Live data from Hacker News

What we talk about when we talk about sideloading

f-droid.org

481–490 of 646 posts

Re: What we talk about when we talk about sideloading

#481
"Sideloading"? It is called installing where I come from and if you can't install your own software on it you don't own the hardware. The fact alone that they managed to establish "sideloading" as a term tells you 90% of what you need to know in this discourse.

Re: What we talk about when we talk about sideloading

#482
post #432

Earlier quoted context omitted.

> It is interesting though how this same conversation doesn't exist in the same way in other areas of computing like video game consoles Historically, when the first game consoles with game cartridges existed, the hardware was much more niche than the available personal computers. Game system developers designed hardware specifically for games, and game developers developed for those specific systems. Also, physical…

> Any device that doesn't have DRM will never support a paid digital marketplace Yet here am on linux buying games on steam

Indeed. The complement of No Tux No Bux is If Tux Then Bux.

Re: What we talk about when we talk about sideloading

#483
I think one thing the internet community, particularly the likes of folks here who dominate the HN readership, is to stop listening to Google or using Google-derived services. The problem is everyone goggles Google's googleys every time they put something out: Chrome, Android, Kubernetes, QUIC, BBR, Analytics, Gmail, GCP, Go. And y'all continue to fucking do it.

I can't even go into my workplace and get the company to not install Google Chrome and use Microsoft Edge on Windows (mind you, Edge is now based on Chromium) because everyone is so far up Google's ass that they must run CHROME and not another CHROMIUM browser because MICROSOFT. It's fucking insanity. It's taken as a default.

Stop using their products. Stop giving Google so much power over the fucking internet. Meanwhile I go on internet forums, IRC, and places like HN and people still fucking cry about Microsoft as if somehow we're in the 1990s. Like literally Gen Z wasn't even born in the 1990s and they decry Microsoft because us Millennials and Gen X continue to think Microsoft is the absolutely worst evil ever and Google is like the patron saint of the internet.

Apologies for the little bit of pro Microsoft rant here, but the point I'm trying to make is we should evaluate both Google and Apple through the same lens that we all give Microsoft shit for.

DeGooglify your brain, and then the rest of the world will begin to follow. Stop changing everything in your fucking services to kubernetes and istio. Don't switch your projects over to Go. Stop letting them run everything.

Like every time Google releases a new piece of technology the entire industry jumps on their tallywhacker. And that just continues to cement their legacy in all of these stacks.

Re: What we talk about when we talk about sideloading

#484
post #349

I'm struck with how long the history of Apple's earliest iPhone has shaped and produced long-term damage to the concept of digital ownership. Apple originally didn't allow anybody but Apple to create software for the 1st gen iPhone, and only later was forced "opening" it my market forces. People who realized they actually owned the thing they bought wanted to do what they wanted, which required circumventing Apple's…

> It is interesting though how this same conversation doesn't exist in the same way in other areas of computing like video game consoles Historically, when the first game consoles with game cartridges existed, the hardware was much more niche than the available personal computers. Game system developers designed hardware specifically for games, and game developers developed for those specific systems. Also, physical…

> Any device that doesn't have DRM will never support a paid digital marketplace or paid content streaming.

None of the attestation stuff actually works for that.

For streamed content the pirates only need one person to crack one device and then everything is on The Pirate Bay. Notice that it's all still available in such places despite the DRM and the people still paying for it are still paying for it despite its availability there.

And apps are the same. If you put some attestation in your app, the pirates would just disable it in the copy they distribute, because attestation does nothing to prevent copying.

What it's nominally supposed to be for is so that a server can verify that the device is approved before providing some service. But that only works if a) the thing the server is providing is individualized rather than generally available, and b) the attacker can't get an approved device. The first is what makes it useless for copy protection. The second is what makes it useless for e.g. a bank app, because the attacker will just steal the user's credentials on a compromised device that never even attempts attestation because it's only connecting to the attacker's servers, and then put the stolen credentials into an approved device in order to transfer the money.

The only party to benefit from any of this is the incumbent platform if they can fool useful idiots into using it in order to lock customers into their platform.

Re: What we talk about when we talk about sideloading

#485
post #349

I'm struck with how long the history of Apple's earliest iPhone has shaped and produced long-term damage to the concept of digital ownership. Apple originally didn't allow anybody but Apple to create software for the 1st gen iPhone, and only later was forced "opening" it my market forces. People who realized they actually owned the thing they bought wanted to do what they wanted, which required circumventing Apple's…

> Why hasn't the kind of ferver that created Linux driven engineers to fix their phones? Is Android and iOS just good enough to keep us complacent and trapped forever?

I obviously can't speak for all "Linux driven engineers", but only about myself, as someone who's daily driven linux for a long time and who enjoys tinkering with computers.

I consider phones in the same category as a gaming console: a "single purpose" device.

I find they're not practical for much more than mindless scrolling and the occasional text (and even that's a pain, to the point I usually do it from my computer). I just hate staring at a tiny screen and obscuring half of it with my hand when I need to interact with it.

I'm all for geeking out on things, and love to tinker. But the phones are simply not attractive to me. I used to have Android phones with custom roms, but that was only because samsung had atrocious support for older devices. My current iphone is supported until it can't be used anymore and does everything I need.

Whenever I get the itch to tinker, I'll do it on a computer with a full keyboard and big screen.

> Is Android and iOS just good enough to keep us complacent and trapped forever?

I think they are, especially since us "linux driven engineers" are a tiny fraction of the market. Basically nobody but us cares about these things. Just like almost nobody wants a small phone, or thick phone. Even with regular computers, most people didn't tinker, they would just install a few programs, which would have been on an hypothetical app store anyway.

Re: What we talk about when we talk about sideloading

#486
You're all missing the point! This is not about whether an app can be installed on an Android device, it's about whether the device's owner has any say in the matter. It's about freedom of choice.

Over the decades, from the Apple II to the present, I've owned every imaginable kind of computer. And yes -- I owned all of them -- I had the right to use them as I saw fit. They were extensions of my intellectual creativity. I've written dozens of Android apps, including TankCalc, used in industries across the world to measure and control storage containers. TankCalc is useful, it's free, and it's about to die.

I tried meeting Google's demands, but over the years I realized that wasn't possible, because Google refused to take "yes" for an answer. This is true for all my Android apps -- all would require constant maintenance to meet Google's endless compliance demands.

We're witnessing an extinction of personal expression, of defending the rights of individuals, and the sideloading issue is a symptom of a deadly disease, one that shifts control away from individuals to giant corporations.

Sideloading is just an example. Samsung has updated its already-sold refrigerators to begin showing ads to powerless consumers. Car makers Mercedes-Benz and BMW have starting charging monthly subscription fees for access to features already present in people's cars. Farmers can no longer repair their John Deere tractors.

It's an unprecedented historical shift. Instead of being crushed by an army that invades and takes over, we pay for things that own us, body and soul.

Re: What we talk about when we talk about sideloading

#487

I think one thing the internet community, particularly the likes of folks here who dominate the HN readership, is to stop listening to Google or using Google-derived services. The problem is everyone goggles Google's googleys every time they put something out: Chrome, Android, Kubernetes, QUIC, BBR, Analytics, Gmail, GCP, Go. And y'all continue to fucking do it. I can't even go into my workplace and get the company t…

Nah screw it, it's late and I'm unable to sleep and gonna rant a little more.

Microsoft made changes to force consumer users to create Microsoft accounts to login to their PCs and you can go on Youtube and see 500 videos on how to use some bespoke tool to bypass this that has racked up thousands of views because some 'nerd' who literally walks around with a Macbook and an iPhone told them that it's the most evil thing Microsoft could make you do.

Meanwhile, once Google completes this transition on Android, you'll basically be forced to have a Google or Apple account to install any software on your devices, backup and restore the device, etc. And yet folks that dominate these boards are just like "yah that kinda sucks but like, ya know, ya know? ya know!?"

I agree that open software and even open hardware is a good thing. But both Apple and Google have done an incredible amount of damage to the open ecosystem of the web over the last 20 years in so many more ways than Microsoft could have ever dreamed of doing back in the 1990s.

And nerds not only let it happen, but embraced it, camped out in days-long lines wearing diapers to buy the latest shiny overpriced brick they could put in their pocket so they could look cool to all of their friends for a whole 12 months before the next one came out and made them look like a povo. And now walking around with a Macbook at college is like wearing the latest fashion trend because everyone has to show off that they're completely irresponsible with money and spend $2000 for something they could realistically get for under $1000 just so they can show off that they're in the same social class as everyone else.

It's the most infuriating thing to happen to the internet and technology.

Oh, and then to add on, they all get jobs in the tech industry and throw a fucking entitled childish hissy fit when their company hands them a $1000 Windows PC that's got monitoring and security software with no Admin rights on it instead of the $2500 Macbook Pro that they get root access to because mommy and daddy never told them no.

Re: What we talk about when we talk about sideloading

#488

Earlier quoted context omitted.

> It is interesting though how this same conversation doesn't exist in the same way in other areas of computing like video game consoles Historically, when the first game consoles with game cartridges existed, the hardware was much more niche than the available personal computers. Game system developers designed hardware specifically for games, and game developers developed for those specific systems. Also, physical…

> Any device that doesn't have DRM will never support a paid digital marketplace or paid content streaming. None of the attestation stuff actually works for that. For streamed content the pirates only need one person to crack one device and then everything is on The Pirate Bay. Notice that it's all still available in such places despite the DRM and the people still paying for it are still paying for it despite its av…

> For streamed content the pirates only need one person to crack one device

Thus the push for locked devices.

> What it's nominally supposed to be for is so that a server can verify that the device is approved before providing some service.

Which is why Neflix wont work with a device failing Play Protect.

> The first is what makes it useless for copy protection

Not if you require a locked device to download the artifact in the first place to prevent copying.

Re: What we talk about when we talk about sideloading

#489

Earlier quoted context omitted.

Right, so that's what needs to change.

well, we need a platform competitor like Huawei doing for the past years but Open Ecosystem/Platform which is likely never happen tbh, since the amount of resources that required is a lot and would need monetization which would end up like at position like this

> well, we need a platform competitor like Huawei

You mean, GNU/Linux phones, Librem 5 and Pinephone?

Re: What we talk about when we talk about sideloading

#490
post #36

I think we could set the bar substantially higher. Don't even bother with discussion of sideloading. Talk about bounded transactions and device control. What is needed is: Once I have purchased a device, the transaction is over. I then have 100% control over that device and the hardware maker, the retailer, and the OS maker have a combined 0% control.

What does this even mean? You don't want software updates? Or strictly only software updates that are 100% aligned with your wishes whatever they may be at the time?

GNU/Linux provides the updates and yet lets you own the device.
Post reply on HN