Graham, Cotton, Blackburn Introduce Balanced Solution to Bolster National Security, End Use of Warrant-Proof Encryption that Shields Criminal Activity

From the United States Senate Committee on the Judiciary:

The Lawful Access to Encrypted Data Act is a balanced solution that keeps in mind the constitutional rights afforded to all Americans, while providing law enforcement the tools needed to protect the public from everyday violent crime and threats to our national security. The bill would require service providers and device manufacturers to provide assistance to law enforcement when access to encrypted devices or data is necessary – but only after a court issues a warrant, based on probable cause that a crime has occurred, authorizing law enforcement to search and seize the data.

I don’t expect our elected officials to understand every little detail of how something like encryption work, but legislating that companies keep backdoors defeats the purpose of encryption and privacy.

Tech companies are already helping when a warrant is provided. As an example, Apple already provides a ton when asked to by law enforcement. Eliminating encryption is a bridge too far.

WWDC 2020 Initial Thoughts

The WWDC 2020 “pandemic edition” is now behind us, and it was one of the better ones I’ve seen in quite some time. Apple announced a lot in the 2 hour presentation, with iOS and MacOS getting the bulk of the attention this year. What follows is a quick rundown of my thoughts after watching […]

Continue reading →

Craig Federighi on Apple’s WWDC privacy news

From Michael Grothaus at Fast Company:

“We think we’re showing the way to the industry, to the customer, that they can demand more–they should expect more–about the protection of their privacy, and that we can help move the industry into building things that better protect privacy.”

[…]

“I think the protections that we’re building in, to intimately say that the customer’s device is in service of the customer, not of another company or entity–the customer is the one who is in control of their data and their device–is what’s most compatible with human rights and the interest of society,” Federighi says. “And so that’s what we’re going to keep trying to support–our customers being in control of their privacy.”

Glad this is getting more mainstream attention. The biggest features mentioned in this article are:

  • Approximate location, sharing which quadrant of a worldwide grid you’re in, not your exact location. This is something that’s gotten more attention lately, and I’m really pleased they’re doing this.
  • Cross-tracking prevention. Advertisers and data brokers have used these techniques to build a profile on all of us over the years.
  • Categorized data that’s being tracked, broken up by “type” (up to 31 types!) in the App Store.
  • Better password security notifications
  • Enhanced tracker blocking in Safari
  • Enhanced Safari extension support and security controls around permissions
  • Camera and mic notifications to let users know when either are active
  • Photo selection security

I believe that Apple’s stance on this has moved Google and Facebook in a better direction when it comes to security and privacy. Regardless of your opinion on their products, you should be thankful they’re pushing so hard on this.

Apple, HEY, and the path forward

From the HEY blog (I really hate that name):

So we got down to it, and worked the weekend to get an update on Apple’s desk Monday morning. Our team did a great job implementing the product changes that Schiller asked for, and first thing this morning, right after we shipped 1.0.2 to our customers, we submitted 1.0.3 to the App Store for approval.

Glad to see some compromises are being made. I do hope this is the beginning and not the end, however. This is an opportunity for Apple to alter their rules to make the App Store better for developers and customers.

Tweaking my Daily Routine

Working from home for me has been an interesting test of some of my beliefs about how I like to get things done, how much of an introvert I am (very much), and what an optimal schedule stripped of things like a commute, errands and activities might look like. Obviously this won’t be “normal” forever, […]

Continue reading →

Apple’s App Store polices are bad, but its interpretation and enforcement is worse

From The Verge:

The real issue is Apple’s power, of which this whole Kafkaesque series of changing rules is a symptom. We all know the score here: Apple needs to protect the 30 percent cut it takes, and if it allows too many apps to circumvent that cut then some sort of dam may break. From Apple’s perspective, it’s not so much the money for its services bottom line but that if everybody used a different payment system, the experience on the iPhone would genuinely be degraded, if not fragmented. (The money doesn’t hurt, though.)

[…]

There’s a cognitive dissonance to calling Apple a monopolist. After all, people are free to buy an Android phone and well over 80 percent of smartphone buyers on the planet do just that. Apple’s marketshare in the US is significantly higher than it is in the rest of the world, but it’s not that high.

Ben Thompson at Stratechery has been writing about this for years — he recently pulled his 2018 article on this very issue out from behind the paywall. In it, he writes that “I don’t believe the relevant market is smartphones, but rather digital goods and services.” Indeed.

The monopoly Apple has is a monopoly over the iPhone itself, not over smartphones. And that is a very strange way to think about a monopoly. Shouldn’t Apple be free to make whatever rules it wants on the devices it sells? Is it unfair for Apple to demand a cut of all digital commerce on its platforms?

If you aren’t keeping up, HEY is a new email service that has popped up and costs $99/year. They built native apps for all of the major platforms (although wrapping their website in an electron app is hardly a native app, but I digress) with Apple’s iOS being one of those platforms. They did not include a way for users to buy a subscription to their service via in app purchases, instead sending users to the HEY.com site to sign up. Apple rejected the app, saying that they should allow users to buy a subscription in the app. Now customers who signed up for the service can’t use the mobile app and the developers have said they won’t give Apple 30% of their revenue to simply process payment.

This whole thing is such a mess. Incoherent rules and inconsistent enforcement by Apple have created a situation that is bad for consumers and developers.  Ultimately, I think a situation closer to what Google allows (any 3rd party can use their own payment system for anything other than IAP and in all games) as well as allowing for easier side loading on iOS would keep the regulators away and allow for more innovation. Would their services revenue numbers take a hit? Surely. But given most of the big players already have found workarounds, I don’t think it’d be as bad as you’d think.  I also expect more from Apple than essentially rent-seeking.

Additionally, if the argument from Apple is at least partially around providing consistency and clarity for customers, having these Easter egg hunt-style messages in apps like Netflix, Kindle and others (saying things like “you can’t buy content here. Sorry!” due to Apple’s rules around linking to external signups) makes things worse, not better. With WWDC & EU antitrust discussions looming, I’m sure this will be top of mind for the folks in Cupertino over the next few weeks. I hope Apple does the right thing and at a minimum updates their rules to be more clear. If they really want to support their developer community they need to do way more than that, though.

Sanding the Rough Edges of iPadOS

I recently bought an 11″ iPad Pro to “replace” my aging 2015 MacBook Pro. My work has provided me with a 15” MacBook Pro that’s only about a year old, so there’s no reason for me to buy a new laptop for myself right now – especially when I’m working from home every day anyway. […]

Continue reading →

The Deathly Tragedy of American Exceptionalism

From Robert Reich:

With 4.25 percent of the world population, America has the tragic distinction of accounting for about 30 percent of pandemic deaths so far.

Some folks have tried to downplay the extremely high death count numbers in the US by looking at infection rate per 1000 – which does show that some countries like Spain are seeing more infections than we are. However, our death numbers are staggering. I think some of that is attributable to a poor testing strategy – you can have “invisible” infections but it’s much harder to hide deaths. There’s probably some blame to go around for our healthcare system as well, that puts poor folks at a disadvantage relative to those with money.

Our inept leaders and broken unemployment system have handicapped our recovery as well.

We saw some good news last week, relatively speaking, with 2.5 million jobs added but I fear the road to recovery is going to be bumpy.

A detailed timeline of all the ways Trump failed to respond to the coronavirus

From Cameron Peters at Vox:

In fact, there are many reasons the US death toll is so high, including a national response plagued by delays at the federal level, wishful thinking by President Trump, the sidelining of experts, a pointed White House campaign to place the blame for the Trump administration’s shortcomings on others, and time wasted chasing down false hopes based on poor science.

[…]

Throughout the pandemic, however, much of the Trump administration’s spin — regarding Trump’s own response, China’s role, and more — has been misleading, if not outright untrue. Here’s what Trump and the federal government have — and have not — done to respond to the virus.

A sobering blow-by-blow breakdown of the Trump administration’s failed response to the Covid-19 pandemic. No rational person can blame any leader for allowing the disease to land on their shores – this is a truly global outbreak. However, the absolute lack of action, leadership, planning and coordination once we started to understand what was happening is inexcusable.

On a related note, I think this sort of breakdown is a helpful way to put Trump administration’s incompetence into context. I don’t know about you but at a certain point all of the scandal and drama of the past 3.5 years becomes a bit of a blur at some point.