Hacker News new | past | comments | ask | show | jobs | submit login

I am an Apple fanboy but I am also a privacy fanboy. As AI, IoT, and consumer tracking continue to invade our daily lives I think Apple will continue to do quite well if they maintain there pro-privacy heading. Privacy is a feature, it's something people want, and unfortunately its becoming a luxury. That is something that attracts Apple's customers.



I'm one of the few in the "tech world" that isn't so much pro-privacy. Google can read my email, Apple can track my movements, my Amazon Echo can even listen in when it wants. The end result is a huge benefit to me. How is any AI supposed to know what I want, if I try to be an anonymous user? I prefer targeted ads. I prefer submitting my information to "robots" in the hopes that my user experience is tailored to what I want. I see all of these articles on HN on how to break free from Google or some other eco-system because they're "evil." I dunno, I guess I don't have a CIA-level job that most of these commenters have where they need to be off the grid.

"Alexa, play me that song I like. And while you're at it, order me a case of my favorite beer. Thanks."


You are making two assumptions that aren't necessarily true. First, you're assuming that you have control over what kind of information is being collected and shared, and you're assuming it's always good for you.

Here's a fairly innocent scenario: if Amazon Echo can learn everything about you, they may discover that you're crazy about Paris and you have good income. Then they can sell this info to every travel website who'll put you into a pricing bucket which would guarantee that you'll overpay for your next trip.

But generally speaking, we take advantage of information asymmetry all the time: buying real estate, getting a new job, planning a vacation, etc. Sometimes you have the leverage, sometimes you don't. With massive information gathering by a handful of big players you'll most likely end up on the losing side in the future, especially when dealing with businesses/governments who can afford to buy a profile on you before engaging. Imagine if your religious beliefs and either you voted for Trump were available to anyone via an API call which takes your face image as the input and costs $0.02 to make.


That's a really good scenario that shows the potential risks of a lack of privacy, without being susceptible to "just don't have anything to hide". Thanks for sharing, I'll have to remember that.


I think we're arguing about semantics here. I can see a valid reason for giving away my information if I know it will be used responsibly. I would like to let Google have my information if it helps turns my phone into a better assistant. I would like to extend segments of this information (namely location) to Uber and Lyft so that I can get rides easier. I would NOT like Google to sell my information to third parties that I have not agreed to, and this extends to Uber and Lyft as well. I want to choose which services get to use my data, and I want there to be consequences if those services leak my data.

Now you may say that you can't trust corporations with this responsibility, but what if there WAS something we could do to enforce that responsibility? How much control I have over my information should be left up to me, and it would be great if an entity I trust could enforce that. As of this moment, we don't have that option. However, it doesn't mean that such a future is impossible. If we argue about it enough, maybe the technology and the courts can find a way to make it happen.


If you have knowledge and control over who gets your information and how they use, well that's effectively the definition of good privacy.


But you don't. You have only control over the former. History has shown us time and time again you don't have control over the latter.


I agree. My point is that it doesn't make sense to say "I'm not really concerned with privacy issues, I give lots of personal data to several services and it improves my life." Because that's effectively saying "I'm not concerned with privacy issues as long as my privacy is really good."


How do you have control over the former?

Data is being gleamed about you even if you aren't using their products, and it's being used by companies you haven't authorized all the time.


Our legal structure needs to catch up and punish companies who use data that we did not authorize. Data should be seen as personal property.


That will never meaningfully happen, because it is contrary to third party doctrine and would make it impossible to do business with people.

If you tell me that you like bananas, and I bring you bananas, I'm not being unethical. The problem with online services is that you're baring your soul to the eye of sauron without realizing what it means. The only way to win is not to play.


You may want to look into the EU GDPR, which requires all companies to strictly manage all personal information, or face a penalty of up to 5% of worldwide turnover.

This is set to activate in a year, and it is a huge problem for software used in the EU because almost nobody is ready for it.

https://en.m.wikipedia.org/wiki/General_Data_Protection_Regu...


I didn't say complete control. That's... well... not actually possible (ever, since time began really, if someone can see you they can track data about you).

But you can have reasonable control of it and you can't with the latter.


I would extremely argue the term reasonable.


>But generally speaking, we take advantage of information asymmetry all the time:

Sure we do. But this is generally regarded as a bad thing and indicative of a failure in our commercial system to engender fair outcomes. Informational asymmetries aren't things we should be actively involved in exacerbating.


I think that's just something we tell each other so the children can sleep at night.

Of course we exacerbate information asymmetries. That's what we do. That's why the neanderthals are in our museums, instead of the other way around.

Saying we shouldn't is like saying birds shouldn't fly, because it's not fair to the fish.


There's a difference between survival and luxuries (like a trip to Paris). Ethics and politics should be about finding the boundaries between those things, and try to provide the basics (shelter, education, privacy) and let people try to make not 100% fair businesses out of the other things.


If it's so ethical, why "provide" and "let"? Can't you trust people to do the right thing?

If not, how do you know it is in fact the right thing?

If you prescribe and enforce your ethics, I think you're wandering close to another definition of politics.


Because there are people with behavior that do not conform to the agreed upon norms.

My ethics? I never said mine.

And yes, there are inherent dangers (like tyranny of the majority), but there are trivial ethical issues where there is no good solution for allowing the [or any] minority to self-determine. (Like rules regarding sex with children, just to throw in the classic think of the children. But of course the age of consent is not a magical line somehow creating an overnight transformative event for every resident of that state.)


You make a good point about the pricing asymmetry.

But the point remains that most people are voluntarily, enthusiastically, giving up personal data in exchange for features that they find valuable.

It's hard to see that as a privacy issue.

Being part of the world involves being known. In the proverbial "olde days," when people lived in much smaller communities, everyone knew everyone's business.

Government spying on its own citizens is more problematic. But again, being a citizen, by definition, means aspects of an individual's life are known, and are public data.

This notion of "privacy" is a special, legal, construct. It's meaning in everyday language is provisional.

What is more problematic, IMO, is the excessive use of classification by the Federal Government. This practice is vulnerable to abuse, as it enables legally enforced secrecy to cover up misconduct.


Well, according to a study conducted a few years ago, most people actually doesn't give up their information enthusiastically.

https://techcrunch.com/2015/06/06/the-online-privacy-lie-is-...


> But the point remains that most people are voluntarily, enthusiastically, giving up personal data in exchange for features that they find valuable

No, that's demonstrably false. Most people have no idea how exactly they are tracked and what information is being collected about them. How would they? It's not always as simple as "Uhh, so I guess if I write an email in Gmail Google can see my email?!" And even then, I think the majority don't actually think that Google does that. "I mean, email is private is it not?!" - is what some people likely think.

Do you actually think that most people know that Facebook and Google track them across the web and know most of the sites they visit when they aren't even on Google or Facebook's websites, through Google Analytics code and the Like button (without having to press on it)?

How long before the technology and bandwidth becomes advanced enough that it's actually possible to capture all conversations from mics 24/7 of the people around a device, and store it for analysis in the cloud? Do you think people expect that to happen right now, or are "enthusiastic" about it? No, they don't and aren't.

In fact some call this idea a "conspiracy theory." But ten years from now we'll probably discover Facebook or Amazon has already been doing it for a few years, and a few more years later the privacy invasion apoligists will start saying "well yeah, of course they listen to your microphone, that's why it's there! To analyze your context and give you even more targeted products and ads!"

Companies first abuse new ways to track people (I guess they would call that "innovation"), and maybe 10 years later, regulators catch-up to it and force them to pull-back their tracking a little bit, after the information has long been stored and used in their databases.


I'd say its voluntary in the same way a frog is voluntarily boiling itself.


Are we imagining a future where sellers can track our every want but consumers lose the ability to shop around? Why wouldn't market forces and competition protect us from this?


To maximise profit, a corporation must find the highest possible price that customers are still willing to pay. If a company finds a way to do this separately for each customer, then the other market players need to follow, otherwise they will loose their capital (i.e. shareholders jump ship). Information asymmetry is a very devious market hazard, it makes it such that the market appeara to be working perfectly well, but from the consumer point of view it appears like fraud. Nothing you can do other than protecting your data.


Companies sell at lower prices than the maximum acceptable price of the customer all the time for a variety of reasons. In order for what you say to be true there has to be a monopoly - otherwise competition will drive prices below that point (and this happens all the time)


There doesn't have to be an absolute monopoly, just a monopoly to a very specific service that you are looking for. Like a direct flight on a less frequented route. Or a delivery of baby wipes that arrives until tomorrow lunchtime at your home address. Oh, you also searched for "what to do when out of baby wipes"? Better jack up that price then...


Because of companies like Amazon. Most specialized shops in many countries have died because they can't compete with Amazon's leverage and scale, and it will only get worse.


This already happens and has been going on for a decade. https://www.theguardian.com/money/blog/2010/aug/07/computer-...


Monopolistic behavior. Lots of products can only be bought from a couple of companies. Competition need not apply.

Even in a competitive market place they can collectively decide to overcharge the same customers.


As an aside, you should try checking airfares in incognito mode to ensure this is not happening. Even refreshing the page for the same fare can affect the pricing model.


Afaik Amazon already does that with book pricing, or did.


You say "overpay" but if the user pays for it then that would have been an efficient price - making the entire transaction beneficial.

Economically it would be the market clearing price so would be beneficial to the market generally. Sounds like a great thing.


Actually, no. Such price isn't "efficient" because of how efficient markets are defined [1]: "...prices fully reflect all available information." But in this case one of the market participants (you) are not aware that others are getting a better deal.

In fact, this would lead to widespread pricing discrimination [2] based on what they learned (or bought) about you. Imagine seeing 20% markup on virtually everything available to you online, because every retailer can see your higher-than-average income before their page loads in your browser.

Personalized content (which everyone seems to love) is just an inch away from personalized pricing.

[1] https://en.wikipedia.org/wiki/Efficient-market_hypothesis

[2] https://en.wikipedia.org/wiki/Price_discrimination


Yes, note the all available information.

It's not perfectly efficient because there isn't perfect information, however it's more efficient than it otherwise would be.

More information in the system = greater efficiency.


> More information in the system = greater efficiency.

More information does not always increase market efficiency. In fact, it can have just the opposite effect when there is information asymmetry.

https://en.wikipedia.org/wiki/Information_asymmetry

http://www.economicsonline.co.uk/Market_failures/Information...


For sure, but only in the short term. History shows that there is a push and pull here and that on aggregate more information is being input to the market from all sides and available for price discrimination. Inefficiencies are great for enterprises to attempt to capture, and by doing so exposing the inefficiency.


Suppose a company invented an aids vaccine, and then charged gay folks and injection drug users 20x, because of hey - those at higher risk are willing to pay more for protection would that be a great thing?

Or let's go back to the Paris example. If everyone is paying the most they can afford, that leaves less money on the table for restaurants, cheese and wine when actually in Paris. It's 'great' if you only look at the market dynamics of flights and ignore the economic/social benefits of cheap travel.


Depends on whether you believe healthcare should be treated the same as other products in the marketplace, or if you think they are a public good.


I am trying to understand what you mean by "public good". It's not the formal economics meaning (https://en.wikipedia.org/wiki/Public_good), because healthcare clearly is excludable and rivalrous.

The notion of a "public good" also isn't about how things should be treated, but more about how things necessarily are.

It sort of seems you're making an argument unrelated to economics here, even though it's using words also used in the jargon of economists.


Nope, I'm using exactly as intended.

If one is to believe that healthcare products should be subject to market forces, then their prices should be variable in the same way other products are. In which case the answer to the question is, yes someone with a "niche" health problem would pay a substantially high price.

If however one believes that healthcare should not be subject to market forces, that is, it should be available to all equally (non-excludable) and cannot incur asymmetric costs between users (non-rival) then the answer is no, it would not be good.


The important thing about public goods is, you can't exclude them if you tried. By saying we should pretend that healthcare is a public good, you are saying we have a choice in the matter. This on face makes it a non public good.

This is a fine opinion to have, but you do yourself no favors by misusing jargon like this.


The problem with healthcare is that it's often not negotiable. Let's say you're a billionaire in a world with zero privacy. You get cancer. One company owns the patent on the drug you need to survive. Is it okay for them to charge you a billion dollars for treatment?


> You say "overpay" but if the user pays for it then that would have been an efficient price

This says nothing of the possibility that one party has a lot of information, and the other party has relatively little information, and the guy with very little information is getting screwed.


The implicit assumption is that the service is charging your air fare or whatever based on your ability to pay. So in that sense, in aggregate, it drives equilibrium between supply and demand - and thus is comprised of market clearing prices, as I said.


There is a difference between competitive single price and monopolistic pricing.


Market clearing prices can strongly favor one party or another, depending on the information asymmetries present.


Wouldn't that price be the consumer surplus price (above the market clearing price)? And wouldn't that transaction have been a result from an inefficiency in the market (lack of perfect information)?

Genuinely wondering. My economics is a bit rusty so not sure if what I said is remotely valid


In fact, in a monopolistic market, perfect price discrimination (every consumer pays exactly their individual marginal utility) results in allocative efficiency.

The consumer surplus is zero, but the producer surplus is the maximum possible value.

In other words, the monopolistic supplier would otherwise charge a higher price for everyone if it is unable to price discriminate. If price discrimination is successful, more consumers can afford the product.


I'm ceaselessly amused by the folks fearing Amazon Echos or Google Homes as though they're constantly listening microphones sent to the NSA. As though we don't already carry devices on our person everywhere we go that have mics (smartphones).

Also, while we trade our privacy to Google (or Amazon, or whomever) in exchange for customization and convenience (a social contract I'm generally happy to sign off on), those companies have even more incentive to keep our data safe.

Google is one of the most valuable companies in the world precisely because it, and only it, has the AdSense knowledge (and whatever other knowledge Google collects about me) to target me.

Insurance companies go to Google and say "show our ads to people Googling insurance companies" – that's how Google makes money. It's not as though Google says "here you go State Farm, here's everyone who's been looking up car insurance." It's business model is based on proprietary customer knowledge. It can't give away this data; it's incentivized to limit it to its own ad-targeting tech.

Are there still problems with this model? Sure. If the government decides to subpoena Google on me, they'll turn over my Gmail. But is it a hell of a lot easier getting access to Google services (e.g. Google Maps knowing where I generally go and what the traffic is like) versus using, say, Duck Duck Go on a VPN (let alone Tor or Tails)? For me, and I'd assume most people, yes.

EDIT: I would also point out that we've long been facing the privacy vs. convenience issue. It used to be that merely signing up for a landline meant getting your phone # listed in the White Pages. Paying utility bills makes your name and home address a matter of public record (unless you choose to shield them via owning and paying through a corporate shell). Ditto real estate transactions involving your name/address. All public records, unless you choose to hire attorneys to setup shell corps for the sake of privacy. Not so expensive to do this now in the age of LegalZoom, etc., but this used to cost quite the pretty penny.

This debate is nothing new; it's merely evolving.


> those companies have even more incentive to keep our data safe.

Then why aren't they doing it, and why aren't they informing us when breaches happen?

I absolutely think providing that data should be voluntary. If you want to send it to them, go ahead! But in many ways it's not. I can't remove my data from those companies, nor can I control what they do with it, and that's a serious problem.


You really don't get it do you. Most of us aren't worried about Amazon and Google per se but rather what happens to our data when (a) they are compromised and (b) government surveillance increases in scope.

There have been countless incidents (and these will only increase in frequency) where people's sensitive information have been stolen and used for blackmail and identity fraud. There is also the increasing use of private data by governments for example in deciding on visa entry or immigration cases. The use cases for criminals and governments are only going to increase in scope and sophistication and will be applied not just to future data collected but current data.

These are all legitimate situations which are completely unprecedented and only possible because of the increased data collection policies of site like Google or Facebook.


The problem isn't really privacy, it's privacy asymmetry.

Would Facebook agree to make all of their employee web searches public? Would Google? How about all phone traffic? Emails?

Thought experiment: imagine a world where everyone can see what everyone else is doing all of the time.

Assume absolutely no exceptions or restrictions. You can eavesdrop on anyone in the world. Anyone can eavesdrop on you.

How many "I am fine with no privacy" advocates would be happy with this?

It's an extreme thought experiment to highlight how asymmetric the current model is. In the current model privacy is becoming a privilege that is available more and more selectively.

To eliminate the privilege, you either need user controls and permissions for specific profitable use cases, or you need full openness - which I think most people would find terrifying, for all kinds of reasons.


Exactly.

I would have far more respect for no privacy advocates if they made public a daily ISO of the contents of their computer.

Would they really have the same position once their identity had been stolen, their credit cards maxed out and every thing they have said taken out of context and made available to their friends, family, boss and the TSA.


> It's an extreme thought experiment to highlight how asymmetric the current model is. In the current model privacy is becoming a privilege that is available more and more selectively.

Slightly tangential to this topic, your comment reminded me of this short talk titled "Your smartphone is a civil rights issue" by Christopher Soghoian. [1] It truly is a great privilege to be able to control one's privacy in today's world (to whatever extent it is possible).

[1]: https://www.ted.com/talks/christopher_soghoian_your_smartpho...


> I'm ceaselessly amused by the folks fearing Amazon Echos or Google Homes as though they're constantly listening microphones sent to the NSA. As though we don't already carry devices on our person everywhere we go that have mics (smartphones).

> ...

> Are there still problems with this model? Sure. If the government decides to subpoena Google on me, they'll turn over my Gmail.

It seems to me like you've read about the Snowden revelations but don't see any issues with warrantless tapping and mass surveillance. As I said in another comment, privacy is not just about you or me. It's about all humans and the rights that we have granted ourselves in many countries around the world.


Prepare to be downvoted to death, but I think some people just want attention and feel important by crying doom.


I'm unclear why I must forfeit my right to privacy because others (you) think it's a non-issue.

Because you haven't defined privacy: The ability to control what is publicly known about oneself. I'd also add the ability to assess what is known about oneself.

You also ignore identity vis a vis privacy. A completely transparent world (a la Brin) has made identity theft a booming industry.

Lastly, everyone ignores property rights. I am my data, my data is me (see identity above). At the very least, if someone is making a buck at my expense, I want my cut.


"Who you are" is not simply a function of what you want.

And really, Alexa is not really that much more powerful by knowing what your favorite beer is; you already know that information. Until you consider Alexa to be an actual friend, any personal details about you that it keeps are marginally useless if it cannot function autonomously - by ordering your favorite beer without even asking. This is not an 'intelligent' behavior, it's just maintaining a list of preferences. To be honest, it sounds like you are conflating voice commands with AI proper. You can certainly have one without the other, and the former seems to be the thing you're valuing here.

I'm all for the concept of powerful AIs that know everything about me - so long as they know me as an actual person to care about rather than merely as a consumer to squeeze money out of. Which means understanding my boundaries and knowing what I consider offensive and acceptable behaviors.

What we have today are AIs that only learn about you what they find useful to their owners, not what I find useful for them to know.


Providing AI while respecting privacy is a difficult problem but it must be done. Apple has even published a white paper describing how they'll do it[1].

We should not have to sacrifice privacy for usability. There's a reasonable tradeoff and I believe Apple is doing the right approach.

1. https://www.google.com/amp/s/www.recode.net/platform/amp/201...


> "Alexa, play me that song I like. And while you're at it, order me a case of my favorite beer. Thanks."

The problem is that nerds are allergic to advertising because they are allergic to "being sold to" because they (well, we) like to think we're above such petty foolishness.

As such we are not the customer. Therefore nobody cares what we think.

And privacy will go away.

The problem with this is, what happens if privacy goes away too much and somebody abuses it? What happens when a malevolent dictator takes over and oh hey look at all these devices so conveniently set up to spy on all the people. How wonderful. What if a benevolent dictator takes over but their idea of good doesn't align with your idea of good? What if somebody decides that oh hey, drunkness is a problem, people do terrible things when they're drunk, let's round up everyone who buys more than 3 sixpacks of beer per week and put them in a holding facility and fix them.

You know all those futuristic utopia movies that turn out to be a distopia under the hood? We're living in one of those. The question you're answering is whether you're inside the utopia or outside. Those of us who embrace the lack of privacy and being sold to, we're on the inside. Those like Stallman are outside.


Who says that aversion to ads has something to do with believing I'm above being sold to? That sounds like nonsense. The reason I don't want to see ads is that they tend to be obnoxious and distracting, some actively disrupt the content I'm intent on viewing (interstitials, TV commercials, preroll video ads), and many end up serving malware.

It would be ludicrous to claim that I'm above being sold to. I'm not even sure what that would mean.


Perhaps you have nothing to hide, but other people do. The danger in your accepting these "robots" as they are is that those other people might end up not having a say in the matter.


The problem is not the utility these services provide -- which I agree scales with the amount of data you can give them! -- but rather the use of this private information in a number of ways (legal or not) that provide no benefit to the user, and in fact can be considered downright dangerous to the user.

This, I believe, opens the door for a company like Apple or otherwise to create a machine learning company with security at the forefront -- in essence, what if these useful machine learning models you use everyday were able to be locked down, so the personal data used by the model was only viewable by you, and NOT an employee of the machine learning company who produces said model?

(EDIT: A few word choice changes)


I see it this way too. For way too many people privacy seems to have turned into a kind of religious end in and of itself. I think evaluating privacy in real, material terms as in ("what actually happens to me if I gave up my privacy here, and what do I get?") makes more sense than treating it as quasi sacred.


In countries that are signatories to the ECHR (European Convention on Human Rights) it is _sacred_, given it enshrines a right to privacy in Article 8 for some 800 million people. The Court is pretty judicially active in enforcing the rule as well, even in member states that have governments with crappy human rights records like Russia.

America and a few others are arguably outliers in the western world for failing to recognize privacy, and the right to private family life, as a fundamental right in some form of constitutional legislation.


What if you found out today that your neighbors have been watching you undress for the past year? In material terms, nothing has changed and there is no material harm to you, but knowledge of that level of intrusive exposure without consent is something most people object to.


I genuinely don't really care about things like this. I mean sure It'd be a little odd if my neighbour would stare at me but I generally don't mind, as you said no harm done


> I see all of these articles on HN on how to break free from Google or some other eco-system because they're "evil." I dunno, I guess I don't have a CIA-level job that most of these commenters have where they need to be off the grid.

As a highly pro-privacy person, I find it ridiculous when people build up arguments like "I guess I don't have a (sic) CIA- level job that most of these commenters have...". Seriously, privacy is not just about you or me! It's about every human in this world, and the balance of power between layperson/citizen and state/corporation. Without protections like privacy (which is one among many), we'd never enjoy all the freedoms we take for granted every single moment. I'd strongly recommend reading this short and succinct article titled "Privacy protects the bothersome" [1] by Martin Fowler.

[1]: https://www.martinfowler.com/articles/bothersome-privacy.htm...


Except Apple shows that you don't have to sacrifice privacy. Just about all of their ML stuff happens on the device. So you can have things that are quite similar to what Google gives you, without giving up that privacy.


You gotta train on something though


I'm also not so hung up on privacy.

Think about the massive data gathering we could do in the medical field for example, to test the effectiveness of drugs and treatments if you could wear a "smart" bracelet that put its data in the cloud - how many more diseases could we cure?

Not that I'd feel comfortable sharing my back account # with you...


It's always that way--the surveillance state grows up around you, all the while ensuring you that no harm will come to you as long as you don't resist or subvert. But here's the thing about that: At some point, if we end up in a tyranny, your acquiescence and silence won't protect you. You will be targeted, perhaps randomly, perhaps by a neighbor with some petty vendetta. The point is, you have no idea what devils you are playing with. The Germans happily murdered the elderly, the retarded, homosexuals, gypsies, on and on. None of those people were actively fighting the regime, they were just simply useless eaters who got in the way.

The same story has played out dozens of times in history. Stalin, Pol Pot--tyrants kill for irrational reasons.


> How is any AI supposed to know what I want, if I try to be an anonymous user?

Store the data locally?


I used to feel incredibly frustrated at not being able to respond to this with words, based off of what I feel. This was until I read this post: https://medium.com/@FabioAEsteves/i-have-nothing-to-hide-why... - which almost perfectly encapsulates the emotion - "I have nothing to hide, Why should I care about my privacy?"


20 years from now you'll still be hearing the same songs and you'll still be drinking the same beer then. You'll be left to an echo-chamber of things that are similar but not different. If you're perfectly comfortable with that now amount of me trying to provide a counter-argument will do. I however think being left to my own devices without things being curated from past perspective is more enriching.


"Alexa, play me that song I like. And while you're at it, order me a case of my favorite beer. Thanks."

Wow, now I'll never have to leave my chair!


How much do they pay you?


Can't claim to be a fanboy, but I am a longtime user[1], and this is the primary reason I stick to them for my phone. I frankly can't imagine using Android the way I use my Iphone - the privacy invasions considered acceptable are well in to the "no go" range for me, before even getting to the malware that pass for "free apps". If I were somehow forced to use Android, I'm pretty sure I'd treat it as an adversarial device, mostly like a feature-phone.

Trust is vital in devices like this.

[1] I'm becoming less of a fan, as MacOS becomes "cloud aware" and less of a Unix workstation.


Not sure how you use your iphone or what you would need from a smartphone, but I don't understand the distinction.

Apps like Lyft, Yelp and Uber already know where you are so you can't use those.

You're left with maps and browser. People tend to use google maps and Waze on iPhone anyway so that point is gone as well. If they use Apple maps, I am not convinced that apple doesn't store location history.

So then you're left with a browser. Android lets Firefox run its own browser engine and you can install all the privacy extensions there.

On the other hand, with Android it's possible to take privacy a lot more seriously. Lineage OS lets you have much more fine-grained controls over all the apps and you can forego the whole google services privacy menace.


You've reduced the problem to only GPS location which is just wrong. Fact is, Android apps targeting 5.0 or lower can still read anything on my phone - SMS, location, photos, contacts, and well, everything else. And any root or ROM based add-ons to stop them are an impractical usability nightmare, where I could just own an iPhone.


Weren't such permissions made explicit when the app was installed?

I'm not worried about SMS because everyone and their mother can see it now.

I don't think apps that didn't require contacts during installation could access them.

To me all Apple products are a usability nightmare. I am forced to do simple things the way Apple wants me to do them instead of the way I want to do them.


Or you could say:

To me all Android products are a usability nightmare. I am forced to do simple things the way Google wants me to do them instead of the way I want to do them.

That line of reasoning just doesn't scale.

Like only learning to type on a Dvorak keyboard, doing things "your way" can have consequences. Rampant, arbitrary customisation of interfaces is, in my estimation, more often than not an exercise in painting yourself into a corner.


Completely agree with you on the interface front.

I gave up on interface consistency though because every app now has its own interface and vendors like Samsung have their own for each product.

I miss the old days of windows apps with consistent menus and obvious ways to use the programs. Now it's like playing some sort of text RPG where you have to try everything to figure out where some setting is.

The problem I have with apple is that things are not there because "art". Google is also very much guilty of it. But at least they don't copy all the apple problems and usually expose more of the internal workings of things than apple does.


>Apps like Lyft, Yelp and Uber already know where you are so you can't use those.

Only when you use them.

You can either not install them at all (problem solved).

or only allow them to "know your location" when you explicitly launch them and only for the duration of you actively using them on screen (problem lessened).


I don't know if they've fixed this, or if was just me not working the phone right, but Disney's park maps kept tracking when the app was closed.


From the "Privacy and Your Apps" presentation on Tuesday at WWDC:

> in iOS 11, users will be able to choose the “when in use” option at all times [when asked for permission to use their location]


> Disney's park maps kept tracking when the app was closed

Closed or in the background?

I was under the impression (in iOS 10 and earlier), that "Always" meant anytime the app was open, and "While in use" is only when the app is in the foreground. So if an app has "Always" on for its Location Services, it will stop tracking when I swipe up and quit it.

If I've been incorrect this whole time, please pass the tinfoil.


Additionally, with iOS 11, it seems Apple has forced the "while in use" option on apps that didn't include it on their own for location permissions.


You're correct. Manually killing an app from the recent apps list will stop it from doing background processing (e.g. tracking location). I'm not sure if they'll be allowed to start again if e.g. they receive a silent push, and I'm also not sure if they're allowed to handle geofences, but besides those two questions, killing the app stops it tracking you.


You can do similar things on Android. You can also turn off your gps in 2 seconds as well.


With the crazy malware and oparque permissions nobody really knows what's fully going on on Android though.

You could turn off the gps but that's too coarse: you might want it for some apps.


But that's how permissions work on Android though. You can grant them to an app when it's requested, or not. Or you can turn it off at the system level with the bug switch in the settings shade. I have an iPad and the permissions models are basically identical at this point.


For an Android alternative, check out CopperheadOS [0]. I'd argue it's better than iOS in privacy, since you can compile it yourself (excluding a few binary blobs).

[0] https://copperhead.co/android/


All these Android alternatives really make me wish I have someone other than Verizon as a carrier.


Could you elaborate on Android's weaknesses when it comes to privacy and contrast this with Apple's approach? Asking genuinely to update my understanding.


The glib response is to point out the difference between Apple's and Google's business models. Apple makes money by selling devices, Google sells ads (i.e. sells their customers' data to advertisers).


>(i.e. sells their customers' data to advertisers)

They take the ads, and distribute them to their users based on user taste that's their secret sauce. Giving user data to advertisers would be giving away their secrets I think.


> Google sells ads (i.e. sells their customers' data to advertisers).

They sell targeted ads, they do not sell customers' data to advertisers. i.e. Advertisers get to advertise on Google's platforms, but they do not get access to Customer data.


And that Apple is the OEM behind the device that runs their OS, and Google (usually) isn't.


Also that Android only gained the ability to enforce iOS-style fine-grained app permissions (prompting on first use for access to camera, location, etc., instead of a blanket grant at install time) one major version ago, which means that many if not most users can't actually get the benefit without buying a newer phone.

I gather there are some questions around the strength of its app sandboxing as well, but I can't speak to that at all. Perhaps someone better informed will do so.


Those permissions are also opt-in for devs at the moment (by choosing certain OS versions at build time you can still use the old permissions system).

I'm an Android dev and to me the biggest problem with Android from every aspect (development, security, monetization) is how poorly new versions of Android are supported on devices.

Apple's dig at Android 7 usage vs iOS 10 usage was spot on.


> (i.e. sells their customers' data to advertisers).

This is not true


Couple of examples:

1) iOS has had lazy permissions since the very early days e.g. when an app wants to use this microphone then ask the user right then instead of when the app is installed. This feature is still not implemented on all Android devices nor is it as seamless nor is it mandatory.

2) Apple is providing more and more frameworks e.g. CoreML which run only on the device. This means that developers don't have to run their own server side apps to process data.


I don't really see that as lazy. I see that as considerate/beneficial to the user. I much prefer to be asked in context what/how the app is going to use the microphone for rather than on initial install, when I might be like "why the heck does this app need to use the microphone?"


It was being used in the programming sense, not as an insult. When some code passes around a "placeholder" instead of a value and waits until it is used to bother calculating it, that is commonly described as "lazy".


Got it! Thanks for the explanation and not assuming I'm a programmer, because I'm not!


"[1] I'm becoming less of a fan, as MacOS becomes "cloud aware" and less of a Unix workstation."

How is it becoming less of a Unix workstation? It can still do all the Unixy stuff it could before.


What I mean is twofold:

- They're paying much less attention to the "Unixy stuff" than they used to. Old versions of common things take forever to be updated. Compatibility has always been shit, but it is getting worse. SIP means a number of things I tend to modify, can't be, without hassle[1].

- With a workstation, I expect to be able tailor it specifically to my work requirements. This is becoming increasingly difficult at the proliferation of "cloud" daemons increases and they lock down the system - the documentation for most of the daemons ranges from "sucks" to "nonexistent", so it isn't clear if any given one needed for stable operation or if it yet another thing related to trying to sell me music or some such[2]. Reverting the machine to a state where "root" means "root" is rather difficult (See SIP).

Apple's focus is on chasing the flavor-of-the-month social features and keeping up with the GOOGs. Which makes sense - the set of people buying that stuff is much larger than the workstation market. But it means they don't care so much about it, and make choices like letting the core OS get as buggy and unstable as it has become.

It is mostly fine for me. I built a nice king-hell PC running Debian that I'm very happy with. I didn't think I would, but after my last MBP died unexpectedly, I ended up buying a bottom-rung used Air because I'm hopelessly dependant on OmniFocus and a couple other OS X only productivity tools, and I sync my phone local-only. So it tends to live in the dining room, where I work on my schedule and read mail via ssh over breakfast.

So yeah, Apple still has a place for me, but it is peripheral. I spent mid-4 figures on building a PC this year, and mid-3 on that MBA. And I'm thinking about what I really need out of OmniFocus, and how much of that I can build myself.

[1] This is a good thing for many people, but I expect full control of my machines, and I do occasionally sketchy things like patching Safari. The problem with SIP is that I only need full control sporadically, and not for long, but it is a serious PITA to disable/enable. So it just stays disabled.

[2] One example of many is `parsecd`. No man page. Googling about shows that a lot of people think it to be related to location-based lookups for Siri data. Despite the fact that Siri is disabled on my box, it ran and asked for network access all the time, until I disabled it. Now, WTF is 'LaterAgent', and why is it in my process table?


I really cannot agree with you. I still don't see anything that affects using OS X as a Unix station. It works just as well as it did before. And I've never had an issue with SIP.


I'm glad it works for you.


That resonates well with myself (similar) experience.

The very same omnifocus problem solution:

* shorterm for migration: omnifocus on ipad

* longterm: trello - it will be slightly different, and you have to come with your own GTD system for it, BUT surprisingly the differences allow me to get fresh and new approach to GTD. it's worth.

as a bonus: you can check taskwarrior instead.

I tried every other software, but it sucked, meaning got some problems. IMO only trello or taskwarrior _might_ (still in the process) do.


parsecd is apparently "Used for Suggestions in Spotlight, Messages, Lookup and Safari" according to a Reddit comment (https://www.reddit.com/r/mac/comments/54870l/what_is_comappl...).

LaterAgent is used for system updates. Specifically, it appears to be what handles reminding you again later when the system prompts you to install an update and you select the option to remind you again later.


I wish I could get the equivalent of 'xset r rate 160 80' on a Mac. And about that Alt-Tab behavior...


I seriously doubt that there is a significant number of customers that Apple attracts by being pro-privacy. On HN and similar environments, sure, plenty of people here value privacy, as do I. However, don't think for a second that the community on HN is in any way representative of Apple's customer base at all. Apple customers buy Apple products because they work well, look nice, are popular here in the US, etc., but it's NOT because Apple has a strong privacy stance. The majority of Apple customers couldn't care less about privacy (and probably don't know much about it either) and given the chance, would choose Siri working well and not returning search results from Bing over more privacy any day.

So, I agree with your sentiment, but I do not agree with your assessment that Apple's stance on privacy is anything even remotely close to a significant factor in attracting customers.


I'm not so sure. It becomes a lot harder to explain Apple's very public focus on privacy features if you don't accept that it is a significant factor in smartphone buyers' decisionmaking.


In the past, Apple has marketed certain products towards enthusiasts and power-users, which gave those products a certain "prestige" that elevated Apple's image more generally. (I'm thinking about Pro products here, as they were marketed towards arts professionals). Perhaps Apple seeks to take a similar marketing angle here -- by appeal to computer enthusiasts' desire to privacy, maybe they gain some prestige more generally? I'm not sure.


Makes sense to me. Apple's sweet spot for marketing is people who don't care very much about tinkering with their stuff, but are fussy enough about how it looks and works to pay a premium for good design that works out of the box.

Prioritizing privacy and security are one of those things that fit as being fussy about things working well, but not wanting to put the time into configuring them to be so. If that crowd likes your stuff and recommends them, then the less technically savvy folks will pick up on the preferences of that crowd and it build's Apple's brand as making premium products.


For their younger demographic I would agree they don't care bout privacy yet. For ~30+ year olds I think it is a big pull. Especially those that have ever had their identity stolen (even though its not really relevant). The average person isn't going to understand how or why Apple's products are better at privacy but if they get the message out there I am certain a good chunk of consumers will see it as a plus.


>For their younger demographic I would agree they don't care bout privacy yet.

Maybe it depends on who you're dealing with, but in my experience teenagers these days are a lot savvier about these things than the typical people in my (30+) cohort are. (They kind of have to be, no? They actually have parents and teachers snooping on them in their real lives so it's a more concrete concern for them.)

This is one of the reasons kids gravitate to Snapchat more than Facebook or Instagram after all: posts on there expire. They have a 'right to be forgotten' by default that they don't get with the other services. So I'd say they still care about keeping personal information personal, it's just motivated by different concerns than it is for the 30+ demographic since they don't have as much sensitive health and financial information floating out there.


I originally moved to Apple because they had amazing products which were leap years ahead of the competition in terms of build quality and features. These days I feel that they have fallen behind in this space, perfect examples would be the new Galaxy 8 for mobiles and the Dell XPS series for laptops...

A major reason for me as to why I continue to stick with Apple is exactly that, the privacy and security focus they have.


That's probably true in the US, though I wonder if it is more important internationally.

There are a lot of people living under potentially abusive dictatorships.


I don't think the "average consumer" sticks with Apple because of their privacy stances though. They stick with Apple because of the well polished "cool" devices. If Apple can't keep up with the cool features of less privacy focused companies I don't think the average consumer is going to stick with them in the long run. The Apple coolness factor will slowly wear off and some other devices will become the new hotness. The privacy focused consumers won't be enough to sustain Apple if that happens.


While I don't really believe Apple will not also eventually succumb to the idea of making more money by incorporating tracking and selling out users, I really liked their initiatives for privacy-preserving data collection like the differential privacy approach they promised last year.

I hope they publish more in that direction.


> it's something people want

I feel the same as you do, but are we sure that the mainstream public actually WANTS privacy, especially when compared to the utility companies are providing by taking it away?


I don't think the tech community gives the general public enough credit when it comes to privacy. If you asked someone whether they wanted a phone that has more privacy risks but also more features or a phone that has less features but more privacy I don't think the former would win hands down. Maybe more would pick the former but a big chunk would pick the latter and that is OK for Apple. They've never needed the majority of the market.


If you blatantly told the consumer, yes. However, most of the privacy-risking utility barely reminds us of what we're giving up, so really it feels like we're losing nothing and gaining utility.

The lack of privacy has to feel tangible in consequence for consumers to care, IMO. Right now it doesn't.


Completely agree. I switched between Android and iOS for years because I enjoyed aspects of both, but the privacy concerns around Google (and by proxy, Android, thanks to the Google Play Store monopoly on app distribution) have seemingly permanently tipped the scales towards iOS at this point.


"(and by proxy, Android, thanks to the Google Play Store monopoly on app distribution) have seemingly permanently tipped the scales towards iOS at this point."

Do you even know what you are talking about? On an Android phone you could install other App stores and side load apps. You can't do any of this on iOS.


I think the argument is that app distribution is controlled by Apple on iOS and by Google on Android, and GP is happier ceding control to the former but not so much the latter. As Google Play Services become more entrenched in the basic functioning of the OS and apps on the platform, it becomes harder to extricate Google out of the Android experience, even if one has the ability to use other app stores.

I think it's a very reasonable position.


exactly, recently android was developed in a way that it's impossible to disable some core services which are directly associated with google services, so AOSP as such is almost impossible to exist separately from google.


You can side load apps to which you have the source code on iOS, for free.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: