Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

[flagged]


It's my work computer — not my choice. At home I use a Corebooted 51nb neo-ThinkPad.


Oh damn, that escalated quickly. Nice! How is that 51nb board? I totally forgot they were a thing. I have many ThinkPads but unfortunately am at the cap of coreboot-able (X230)... It's sadly getting to the point where the web, of all things, is gradually creeping out of reach.


It is the best computer I have ever used but parts availability can be an issue. For example I had the eDisplayPort flex-PCB go bad in my X210 and had to homebrew my own replacement. I have an entire spare machine just in case, since I couldn't just go out and buy one if I needed it Right Now.


Nice, that's cool to hear (best computer), but yeah I suppose it has some inherent "rarity" to it. One of the nice things about the ThinkPads is their popularity/"ubiquitousness" (is that a word?) - I have like, five X230's at this point! So easy to find an amazing deal on one if you're patient. But yeah, these are really starting to show their age. Still fine to use overall, but it can be pretty limiting at times.


I thought Macs were better for privacy?


Ignore the downvotes - you raise a point worth discussing.

Apple spent a good amount of time and money putting out marketing to convince people that their brand emphasizes privacy. This was part of a brand recovery effort after quite a few folks' intimate photos were leaked out of iCloud.

But it's become evident, as in the post you replied to, that they aren't as privacy-friendly as their marketers want you to believe. You should consider alternatives for your computing needs - specifically, open-source software which is not in control of large corporations.


Apple has been focusing on privacy as a part of their core offering since long, long before the iCloud photo leak. Them being imperfect is not a sign that they are willfully malevolent actors.

The post they replied to doesn’t make anything “evident” it just claims without basis that if you want privacy you should stop using Apple products.

I mean sure in an absolute sense that’s true. Using Apple products gives them some information about you. But relatively speaking, Apple tends to collect significantly less data about its users than its competitors: Meta, Google, Microsoft, et al.


I don't find the "not as bad as" argument to be a convincing one. Given that users can run hardware and software that doesn't give out any information about them, it seems defeatist to only consider software which does give out information. A lot of people have spent a lot of time and effort to make software like Linux and LineageOS available and easy; choosing the least-bad of bad options makes no sense when actual good options are available.

The OP of this thread gave a specific example of Apple circumventing user privacy in a way that I would find unacceptable. "Replied to" was not the best phrasing for that, I admit.


Users can also live in a shack in the woods which is even more privacy-preserving.

Presumably just like most users don’t want to do that, most users also don’t want to learn enough to admin a Linux system, run their own domain and email server, and keep a NAS at home as their “cloud” storage.

If you assume that users want someone else to handle this stuff for them, then yes, “not as bad as” is a great argument.


Wow, nice analogy - you really think that using Linux is like living in a shack in the woods, huh. It's actually very easy to use these days. Have you tried it?


I’ve used Linux for the last twenty five years, both as my daily driver personal desktop and as an admin.

My point is that if you want to chase privacy absolutism, a shack in the woods is where you inevitably end up. If you accept that people want to use consumer-focused goods and services that come with some privacy cost—as basically fucking everyone but a minute rounding error does—there are alternatives that are better than others. And so it’s absolutely worth comparing those alternatives.

If you want to run Tails on RISC V, route all your traffic through Tor, and conduct all your transactions with Monero then more power to you.


I don't accept that, actually. Since you like exaggerated analogies, here's one for you:

Imagine a world where, in the past twenty years, big companies started making transparent bathroom doors. And thanks to marketing, media, celebrity endorsemets etc., transparent bathroom doors have become the new norm. It worked, and most bathroom doors are now transparent or translucent.

I'm one of the people pointing out that we can get doors made of wood, and it's pretty easy to do so.

And you're the guy saying "that's so weird! Basically fucking everyone uses some degree of transparency on their bathroom doors, therefore it's normal and good, and should continue to be encouraged. Besides, this one company makes translucent bathroom doors - that's better, right?"


It is a matter of perspective. Of all Mac users, no of people wanting to hide their app usage are practically 0 when compared to people downloading free wallpaper app or game that need to be protected from their own actions. For 2nd set an OS monitoring the activity and blocking potential harmful ones is more secure.


This is why I buy AAPL stock and not Apple™ products.


Better than what, is the question.

Where people stand on this question ultimately lies in whether they trust what Apple says. For example, Gatekeeper / OCSP, the service mentioned in the GP. Apple says the following:

> Gatekeeper performs online checks to verify if an app contains known malware and whether the developer’s signing certificate is revoked. We have never combined data from these checks with information about Apple users or their devices. We do not use data from these checks to learn what individual users are using on their devices.

https://support.apple.com/en-us/102445

That's either true or it isn't. If it's true, then the GP comment is wrong about "Hey Siri who is using Tor", if it's not true, they are correct. Blocking the service using a hosts file works, and does not prevent applications from opening, a case can be made that this should be even easier with a system preferences setting, but we come back to the same question: if you trust what Apple says about the service, making it easy to disable (and blocking a DNS entry is not especially difficult) would be foolish, because the threat landscape does include malware, and does not include Apple sharing information (they claim that) they don't have, about what programs users open.

If Apple is lying, or one thinks Apple is lying, then the problems do not end with Gatekeeper. They could be logging every key I type, faking E2EE through some clever obfuscated code, and so on. Blocking the OSCP server will do nothing, they can exfiltrate anything they want from an operating system which they alone control.

I happen to believe Apple's privacy claims are honest. This is based on a couple of things: primarily, privacy is a valuable (to them) and emphasized part of their brand, and any discovered breach of trust would be hugely detrimental to their bottom line. Also, there's a dog which didn't bark, in the form of an absence of whistleblowers reporting on how Apple's privacy claims are bullshit and they actually pwn everything.

TL;DR there are OSes which claim to offer more privacy than Apple, but now you're trusting ~everyone who has contributed software to those operating systems instead. I also happen to think that e.g. Qubes and Tails do improve on privacy over the macOS etc. baseline, but I can't prove that, anymore than I can demonstrate that Apple isn't lying.

It is physically impossible to audit all the code we run personally. It just can't be done. So trust is a non-optional component of making decisions about privacy and security. It will always be thus.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: