Sideloading Bill Would Allow ‘Malware, Scams and Data-Exploitation to Proliferate,’ Says Apple – MacRumors

Sideloading would enable bad actors to evade Apple’s privacy and security protections by distributing apps without critical privacy and security checks. These provisions would allow malware, scams and data-exploitation to proliferate.

Source: Sideloading Bill Would Allow ‘Malware, Scams and Data-Exploitation to Proliferate,’ Says Apple – MacRumors

As if malware, scams, and data-exploitation apps don’t already exist in the App Store. I would argue the opposite of what Apple is claiming, in fact. If some scammer was tricking people into installing a sideloaded app that stole all your data, word would get around, and the traffic pointing to that app would eventually die off. Instead, what we have are lots of crummy apps in the App Store, doing specious things, with Apple’s implicit blessing, with an overwhelmingly-spammed review score. And these things are stubborn.

This guy has made waves pointing out how widespread the problem is.

Apple’s recalcitrance around their walled garden smells funny to me. I get it. I mean, when there is literally no other option for people, you get to act as a middleman on every transaction. But how much money is enough for a company which vies to be the world largest market cap from month to month? Whatever that figure might be, they surely flew past it a long time ago.

The Crushing Weight of Knowing What You’re Doing

“Who are you and why are you here?” –Dave Cutler (DaveC)

Source: 012. I Shipped, Therefore I Am

Steven Sinofsky, once a huge wheel at Microsoft, for a very long time, is writing a series of articles chronicling the halcyon days of the early PC business at Substack. I can’t quite bring myself to subscribe, because most of it is free already. Plus, there aren’t many surprises for me, since I was living it during that time.

When Windows NT was introduced, I was quick to jump on board. I was already experimenting with Linux towards the end of ’94. But then I saw a disc of NT 3.5 (not even 3.51 yet) on someone’s bookshelf. He said he wasn’t using it, so I snapped it up and installed it. For the next 20 years, I would dual boot my PC’s between Windows and Linux. I only used Windows for gaming, but for that use, it was obstinate. I tried every incarnation of wine and Crossover and PlayOnLinux and everything else. Nothing has ever let me run Windows games on Linux well enough to warrant getting rid of a native partition.

The content of the slide above is of no consequence, as is pretty much the case with all presentation slides. What’s interesting to me is the little toolbar on the top, left side. It’s from the early Office XP days, back when Microsoft was new and cool. “Before the dark times. Before the empire.” Seeing it evoked a visceral response. As a computer nerd, those really were interesting and exciting times to live through. From the article, that screencap is from 1992. Competing against giants like IBM, HP, and Sun, Microsoft’s eventual dominance was anything but sure at that time. And that’s what’s prompted me to write this anecdote.

In 1995, my Fortune 250 company didn’t even have an internet connection yet. I was using a phone line, and a modem that I conned my boss into letting me get. It was over this modem that I downloaded all 54 floppy drive images of Slackware Linux, on a computer running Windows 3.11 with Trumpet Winsock, connecting to a free SLIP dialup bank in California.

At first, I was much more into NT than Linux. I skipped Windows 95 entirely. I don’t think I ever had a computer that ran it.

I remember how easy it was to setup a dialup connection in NT. By 1996, I was running a dual Pentium Pro with 384 MB of RAM, SCSI hard drives, and a $2,500 video card to do FEA work. The total cost was about $10,000. A coworker got a SGI Indy to do the same sort of work, to the tune of $80,000. The company still didn’t have an internet connection, so he also got an external modem, and hired a local ISP to come set it up. The guy came and screwed around with the connection for 4 hours. I kind of razzed him, by pointing out that it took me all of 15 minutes to configure the same thing on NT. That’s how smug I was about NT versus Unix at the time.

The best part was still to come.

For the next week, the ISP guy still couldn’t get that Indy on the internet. Every time it would connect, the kernel would segfault, and the machine would crash.

But that’s not the best part.

The ISP guy worked with SGI to patch IRIX to fix the modem driver, and finally got it working. My coworker left it connected to the internet all the time to get his email. Things worked fine for a few weeks.

Then the company got a T1 internet connection, and then connected our facility to the main office via a sonet ring. I was really looking forward to not needing my dialup connection any more. But, the first morning, no one could access the internet. Complaints were made. Investigations were performed. Our internal IT would fix the problem, and then it would come back.

Here comes the best part.

Finally, someone realized that computers inside our facility were getting the wrong gateway address to get to the internet. They realized that they were picking up the IP address of my workmate’s Indy, which was advertising itself as a route to the internet, and since the number of hops from computers in the office to the Indy were less than skipping over to the central office, they were preferring its modem, and the Indy’s phone line would choke from the load.

I recall very clearly that there was a simple checkbox in the dialog for setting up a dialup connection in Windows NT for advertising the connection to the LAN as a route to wherever you were connecting. It was on by default, but when I was running through the process, I quickly realized that this was NOT what I wanted, and un-ticked it.

And I felt pretty smug about being serious about NT at the time.

I stuck with NT as my primary interest until some time around 1998 or so. Then Nat Friedman and Miguel de Icaza released Ximian Desktop for Linux, which made Linux on the desktop really pleasant to use. I wasn’t doing analysis work any more. I had transferred to become the system admin of all the Unix machines in the advanced engineering group, so running Linux was a perfect fit. After that, it was pretty much all Linux, all the time, until switching to Macs just a few years ago.

> How do you deal with Microsoft’s crap on a daily basis? I don’t use Windows 11… | Hacker News

How do you deal with Microsoft’s crap on a daily basis?

I don’t use Windows 11. On Windows 10, I modify the installation image with DISM, removing as much of the unnecessary and user-hostile stuff as possible…

I make extensive changes to the registry that disable all the unwanted stuff. Some of these settings are not documented, and even the documented ones are likely to change without notice or become re-enabled by default in subsequent builds. For this reason, to avoid such unpleasant surprises, I prevent any automatic updates.

Source: > How do you deal with Microsoft’s crap on a daily basis? I don’t use Windows 11… | Hacker News

There was a time when I was reinstalling Windows XP so often that I made a “slipstreamed” install disc with Service Pack 3 pre-integrated, but this is on a whole other level. If I’m being honest?… I kinda want to try it. If I’m reading the blurb on Microsoft’s docs correctly, DISM is not, in fact, some tens-of-thousands-of-dollars corporate thing, but something that ships with every copy of Windows? That can’t be right, can it? In any case, I never want to hear about how much “work” it is to run Linux any more, when this is what it takes to run a copy of Windows that Microsoft doesn’t actively sabotage on a routine basis.

The Ticking Bomb of Crypto Fascism – In These Times

Crypto, like meme stocks, is a poor replacement for the American dream. A functional nation would end gerrymandering, pass campaign finance reform, end the filibuster, abolish the undemocratic U.S. Senate, tax great wealth, institute public healthcare and build a social safety net to ensure that no one in our very wealthy country slipped all the way through the financial cracks of life and was ruined. But that’s not the American way. The American way is to cheer on the few lucky ultra-rich people, and fete them as heroes, and look for a way to emulate them, although such a thing is mathematically impossible.

The bitterest irony, perhaps, is that while the regular folks flock to crypto because they think it’s a utopian land of opportunity for the little guy to make a buck, it is, in fact, largely controlled by a small cartel of rich investors. Just like everything else.

Source: The Ticking Bomb of Crypto Fascism – In These Times

Well said.

Spam at Google

As a programmer, who maintained his own email server, directly on the internet, from his home, for many years, I understand the problem of spam better than a lot of other people. It’s tricky. I get that. But, come on, Google. You have 100% certainty that this stuff is garbage, and can be zapped before it even hits the junk folder.

When the traffic firehose is pointed at you – by Ryan Broderick – Garbage Day

The one mystery we weren’t able to figure out is why any sane person working at Facebook would feel comfortable publishing a content report that admitted that the most viral publisher on its platform this year was a barely active drop-shipping scam page full of stolen video content run by an LLC that doesn’t even exist anymore.

Source: When the traffic firehose is pointed at you – by Ryan Broderick – Garbage Day

I’ve seen several of these posts on my own feed, because my connections will comment on them.

This is the mechanism that’s leading society by the nose now. It’s well understood. Cambridge Analytica revealed it, and this lever is now longer, more unstable, and more susceptible to error and money than ever. And, instead dismantling Facebook, or muzzling the influence of the algorithm that can direct the attention of the entire country, Meta was allowed to be created in order to further insulate Zuckerberg and Facebook board from further journalistic scrutiny and legal oversight.

Ping. Ding. Chirp. Notifications Are Driving Us Crazy.

With workplace tools multiplying and personal messages creeping in, it can be hard to get anything done.

Source: Ping. Ding. Chirp. Notifications Are Driving Us Crazy.

Ha ha.

No.

I am ruthless about silencing all notifications from almost all applications, and then I tailor the notifications from the remaining apps which I allow to bug me. I am also vigilant to either unsubscribe or make mail rules for any email I don’t want. I auto-silence any call from unknown people, and use RoboKiller to automatically redirect spammers. You can make these things work for you, but it is work. The upshot is that, if there is a red bubble somewhere in my field of view, then I work on it.

Apple’s $64 billion-a-year App Store isn’t catching the most egregious scams – The Verge

While it’s impossible for us to tell how many of the horoscope app’s 32,000 star-only ratings are fake, Eleftheriou says Apple should have no problem with that. “When you consider refund request rates, app usage, and other associated info that only Apple has, you could imagine a totally revamped discovery system that does away with the current crude star-rating system that hasn’t seen any innovation since Bezos pioneered it 20 years ago,” he suggests.

Eleftheriou tells me that Apple has removed over 100 apps due to his reports — and if you’re wondering whether his online crusade is personal, the answer is most definitely yes. He began digging for scams after his own app FlickType, a keyboard for Apple Watch, was overtaken by scam apps that didn’t work and charged ludicrous fees, yet prospered due to fake reviews.

By the way: you know that app that John Gruber helped draw attention to in 2019, the one that reportedly charged $10 every week for wallpaper you could find free online? It’s still on the App Store. The app never got permanently removed. It currently has a 4.1 rating, despite countless negative reviews, and SensorTower estimates the app still makes its developer $10,000 a month.

Source: Apple’s $64 billion-a-year App Store isn’t catching the most egregious scams – The Verge

There are several things that are becoming apparent to the world after 20 years of “Web 2.0.” One of those things is that the ubiquitous 5-star review system is dead on the table. Every one is being gamed to the point of unusability. I don’t even look at the review scores on Amazon or the App Store any more, as those scores are actually worse than having no score at all. Netflix got rid of their scoring system awhile ago, and I find their recommendations actually improved. The rest of the world must follow suit. The only internal review system I trust is Steam, and I wonder how long I can continue to do so.

Every time you think you can trust a rating or a ranking on the internet, remember that this is what you’re up against.

Speaking of which, maybe I should buy some Twitter followers, or some engagement on this web site…

M1 Max Chip May Have More Raw GPU Performance Than a PlayStation 5

Source: M1 Max Chip May Have More Raw GPU Performance Than a PlayStation 5

So what?

Back in 2019, I was starting to think about an upgrade to my 2014 MBP, which is a darn-near perfect machine. (My son has it now.) However, I didn’t want a TouchBar, nor to put up with a lack of a physical ESC key. There was never a “killer app” for the TB to make it interesting, and I use ESC extensively when running vim. So I thought I’d just wait, and see what the next generation would bring.

But then my wife started saying that we probably had the money for me to upgrade, and I don’t need to be told twice. When your wife is open to you making a major purchase, you do it, even if you’re not quite ready. So I bought a 2019 with an i9, 32 GB of RAM, 512 GB SSD, and a Vega 20, hoping beyond hope that it would play some AAA games passably well. The total was $4,000.

The only thing I was really playing on the PC at the time was Civilization V. It played it about as well as my old PC, so I just kept playing it on there, to keep the heat load off the MBP.

Then I started playing Elder Scrolls Online, so I tried it on my Mac. It stutters every few seconds, like it’s texture thrashing, and I thought, well, Bethesda just didn’t optimize it for the Vega, and that’s too bad. But then I saw it running on a friend’s 2020 MBP, with only integrated graphics, and it runs… pretty well, actually! So I spent an extra $750 upgrading to the best GPU I could get, and it actually made gaming on the Mac worse for me. So I continue to play ESO on a twelve-year-old PC with an Athlon64 and a nVidia 9xx-series GPU. The fact that this rig plays the game pretty well only adds salt to the wound that my expensive MBP basically can’t play it at all.

The new MacBook Pro’s look perfect, and base models start out about half the price of this one. Ouch. If I had just waited a couple of years, and given up on the stupid idea that gaming on a Mac is ever going to be a thing, I’d be in computing nirvana now.

Whatever “power” they may put in the thing, I just don’t see gaming companies supporting it. Bethesda has already said that will not be porting ESO to M1. This isn’t surprising. I mean, there were only a handful of AAA titles ported to Mac when they were running Intel CPU’s and AMD GPU’s. Now that both halves of the whole are completely different architectures than their PC brethren, I don’t see any gaming companies making the effort.

Mac for programming. Playstation for gaming. Windows for ESO. God, I wish I could cut Windows completely out of my life. I’ve been tempted to move to PS for ESO, but I can’t give up my investment, and I couldn’t live without a whole slew of mods I rely on. I started playing ESO again because I’ve been shut in with health problems for a long time. Once I get better, if I would stop playing ESO again, I could put the PC back in the closet.

P.S. It’s so great to see Apple responding to clamorous and sustained criticisms of their MBP hardware from power users in places like Hacker News. (Including last night’s update to the Monterey public beta, which restores proper tabs in Safari.) It gives me hope that the platform will continue to be a good one for developers, and not be morphed into a mobile-like experience.

P.P.S. World of Warcraft has been ported to native M1. Maybe I should just switch MMO’s. I wonder what New Worlds’ situation is… Oh. Bootcamp. Nevermind. I didn’t buy a Mac to run Windows. I dual booted my PC’s between Linux for work and Windows for gaming for decades. No more. I think you should just buy a PC laptop if you’re going to do that.