users with administrative privileges, IORC. Something like that. They haven’t kept up. So until they c…
The best practice was to rotate your passwords, but we discovered that this led users to picking less secure and easier to remember passwords and patterns.
Once technology offered up solutions to problems like password managers and breach notifications, that recommendation changed.
PCI used to mandate password changes for in-scope accounts (meaning they have access to credit card flows). Now that MFA is widely deployed that requirement only remains for accounts that do not have a second factor for authentication.
If you were ahead of the curve and implemented strong password policies that did not conform the the PCI baseline, all you had to do was explain to the auditor why. Assuming what you were doing genuinely increased your security posture it would be approved.
Earlier quoted context omitted.
Is that really a perfect example of a government failing to function well? In what country government does every action require a direct vote? Representative democracy is by definition imperfect. Bet you can think of a better “perfect” example of a government failing to function well. It all depends on which government you are referring to but the best example to me would probably be a government needlessly bombing a…
Who said anything about a direct vote for every action? You're putting words in my mouth. Yes, I think it's a particularly good example of government dysfunction. The issue itself is simple enough to easily make sense of and it's clear that it's a suboptimal outcome. The regulator should obviously not be getting caught up in nonsensical hype. Don't confuse impact of the described action with quality as an example. Th…
That is cleary advocating for something as small straws being worthy of a direct vote.
Is there a reasonable expectation for government to be mathematically optimal in any possible way? Why should I not confuse your example as an example?