Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

What puzzles me to no end is how many people were happy not only with having no control over their device (which is fine if they don't want it), but also other people not having control over their devices (which is totally not fine if they do want it).


Answer to your puzzle: because as soon as sideloading is allowed, sideloading will become required by the most popular apps.

And then suddenly I lose all the protections afforded to me by the Apple Store, such as easy cancellations of subscriptions, easy refunds of apps that don't work, a layer of protection against malware, and so forth. It also just makes my phone that much harder to use, as finding and installing apps becomes that much harder.

If everybody gets sideloading, that absolutely will impact me directly, and negatively. Does that make sense?


> sideloading will become required by the most popular apps.

This point keeps being made in these threads on here, and the response I’ve seen made, which I agree with, is that this clearly isn’t the case when you look at Android. Sideloading already exists and it is far from a common way to distribute applications.

From a business perspective, it really doesn’t make sense to force users to pull from outside the App Store, because you’re basically going to destroy your business. Most users are not all that technical and the moment you require them to fool around with apks or whatever other format, you’re going to lose a huge percentage of them.


>, is that this clearly isn’t the case when you look at Android. Sideloading already exists

The problem with using Android as a counterexample is that Apple iOS is more restrictive (e.g. privacy settings) than Android.

E.g. Facebook admitted they lost billions in revenue because of the Apple iOS ad tracking permissions change. That might be an example of Facebook forcing users to "sideload" Facebook+Whatsapp+Instagram to get around the privacy restrictions. In contrast, the Android platform didn't financially hurt them like that so there's less incentive to ask Android users to sideload Facebook apps.

So even a mega giant like Facebook has to follow Apple's rules because there is no sideloading to bypass them. A somewhat analogous situation in 2019 happened when Facebook violated Apple's app store policy and spied on teenagers by abusing their Apple developer account: https://www.google.com/search?q=apple+revokes+facebook+certi...

>Most users are not all that technical and the moment you require them to fool around with apks

I think some conversations about "sideloading" are muddy because casual conversation around it mentally includes alternative app stores rather than end users literally downloading raw ".app" bundle files


The first facebook issue that you mention is unrelated to the App Store, it’s an OS restriction. Side loading won’t affect this.

Apple can clearly make the OS secure/privacy friendly if they want to. The only layer of security that you may lose is the dubious “review” process, which clearly doesn’t do anything considering the amount of scam apps on the store.


>The first facebook issue that you mention is unrelated to the App Store, it’s an OS restriction. Side loading won’t affect this.

Your sentences above are a prime example of a technology mindset being so familiar with the underlying technology that it actually handicaps the analysis of how people might use the tech in ways you don't expect.

The way the sideloaded app gets around the os-level restriction is that they would force users to give permission to the ad-tracking. Otherwise, the sideloaded app has crippled functionality.

That scenario can't happen on Apple's offical App Store because their policies don't allow apps to have crippled functionality when users opt-out of ad tracking.

The theme is that the side-loaded apps can exercise way more freedom with clever psychological dark patterns that bypasses os-level settings.

E.g. see related example from Twitter: https://www.techgoing.com/twitter-ads-may-track-users-in-vio...


> That scenario can't happen on Apple's offical App Store because their policies don't allow apps to have crippled functionality when users opt-out of ad tracking.

There is a simple solution for Apple: disable ad tracking on iOS. The DMA doesn't require gatekeepers permit ad tracking. It only requires gatekeepers provide the same functionality they provide themselves. Apple is still perfectly able to provide a safe and secure OS under the legislation.


There's zero chance Facebook removes themselves from the App Store in the expectation that their users will sideload instead.


Obviously they wouldn't remove themselves. If anything, they'd offer Facebook Plus via sideloading, which gives you amazing deals and new features in exchange for granting a few, totally harmless extra permissions.


Frankly, opting into app tracking in the iOS FB app already greatly improves the experience, merely by improving the quality of ads.

https://www.nytimes.com/2023/02/11/technology/bad-digital-ad...


The thing is, Apple still controls how apps may be sideloaded, and what permissions those apps can use at the OS level. They have no obligation to make sideloading an easy process.


They do, actually. The DMA is one of the most comprehensive and impressive pieces of technology focused legislation in a lifetime. It expressly forbids gatekeepers like Apple from making the process of installing applications any more difficult than it is for Apple's App Store. The purpose of the legislation is to foster fair competition. It's not fair competition if Apple is allowed to make the process prohibitively complex or cumbersome.


I generally agree, but one problem is that many of Apple's rules are enforced primarily or exclusively through policy, not actual technical permissions. This is especially true for all the high-level ones around tracking.

Obviously, things like phone book access can be solved for sideloaded apps just as well as for App Store ones – just like Android has been doing for many years.


I totally agree with this concern as things stand.

But it's also been apparent that relying on code auditing wasn't going to be sustainable long term. The real answer is for Apple to beef up their sandboxing to prevent things like cross app tracking, coercing permissions from users, etc - independent of the app store review process or policies.

This is what the Libre Android distributions (eg GrapheneOS, CalyxOS) have been (slowly) converging on.


> But it's also been apparent that relying on code auditing wasn't going to be sustainable long term.

Why not? It seemed to be going fine. As the number of apps increases, so does get money the App Store receives. I don't see anything inherently unsustainable in it at all.


For the same reason that all central planning ends up being unwieldy - the world is complex. It's not the work of doing the reviewing itself that is unsustainable, but rather crafting some singular policy that can reject all "bad" while allowing all "good", compounded by having to work with governments/corporations/etc that want increasingly fine-grained censorship.


I wish Apple had attacked this from a different perspective. Instead of fighting side loading, remove the reasons that drive a lot of the demand for side loading. I should be able to buy a Kindle book in the Kindle app. If I download the Netflix app I should be able to sign up for Netflix in the app (or at least be redirected to their web site). Don’t charge fees to competitive services (ie music, books, movies, etc…).

I originally thought I would never load a different App Store but now I might. If an App Store came out that was highly curated (ie no casino games, no subscription scams, no advertising against competitors), that listed exactly what the in-app purchases are before buying, and removed developers who get a lot of complaints in the store, I would be interested. Apple hasn’t been a good steward of the App Store.


> I wish Apple had attacked this from a different perspective. Instead of fighting side loading, remove the reasons that drive a lot of the demand for side loading.

Couldn't have said it better. The only things I could see myself sideloading are indeed the Kindle app (I like being able to single-click buy books without having to switch to Safari), a full browser, and possibly some retro computer, calculator, and console emulators.

All of these are (or at least have been, before I switched) been possible on Android via official apps from the Play Store.


And allow: Legal emulators, and alternative browsers (with their own rendering/JS engines)


I kind of hope they hold out against alternative browsers. Safari on iOS is the last thing stopping a total takeover by Blink.


They can't. The DMA requires permitting alternate browser engines. See Section 43: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A...

I'm fine with it. Apple has been intentionally hindering WebKit development for years to hobble web apps and maintain their App Store dominance. They'll finally be forced to compete again.


Years ago they had the chance to shape how installing software outside the App Store would work. They could have gone the Android route and it's possible this legislation never would have arrived. Their arrogance and greed created such a animus that we now have the DMA; one of the most comprehensive pieces of technology focused legislation in my lifetime.


> as soon as sideloading is allowed, sideloading will become required by the most popular apps

Bingo. Chiefly worried about Facebook and my folks. As well as compliance deciding everyones' personal phones need antivirus spyware.

That said, I think Apple has the playbook with SIP on Macs: make it scary to disable and clearly in power user territory.


How hard is to to simply not install the Facebook app? I've been choosing to not use facebook for nearly 20 years. If somebody tries to socially pressure you, just say no. If they press, explain your reasoning and reassert the "NO" until they leave you alone. Good friends won't try to bully you into something after you've explained yourself; anybody who does is an asshole and you can tell them that.

> corporate compliance

I've never enrolled any of my personal devices in any sort of corporate network, and I never will. Just say no.


You can’t “just say no” to network effects, though. If you’re trying to, for example, attend a pickup game of baseball, and that game is organized on a Facebook group, what is your alternative? If you’re trying to get a job, and the recruiters are on LinkedIn, what’s your alternative? You have to go to where the other people are, in general…


> You can’t “just say no” to network effects, though

Oh? So are you saying that monopoly power is a real thing, and that a company like Apple can extract a 30% monopoly fee, because of this network effect?

The problem with this argument is that Apple fans on one hand have been smugly commenting for a decade, "go but an Android" or "just don't publish on the iPhone" .

And now, they are turning around and suddenly discovering what market power is.

If Apple had merely reduced their 30% fee to 5% from the beginning, we wouldn't be in the situation.

But thems the breaks. Now every Apple fans will have to hear the same exact argument, that they used against others, for a decade, thrown back in their face.


My way of doing it is to just say to people hey, can we use thus instead I can't use FB for ... reasons, here let me help you install it.

I had problems with that only once. I guess it depends on people you are around with. But most people have different groups of friends on different apps already so it's usually no big deal.


Have somebody on the team [e]mail out the schedule like has always been done. It's not hard. If you feel the need to explain yourself, just tell them Facebook facilitates genocides in Asia or something like that.

If you actually try saying no, you'll find that it's actually easy.


> If you actually try saying no, you'll find that it's actually easy.

And you become the pain-in-the-ass of every friend group and professional circle. No one likes dealing with annoying people like this.


> Your friends don't like you

No u.


Sure, but a web-browser works well enough


Oof, yes, I didn't even mention corporate compliance.


Like all the popular android apps require sideloading?

No, at most you'll pay more for the same app your coworker sideloaded. The price for apple protection, +30% on everything.

Most people didn't extract pictures from their phone before apple cloud (or w/e their service is called) appeared. I know because i was the tech support for my family for those 5 years. How would they sideload?


The premium is actually 42.9%, since that is the amount a developer needs to raise their prices to offset the App Store's 30% fee.


Why has that not happened on Android phones?


Has Facebook publicly thrown a huge fit over Play Store rules trashing their revenue?

They claimed that they expected Apple's rule changes a while back to cost them $10 billion dollars in 2022 alone.

Things may work out as the have with Android sideloading, but they may not. Incentives definitely differ between the two. It's also not clear to me that if sideloading is forced via regulation, it'll look like it does on Android—both operating systems may be forced to make it easier than it currently is on Android.


Apple lets big companies get away with behaviour smaller developers would get instantly banned for. I very much doubt that Facebook is not somehow bypassing iOS' special privacy rules. Every now and then Facebook breaks their servers and hundreds of common apps crash on startup on iOS (https://9to5mac.com/2020/07/10/app-crash-facebook-sdk/); their network libraries are everywhere.

And, to be honest, who is Apple to dictate what Facebook's users can and cannot pay their Facebook subscription with? If people are fine with Facebook's cyber stalking, let them install the stupid app. You can still use the web version from Safari with all of the ad blocking addons you can find. Apple isn't the government and they don't have power of attorney, so I know what basis they have to say what apps you can and cannot sideload onto your phone.

Even still, I doubt Facebook will leave the app store because of this. They may provide some kind of "Facebook Plus" that you need to sideload, but the app store has too many eyes on it because it comes preinstalled.


> They may provide some kind of "Facebook Plus" that you need to sideload, but the app store has too many eyes on it because it comes preinstalled.

The nightmare scenario, for the "please don't change it" side, is that one of a handful of big players does this but also uses it to push an entire alternative store. Facebook and Epic are the most likely to try. Maybe Google, outside chance Microsoft tries. I doubt any would bother to just push sideloading an app, without using it to make a play to become the second of an app store duopoly on the platform. Basically the same strategy Steam used to gain market share—"here's our new game that everyone wants... oh, by the way, to use it you have to install our store".

I mean, Epic's been burning stacks of Benjamins for at least a couple years giving away tons of games (most of it not even cheap shovelware!) to buy marketshare for their desktop app store—it's not implausible they'd give away a lot of free games or other software to get iOS users to install their store, to make a play for the #2 (or #1!) app store position on the platform. And Facebook could probably get people to install theirs by just adding some visual bling to users' posts when they use the version from Facebook's store—might not even have to give them actual extra features to make it happen.

Maybe none of that happens, sure, but it might. If these changes brought by regulations end up making sideloading easier than it currently is on Android, on both platforms, I'd say it's a certainty that something like that'll go down, at least on iOS (more money to be made there; store's more restrictive) and maybe on Android, too.


I don't think Facebook has enough apps to make an app store happen. Amazon and Samsung couldn't get their app stores onto other people's phones, and not even Microsoft could make Windows Phone happen.

I can see Epic starting a mobile game store. And, honestly, I don't see a problem with that. Apple is using Apple Arcade as one of their many "stay with us and you get all of this stuff" services, so why not? Perhaps Microsoft will join the fight and take Game Pass to mobile phones. May the best app store win.

Apple clearly has the upper hand no matter how this plays out. They'll actually have to compete, which means they may need to fix the review situation and loosen some of their policies to allow for things users want rather than make their users comply with what they want. They can stick to their "no video game streaming, no emulators, no links to your website" policy if they want to, but that'll only work as long as their users agree with them.


What about Fortnite? There are also some apps that are only available in particular (non-Google) app stores.


Sure, there's Fortnite, and a smattering of other apps that aren't in Play Store. But, even though Android has made sideloading easier over time, it's still not that common; most popular apps don't even offer an apk download outside the Play Store. Attempting to load an apk with the setting off used to just give a failure message that quickly disappeared; now it actually takes you to the setting and asks you if you want to do it (with scary text suggesting you don't).

Certainly, Play Store doesn't feel as restrictive as the App Store, so that's probably a factor. But I doubt popular apps will drop Apple's store, because it will significantly reduce the number of people willing and able to install their apps.


Android hasn't restricted cross-app tracking from Facebook and such as strongly.


It has. Fortnite is not available in the Play Store.

Given that iphone owners are more wealthy I expect this to happen much more often when sideloading is allowed on iphones since there's more money to be made. It's gonna get bad imo.


Yes, these kinds of “second-order effects” are real, and common. There is probably a good summarization of it in game theory, or economics.


> as soon as sideloading is allowed, sideloading will become required by the most popular apps.

Android has always supported sideloading, yet in almost 10 years of using Android, I've never had to sideload any commercial app.

Anecdotally, Amazon has tried to push their app store for a while by incentivizing installs with free games and the like, but none of these weren't also available on the official Play Store. Nowadays, it's all free-to-play anyway, but that's a different topic.


Paraphrasing: "If you don't want to, don't sideload apps, no one is forcing you to" - do people really not see the problem? It's not that technically unsophisticated users will want to sideload apps. They don't know / don't care / have different things to worry about.

But they want their Facebook. Or SnapChat, or Insta, or TikTok, or whatever.

Once other app stores are allowed, there's nothing stopping Meta (for example) from revoking their existing apps, and requiring the use of the Facebook App Installer for access to Facebook. They've paid people in the past to use their Onavo VPN app to bypass Apple's privacy controls, so this would be unsurprising.

Of course, that's just an example; replace with the next SnapChat, TikTok, whatever. If that's the thing that teens want, and the way to get it is to click a bunch of "Yes I agree" dialogs, they'll happily do it. And now suddenly some developer has access to all your family financials through your teen.

If your solution is "well, people shouldn't do that then", you might not understand teens. (Or grandparents. Or regular people.)


> there's nothing stopping Meta

Well, there is maybe one thing. That is their projection of reduced installs. It's not just an issue of clicking "Yes". It's probably also an issue of knowing how to do it in the first place. The first party app store will always be easier.


This is what i find most interesting about this whole debate.

Read the comments on the article itself, it is just full of "i dont want to do this".. so great, don't sideload apps (no one is forcing them to), but why are they so keen on preventing others from doing it as well?


Apple's leverage has given it de-facto regulatory power that it has, to a considerable extent, used in my favor.

It might be that nothing changes if sideloading is made much easier, or other browser engines allowed, or whatever. But, that's not guaranteed.

Since I like the current situation—at least, better than the alternative of having no one push back on things like spyware-loving megacorps—I'm not in favor of risking changes to it.

My ideal situation would be that a lot of what Apple prevents on their platform were illegal everywhere so it'd hardly matter, but the US, at least, does not seem to be heading that direction anytime soon.

So, that's why. It risks changing the current situation such that I would find it worse, overall, and I'd prefer not to risk that.


> Apple's leverage has given it de-facto regulatory power

Indeed. This is called "being an monopoly" and "using anti-competitive practices to control a market, in violation of anti monopoly laws".

Yes, anti competitive practices work.

Yes, being a monopoly works.

And yes, it has produced some good things like Apple's focus on privacy.

But it has also produced other very not good things, like the 30% Apple tax.

But, it is at least comforting that people are now saying the quiet part out loud, which is "yep, Apple had anti competitive market power the whole time, I just like monopolies".


> But, it is at least comforting that people are now saying the white part out loud, which is "yep, Apple had anti competive power the whole time, I just like monopolies".

It's... been the entire argument, the whole time, for the "please don't change it" side. I'm not even aware of another angle on it. It's never been "quiet".

> I just like monopolies

I like my life being better than it might otherwise be. In this case, yes, that means I'd rather this monopoly stick around at least a while longer. I'm entirely not a fan of black-and-white positions on most issues. Monopolies generally suck. In this case, however, one particular monopoly seems to be giving me significant benefits I might not otherwise have. Now, if I could trade Apple's monopoly for a harsh crackdown on monopolies across the whole economy, that'd be easily worth it—yes, please. Just to "liberate" iOS devices, though? Nah, I'd rather they leave it alone.


> . It's never been "quiet".

Well, it gets conveniently ignored anytime someone would bring up problems with said monopoly.

For example, the 30% Apple fee is a consequence of their anti-competitive market power.

And yet, if you start complaining about that, the response will be to pretend like the anti-competitive market power doesn't exist, and that you should just "go publish on a different app store" if you don't want to pay that monopolistic fee.

You can't have it both ways here. You cannot say that you like their monopoly power, and then pretend like it doesn't exist when the same exact market power allows Apple to extra 30% of the money from the app store market.

> Now, if I could trade Apple's monopoly....... Just to "liberate" iOS devices, though? Nah, I'd rather they leave it alone.

Well then you should blame Apple for the situation we are in now.

People wouldn't be forced to regulate Apple, if they hadn't been abusing their market power for a decade.

If Apple had instead chosen to lower their app store fee, to 5%, then we could have gotten the best of all worlds, which is a focus on privacy, and no monopolistic fees.

Its too late for that now. If only Apple hadn't fought these efforts so much, they could have given everyone a worthwhile compromise.


I like the phrase “de-facto regulatory power.” Not only is it the case that we don’t have to deal with annoying stuff like “enable the facebook store to download our app,” that is, poorly behaving apps in non-official stores. It also takes away one of bluffs that Facebook and friends could make. They don’t even have the ability to say “Apple, make your rules more permissive or I’ll open up a Facebook store.” They don’t even get to negotiate. It is great.

If alternative app stores were allowed, I’d probably download a GNU iOS store. But that’s about it, and it just isn’t worth it.


It's probably a misguided fear based on how bad things are even with the App Store, but I'm worried about each company moving its software to its own sites and requiring a more complicated, frustrating, or more privacy-invasive process to use the software over the requirements set by the App Store.


> Read the comments on the article itself, it is just full of "i dont want to do this".. so great, don't sideload apps (no one is forcing them to), but why are they so keen on preventing others from doing it as well?

because it's going to make unscrupulous companies like google/fb/etc all force you to go through their app clients to install their sideloaded apps, without any of the scrutiny and control the apple store has provided historically. that's not really a world I want to live in. While yes, I can just uninstall those apps, some are nearly intrinsic to a mobile experience, like the youtube app.


Shouldn’t most of the protections come at the OS layer? Weird tracking nonsense isn’t stopped by App Store policy alone (far from it!)


Apple can and has threatened to pull apps from the store for unscrupulous behavior. Absolutely no one is claiming that the app store itself provides protection. It's the fact that Apple can decide who gets to publish on a device that over a billion people use.

I'm also not really sure how OS level protections would prevent an app from sending out data it shouldn't. Apple is acting as a regulator here because no one else is.


Similarly how they do it on Android?


1) Android doesn't restrict spying as much as Apple does,

2) Android is far, far less lucrative per-user than iOS.

Maybe sideloading on iOS will work out like Android has. Maybe not.


You will be forced to if say an app you depend on goes outside


I really don't care about having full control over my device as long as my device doesn't stop me from doing any critical function.

Life is too complex and there is too much going on and too much to figure out and too many demands on my time, I just want to pick up a device, use it for what i need and then put it away. I don't want to spend hours tinkering to get every little thing the way i want it, i'm happy to outsource that to someone that knows what they are doing and in return I get a device that just works.

Now we are going to end up with a bunch of app stores, which is horrible and annoying to manage on a phone, side loading apps, apps requiring certain app stores so you have to download that app store just to get it and then apps that don't meet the standards that Apple have set.

If you don't like that, you could have bought an Android, but I was happy with it, I want my devices to get out of my way.


It’s pretty simple. Side-loading can be exploited by social engineering.

Two very bad consequences for me if sideloading were easy:

1. There would be no safe product to recommend to my aging parents who would be vulnerable to social engineering.

2. A company with a popular produce like Facebook could go outside the store, which would normalize side-loading, thus rendering argument like ‘people who want safety can stick to the store’ moot.

The arguments about not wanting to control what other people do are moot. If you want a platform with side-loading, buy android.


Side loading is already possible. Yes, you can only do it for a few days at a time, but that's why there's an easy tool that will refresh the application for you.

I haven't heart of social engineering involving https://github.com/altstoreio/AltStore but maybe you know something I don't. Either way, installing apps onto iOS devices over the network exists today.


Wouldn't it be fairly straightforward to lock down a particular device with the unlocking step tied to another phone ? Like let's say I buy a phone for my kid and I lock it down using my iphone. For installing any app on my kids phone they require some form of authentication from my device. With more people in the loop I feel social engineering becomes more difficult


My family buys their own phones but I’m assumed to be tech support when things go wrong. I do not want the responsibility of locking down their phones (and neither they do).


I just think back to before the iPhone. If you wanted something on your phone, it was still a walled garden, just one that the carriers put up. A new ringtone would cost you, and you’d be charged monthly for access to using gps through your phone.

By strong arming carriers Apple took this revenue to themselves which had the paradoxical effect of opening things up from where they were before. Without this, there’s no doubt you’d be using a Verizon App Store and I’d have AT&T and governments would see no need to take action because there was carrier competition.

Is being able to install whatever you want on your phone, a good thing? Undoubtedly, but we wouldn’t have tasted this opportunity without Apple’s move to take App Sales in house. We also have to be mindful of the devil we don’t know. if you’re OSS you see sideloading as blissfully unchaining your device, but if you’re an Apple competitor you see it as a chance to do everything you were forbidden to.


Depends on the phone. On a Symbian, you just downloaded a SIS file; later versions required code signing. Afaik, WinCE and Palm phones were similar. I had some java capable feature phones that were similar, put together a jad file and hope that write once, run everywhere works (I remember my first phone had some features that used a J2ME standard interface exactly backwards; turn on backlight would turn it off, and vice versa). I didn't even select those two phones for their openness, I just had them and tried to write/run code and it was available.

Certainly, the carriers had stores, but it's not like they had software I wanted to run.


The US isn't the whole world.


Because software companies have proven they can't be trusted-- as soon as they can Facebook or someone will try to force side loading as the method to get their apps.


One argument for this position is that this policy essentially gets people to trust iOS software more, and to buy more of it (sideloading will certainly increase at least the absolute amount of malware out there, or apps that don't meet Apple's criteria). This position is somewhat supported by the fact that iOS users spend MUCH more per user on software and in-app purchases than Android users even of similarly expensive phones.


Umm ... the sandboxing on ios is extreme enough that malware is just not having much to do.


Because the people in my life who aren't as technical as me and I support will be taken advantage. Sideloading would make their lives noticeably worse as scammers, hackers, and thieves trick them into doing dangerous things. Not giving them the options makes their phone a safer place, which is why people want it applied to others.

Smart tech users do lose out in the trade off, but it is a trade off.


I have plenty of control and am happy I don’t have to deal with developers that installs outside AppStore like Mac, getting hacked is no joke and side loading ups the chances


Everybody thinks they need something they don’t really need.


It’s a device for convenience. I want the critical functions work well. If you can make that work in an open system, great but I haven’t seen that being successfully done.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: