Hugo Hacker News

Ask HN: What Apple alternatives are you switching to?

numair 2021-08-18 14:30:12 +0000 UTC [ - ]

For those studying MacBook alternatives, I think the most underrated “serious” notebook computer in the world is the Panasonic Letsnote SX/SV.

Matte screen that actually works outdoors, removable long-life battery, unassuming vintage design (“let’s not rob that guy, he can’t even afford a new computer”). I haven’t investigated the Linuxability of this thing yet, but it’s super-light and impressive as a mosh terminal (especially with built-in 4G LTE!). Tough magnesium body, super comfy keyboard that’s easy to swap out if you beat it up. Made in Japan!

I have a fully loaded MacBook Pro, and couldn’t imagine doing design work on anything else, but I somehow end up getting lots of work done on the Letsnote. It’s at a point where I don’t think I’ll be excited about the long-awaited new 14-inch MacBook Pro, as I doubt it’ll have a matte screen and a durable exterior (and, I much prefer to look like a sad worker stuck with a dorky computer from 2006, than a moneyed tech guy).

jstummbillig 2021-08-18 14:39:37 +0000 UTC [ - ]

> think the most underrated “serious” notebook computer in the world is the Panasonic Letsnote SX/SV.

Oh man, I kinda wish I felt different, but this thing gets a hard no just for its aesthetics. Notebooks are both way to omnipresent in my life and manifold to revisit something mid-90s. I do not want my home & life to feel like an old X-Files episode.

numair 2021-08-18 14:45:55 +0000 UTC [ - ]

The great irony is, your 90s throwback nightmare is now the Gen Z dream. Everything is a cycle if you wait long enough!

aaaaaaaaaaab 2021-08-19 08:27:59 +0000 UTC [ - ]

>your 90s throwback nightmare is now the Gen Z dream

Only ironically. See: vaporwave.

thereddaikon 2021-08-18 15:13:39 +0000 UTC [ - ]

Looks like a japan only model. I should have known by the name, Let's _____ is a really common Japanese product trope. You should try "Let's Corn!" sometime. Its uhhh, japanese.

How do you suggest getting one of these things or getting support for it? I'm not against foreign market hardware but they can be a real pain in the ass for many. Last japanese laptop I had was almost 20 years ago, an ultraportable Sony. It was interesting but finding drivers online back then was a challenge.

fomine3 2021-08-19 00:41:53 +0000 UTC [ - ]

Let's note sold in Japan only offers Japanese keyboard layout, this may be a top problem.

It seems that US keyboard model is sold as "Asia Model", but sold only for corporate. Hopefully you can find used one. Possibly it's also available in asian marketplace. https://biz.panasonic.com/jp-ja/products-services/letsnote/l...

0800LUCAS 2021-08-18 14:56:53 +0000 UTC [ - ]

Can you even get one of those Panasonic laptops outside of Japan?

Checked Amazon.co.jp and doesn't seem like they ship to Europe. I'm actually interested in trying one of these out.

przemub 2021-08-18 14:34:33 +0000 UTC [ - ]

Sounds awesome! I've had huge problems with some recent ThinkPads so it seems that it will be a choice between Panasonic and Fujitsu. Thanks for the recommendation.

numair 2021-08-18 14:44:22 +0000 UTC [ - ]

It’s pretty much a staple item in Corporate Japan, which probably explains why Panasonic hasn’t offshored production as everyone else did.

I think it’d be great to see more overseas business pick up for these computers — it’s one of those classic bits of Japanese technology that looks hopelessly outdated until you use it, and then you hope it never changes. My label for such things is “In-N-Out Burger Technology,” for reasons that should be obvious to my fellow Californians...

jron 2021-08-18 15:49:52 +0000 UTC [ - ]

Is the trackpad comparable to a macbook? I've yet to see an equal or anything remotely close.

fomine3 2021-08-19 01:06:38 +0000 UTC [ - ]

Their trackpad is bad for me because they stick with circler form on most models. It's bad just because very small. It support scrolling by tracing circle edge, but not much worth.

Meanwhile they also stick with old fashioned non-isolated keyboard. It's great.

1-6 2021-08-18 15:32:54 +0000 UTC [ - ]

You can probably buy a laptop with a certain generic form-factor with a rugged case that snaps onto the body. Panasonic, unfortunately, can't get economies of scale like LG, Lenovo, Apple.

hellbannedguy 2021-08-18 15:10:41 +0000 UTC [ - ]

This will probally be my next laptop.

I like the retro look. I had a Panasonic years ago and adored it. It was huge, but did everything, even had a tv tuner. And it was easy to work on. Used it 10 plus years.

neverminder 2021-08-18 15:39:32 +0000 UTC [ - ]

Desktop - Ubuntu 20.04. Everything works and my requirements are quite advanced - bunch of games on Steam, pro level audio production studio just to mention a few things.

Laptop - Dell Precision 7750, Xeon CPU, 64 GB RAM, bought with Ubuntu pre-installed. Beast of a laptop, superior thermals, wipes the floor with a mac.

Phone - Google Pixel. I consider that a lesser evil choice to Apple's walled garden. It's rooted, I don't see any ads, etc.

Tablet - Google Pixel Slate. High end tablet with 16 GB RAM running Chrome OS which supports native linux apps for a while now.

These were all more or less state of the art devices at the time of buying, I have absolutely no need whatsoever to to even think about Apple or Microsoft.

mullingitover 2021-08-18 19:19:28 +0000 UTC [ - ]

> Phone - Google Pixel

Pretty sure your photos are still getting scanned for CSAM anyway, then. Google Photos normally are backed up in their cloud, and they do scanning there.

stjohnswarts 2021-08-19 15:11:23 +0000 UTC [ - ]

Yeah, so don't upload your pictures to google photo. The main take away here is find an alternate backup cloud spot or host your own. Apple is forcing spying software on their phones on the customer to use your very own device to spy. Unless you're simply trying to avoid false positives as a reason, most people are complaining about apple turning their device into a government 4th amendment free zone.

gazby 2021-08-18 16:17:09 +0000 UTC [ - ]

I have the 7550 (15 inch version of the 7750), also with 20.04 on it (Dell shipped it with 18.04 though) and am also very happy with it, so +1 there.

I also have an Android tablet and Android phone running LineageOS without Google Play Services, and piggy-back off the SO's Google Maps when we're going places. F-Droid is fantastic here and, where needed, proprietary apps (Slack, Discord etc) can be installed via Aurora with various limited functionality (e.g. no notifications from either of those apps).

neverminder 2021-08-18 16:44:43 +0000 UTC [ - ]

Dell Precision 7xxx line is easily the most advanced laptop with official linux support there is. Every person who bought it after I recommended this laptop was impressed. I've got Ubuntu 20.04 on mine and the only thing that doesn't work (yet) is the power button fingerprint reader which is a non-issue.

gazby 2021-08-18 17:53:13 +0000 UTC [ - ]

As a counterpoint there are a number of things I don't like:

* I can only have Intel CPUs and NVIDIA GPUs

* They've removed all but one external indicator light (there used to be four), and its behavior is completely useless (there's no way for me to tell externally what the power state of my machine is)

* They've killed the trackpoint

* This is the second of this series I've owned where neither of the fingerprint reader options are Linux compatible (no warning at purchase)

* The keyboard layout has regressed substantially - no more media keys, home and end keys are now fn-modified in the F row, page-up and page-down are also fn-modified where they used to be dedicated physical keys

* The e-port dock is gone in favor of a USB-attached version that occupies both USB-C ports on the chassis (and only provides two on the dock)

When I first received it my initial impulse was "if I wanted this level of regression per generation I'd still be buying Apple", but I've learned to live with it, embodying the grouchy sysadmin stereotype even further (in a hyperbolic way), much to the delight of my coworkers.

P.S. Why are you doing this to me Dell?!

neverminder 2021-08-18 19:08:31 +0000 UTC [ - ]

Well, some of those points are down to personal preference. I for instance always hated the trackpoint thing and I am fine with the new clean and simple keyboard approach.

Don't even get me started on Apple. If removing the physical Esc key is not the biggest ever fuck you to pro users, then I don't know what is.

knownjorbist 2021-08-19 06:17:04 +0000 UTC [ - ]

Didn't they add it back for some if not all models? I have a 2019 16" with a physical Esc.

stereoradonc 2021-08-19 00:23:03 +0000 UTC [ - ]

ThinkPad E series owner here. I find the default specifications worthwhile (including the keyboard). Dell was a contender but they priced the "business line" more expensive than ThinkPad. I got a sweet deal on Amazon and bought it in a heartbeat!

neverminder 2021-08-19 08:07:11 +0000 UTC [ - ]

I did consider Thinkpad at the time too, but they did not have an option to select linux OS when buying, so I went with Dell, because they don't just pretend to support linux, they officially do.

Dracophoenix 2021-08-18 17:06:04 +0000 UTC [ - ]

Are you able to run Protools and the Adobe Suite your Linux desktop is that no yet possible?

And how long do you plan to keep the Precision before upgrading?

neverminder 2021-08-18 17:34:53 +0000 UTC [ - ]

I don't use ProTools, I use Bitwig Studio which is a full blown DAW with native linux support. There's also Ardour and Reaper, so linux has plenty of DAWs to choose from. Also as I have mentioned in another comment - all VSTs that I need work just fine with wine/yabridge.

I don't use Adobe's stuff either, but I know other people run Photoshop on wine, I just don't know what issues they're facing.

username91 2021-08-18 16:23:22 +0000 UTC [ - ]

May I ask what software you use for pro audio production? I'm looking for an alternative to Logic. Thanks!

neverminder 2021-08-18 16:29:36 +0000 UTC [ - ]

I use Bitwig Studio. It has that polished feel of Jetbrains products and has very good MIDI production tools among other things. Of course the downside it's not free and rather expensive, but it's linux native. All the VSTs that I need work through wine/yabridge flawlessly - Ample Guitars, Pianoteq. Even the crappy Kontakt works, but I don't use it much. Backend audio server is JACK2 with Pulseaudio sink.

Ardour is probably most popular DAW on linux and it's OSS/free, but I found Bitwig better for my use, mainly due to MIDI functionality.

username91 2021-08-18 16:53:15 +0000 UTC [ - ]

Great info. Surprised to hear Wine gets the job done for some of that stuff. Thankyou. :)

neverminder 2021-08-18 17:25:13 +0000 UTC [ - ]

I was just as surprised. Not only it works, there are no performance issues like audio cracks and stuff like that. It's awesome.

2021-08-18 16:17:34 +0000 UTC [ - ]

alecco 2021-08-19 06:37:29 +0000 UTC [ - ]

Did you try/consider GrapheneOS for Pixel?

neverminder 2021-08-19 08:04:34 +0000 UTC [ - ]

No, for now I am fine with rooted stock Android. I keep an eye on Librem 5 and Pinephone and in the future I think I'm gonna get one of them as a secondary phone with hopes of eventually switching completely.

timbit42 2021-08-18 18:58:52 +0000 UTC [ - ]

When you realize Snaps suck, you can switch to Linux Mint or Debian.

MrDresden 2021-08-18 23:05:47 +0000 UTC [ - ]

There is literally no requirement to use snaps.

TylerLives 2021-08-18 19:26:58 +0000 UTC [ - ]

Why switch the OS instead of just removing snaps?

crossroadsguy 2021-08-18 15:10:09 +0000 UTC [ - ]

I don’t care anymore. Actually I do, but I’m exhausted.

However if I buy a new laptop, with or without CSAM, it won’t be a Mac. I would wish for a Framework kinda thing here (with local service), but since that’s not gonna happen - ASUS it would be most probably, with ElementaryOS on it (or some distro like that - non ugly and kinda simple looking).

It feels like WhatsApp —> Signal brouhaha all over again. After trying to get my contacts on Signal for 7-8 months and having deleted WhatsApp I’m back to it after my own struggles with Signal.

So no, not again. My next phone (if my iPhone 7 dies on me) will be an iPhone 12 Mini (or a 13 variant that’s around same size and cost) probably. Because that’s the only new phone that still bloody fits in my palm. After that? I’ll see.

thefunnyman 2021-08-18 23:15:36 +0000 UTC [ - ]

Thinkpads have served me pretty well, mostly for Linux though I do dual boot. A bit pricey new, but lots of options in the used market since businesses buy new ones all the time. Lenovo has had some controversy, but never with the Thinkpad line afaik and frankly at this point it’s hard to find a manufacturer without some history of controversy.

whoknowswhat11 2021-08-18 15:31:51 +0000 UTC [ - ]

Another challenge is the track record of some of the chinese phone maker competitors that ship for example without google play services is not long or its not good.

My instinct. This is an insane amount of noise on HN. But of all the privacy issues folks have, CSAM scanning by Apple is not going to "destory apple's brand" and for most users the safety features (kids accounts flag up on nude photos etc) is actually what people want and we will see others following a lot of these moves.

411111111111111 2021-08-18 20:38:50 +0000 UTC [ - ]

It's not going to destroy the brand, it only put a dent into the privacy rhetoric. There is no chance in hell that apple will stop with their privacy marketing over this and once enough time has passed people will start to think that they're the only torchbearers wrt privacy again.

Their interest in privacy was never real, but their marketing is top notch as always... It's just a question of time when everything is back to how it was before

hpkuarg 2021-08-18 16:54:49 +0000 UTC [ - ]

New LG Grams are nice laptops and could be a good alternative to ASUS. I've had no problems with recent Ubuntu versions on them.

karlzt 2021-08-18 14:45:10 +0000 UTC [ - ]

Desktop: Arch Linux

Phone: Pinephone

At the end of this article: https://www.vice.com/en/article/v7e77y/the-dollar149-smartph...

"But even without those changes, this device could be enough to kickstart a Linux-driven mobile revolution."

ostenning 2021-08-18 16:21:42 +0000 UTC [ - ]

Linux needs a decent productivity suite of apps (preview, mail, calendar etc) the current offering is terrible

commoner 2021-08-19 10:46:10 +0000 UTC [ - ]

Replacements, all decent or better:

- Preview: GNOME Document Viewer (now supports PDF form filling), Master PDF Editor (paid and proprietary), built-in PDF editor in Firefox/Chromium, Okular; GNOME Image Viewer, Gwenview, Pantheon Photos (part of elementary OS)

- Mail: Thunderbird, Evolution, Kontact (KMail component), Geary, Pantheon Mail, Claws Mail, Mailspring

- Calendar: Thunderbird (built-in calendar), GNOME Calendar, Evolution, Kontact (KOrganizer component), Pantheon Calendar

xtracto 2021-08-19 16:58:02 +0000 UTC [ - ]

A couple of weeks ago I needed to do some very simple PDF "editing": I had 2 PDFs (A and B) and I needed to get some pages 2 (of 5) from PDF-A and 2 (of 5) pages of PDF-B into a single PDF. I tried to do that on Linux Mint and it was a nightmare: Download PDFSam, create PDF from PDF-A with 2 pages, create PDF from PDF-B with 2 pages and then merge those 2 PDFs.

The way I achieve that in my Mac is by opening both file in preview, select and drag the pages I want from PDF-A to PDF-B and then select and delete the pages I don't want from PDF-B.

Why do these simple things have to be so cumbersome in Linux in 2021?

fsflover 2021-08-18 16:39:03 +0000 UTC [ - ]

josteink 2021-08-18 15:12:54 +0000 UTC [ - ]

> Phone: Pinephone

Talking as a Pinephone (and iPhone 12) owner, I think the software is starting to show promise, but the SoC is nowhere beefy enough.

If I’ll go this route fully and make a Linux-phone my daily driver, I’d seriously consider the Purism Librem 5 instead.

gorgonzolachz 2021-08-18 19:29:05 +0000 UTC [ - ]

I'm on the other side of this; I don't use my phone for anything more than messaging, light browsing/videos, and social feeds, so what I really want is more battery life.

Last I checked, both purism and pine64 are struggling with this.

fsflover 2021-08-19 10:07:12 +0000 UTC [ - ]

The Pinephone keyboard mod adds a 6000 mAh battery, which should be enough I guess.

swiley 2021-08-18 17:00:36 +0000 UTC [ - ]

It's nowhere beafy enough for Gnome. It runs fluxbox, FVWM, and apparently i3 and dwm just fine.

donohoe 2021-08-18 14:33:52 +0000 UTC [ - ]

This seems like an over-reaction. I'm highly opposed to Apple's CSAM move but they are still much better and transparent than Google, Amazon, and most other services.

Many of these already do something like this but they just don't actively tell you or document it.

Also, and please correct me if I am mistaken, Apple's CSAM is limited to iCloud for Photos. It does not just work against your local photos.

  CSAM Detection enables Apple to accurately 
  identify and report iCloud users who store
  known Child Sexual Abuse Material (CSAM) 
  in their iCloud Photos accounts
It seems like a needless waste of time do do all this as opposed to disabling iCloud for Photos...

Source: https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

ByteWelder 2021-08-18 14:49:16 +0000 UTC [ - ]

For me, it was well thought-out. Apple betrayed my trust as a consumer and the response in the past week was plain gaslighting. I thought about it for a couple of days and then decided that I don't want to support a company like that anymore.

(edit)I was planning to buy a new MBP/iPhone/Watch in Q4, so this made it easier to decide on those purchases earlier.(/edit)

It's correct that the CSAM scanning is currently only effective when iCloud is enabled - and for US customers only. For me, this detail is irrelevant. The backdoor might be inactive for now, but there would still be a backdoor on my phone.

djrogers 2021-08-18 15:19:33 +0000 UTC [ - ]

> The backdoor might be inactive for now, but there would still be a backdoor on my phone

The key (from Apple's POV) is that this is done on your device, so the model can be audited, and users will know if it changes or is suddenly enabled where it wasn't before. Apple has documented the entire threat model and their design decisions realted to each threat vector.

It's worth reading the document, as it becomes pretty clear that this is a step towards enabling E2E for iCloud Photos.

The alternative to what Apple did is cloud-based scanning, which is less transparent, permanently disallows E2EE, and is more vulnerable to being changed by national decree. If CSAM scanning is going to (or is already) mandatory, I vastly prefer Apple's method here.

[1] https://www.apple.com/child-safety/pdf/Security_Threat_Model...

nzealand 2021-08-18 16:49:15 +0000 UTC [ - ]

> If CSAM scanning is going to (or is already) mandatory, I vastly prefer Apple's method here.

This is such a good point. The US government has been heavily pushing for backdoors, and can gag discussion under threat of national security.

It also seems counter productive to punish the one corporation who is apparently being transparent about this. Nobody here likes marketing BS, but this reaction here on HN is why we get marketing BS instead of technical details.

Edit: Legally, these searches do not violate the 4th amendment because the government pretends hash scans are entirely voluntary. Most ISPs and email companies "voluntarily" choose to hash match. I can't remember the specifics, but ISPs that refuse to do this have been threatened with legal action.

https://www.bjcl.org/blog/hashing-it-out-how-an-automated-cr...

breuleux 2021-08-18 15:52:47 +0000 UTC [ - ]

Even if we were to call this a "backdoor", it's a backdoor that creaks quite loudly. I mean, what's the attack vector here? The plan, as far as I'm aware, is to upload a list of hashes to each device that have been vetted by multiple child protection agencies. In order to surveil other things, additional hashes would need to be transferred that wouldn't be vetted by these agencies. That would be noticed, and that's the point where I would consider my trust to be betrayed.

rovr138 2021-08-18 16:10:35 +0000 UTC [ - ]

>I mean, what's the attack vector here? The plan, as far as I'm aware, is to upload a list of hashes to each device that have been vetted by multiple child protection agencies.

I hope not.

If hashes are uploaded to devices, they can be extracted and images that clash against it can be created.

I think they're going to be creating hashes of images locally that are being uploaded and send it with the image. Then if the hash is found to match one on their database, that's flagged.

The problem then is, if they're matching on their side, what prevents them from receiving some order that forces them to match for other images?

breuleux 2021-08-18 17:13:24 +0000 UTC [ - ]

> If hashes are uploaded to devices, they can be extracted and images that clash against it can be created.

Many organizations have the hashes, so they could leak nonetheless. Either way, I don't think that's a major problem. If the system interprets a picture of a pineapple as CSAM, you only need to produce the picture of a pineapple to defend yourself against any accusations. If clashes are too commonplace, the entire system would become unreliable and would have to be scrapped.

In any case, I have looked it up. The database is indeed on the device, but it's encrypted:

https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

> Instead of scanning images in the cloud, the system performs on-device matching using a database of known CSAM image hashes provided by NCMEC and other child-safety organizations. Apple further transforms this database into an unreadable set of hashes, which is securely stored on users’ devices.

Overall, after reading the PDF, here is my understanding of the process:

1. Apple gathers a set of "bad hashes"

2. They upload to each device a map from a hashed bad hash to an encrypted bad hash

3. The device runs an algorithm that determines whether there are matches with hashed bad hashes

4. For each match, the device uploads a payload encrypted using a secret on-device key, and a second payload that contains a "share" of the secret key, encrypted using the neural hash and encrypted bad hash.

5. The device also periodically uploads fake shares with dummy data to obfuscate the number of matches that actually occurred. Apple can't tell fake shares from real ones unless they have enough real shares.

6. Once Apple has enough real shares, they can figure out the secret key and know which hashes caused a match.

The main concern I have, and as a non-expert, is step 2: it requires Apple to provide their key to an auditor who can cross-check with child protection agencies that everything checks out and no suspect hashes are included in the payload. In theory, that needs to be done every time a new on-device database is uploaded, but if it is done, or if child protection agencies are given the secret so that they can check it themselves, I think this is a fairly solid system (notwithstanding the specifics of the encryption scheme which I don't have the competence to evaluate).

The thresholding is also a reassuring aspect of the system, because (if it works as stated) the device can guarantee that Apple can't see anything at all until a certain number of images match, not even the count of matching images. The threshold could only be changed with an OS update.

There's certainly a lot of things to discuss and criticize about their system, but it's going to be difficult to do so if nearly no one even bothers reading about how it works. It's frustrating.

rerbrerb 2021-08-19 02:55:37 +0000 UTC [ - ]

> If the system interprets a picture of a pineapple as CSAM, you only need to produce the picture of a pineapple to defend yourself against any accusations.

If the system interprets a picture of a pineapple on your phone as CSAM,

after Apple notifies the authorities they have identified child porn on your phone,

after the police detain you with the courtesies afforded to all alleged pedophiles,

after you cough up your phone’s password,

you only need to produce the picture of a pineapple to defend yourself against any accusations,

and then point out to the folks with the guns that no, you didn’t delete the child porn from your phone, look, it’s just a pineapple,

and then explain to your captors how hashes work,

then there’s nothing to worry about.

Good luck.

breuleux 2021-08-19 15:17:46 +0000 UTC [ - ]

I mean, that's one imaginary scenario. On the other hand, it's quite likely that upon a match the offending picture in full res is stored in an enclave on your device, and/or encrypted in the cloud, in such a way that it cannot be deleted by the user.

If they know this attack is possible, Apple, not being idiots, will cover their asses in court by saying that a match is merely strong evidence that the user may have had CSAM on their account, but that it cannot be said for certain unless the full image is obtained by the authorities, and that the full image should be where they say it is, with the voucher made by the device.

Because of that, prosecutors are unlikely to want to move forward without better evidence: Apple may very well testify for the defence if they do, and judges will ultimately chew them out. So yeah, I suppose rashness and incompetence in some parties may lead to a very uncomfortable situation, but ultimately it is likely that the police would be reprimanded for it and that it would be a lot more cautious afterwards.

theshrike79 2021-08-19 05:47:21 +0000 UTC [ - ]

> after Apple notifies the authorities they have identified child porn on your phone,

Apple has a team that will manually vet the matches, so no pineapple picture or a fuzzy forced hash collision picture will cause the authorities to be notified.

So if you're worried someone will secretly send fake CSAM hash collision images to your phone to trigger the process, the worst that will happen is that some poor sod at Apple will get mildly inconvenienced.

Gollapalli 2021-08-19 14:07:00 +0000 UTC [ - ]

How would they manually vet the matches, except by looking at the matched pictures?

And here's the real question, what's to stop them from using this on say: political memes instead of CSAM?

breuleux 2021-08-19 15:29:11 +0000 UTC [ - ]

They have access to a "visual derivative" (which I suppose is their way of saying "thumbnail") but it probably wouldn't help if the adversarial example is normal porn. This being said, once the authorities are contacted, they will have to work to obtain the full image, because if all they have is a thumbnail and a voucher, the evidence would probably be thrown out in court.

As for using it for other things than CSAM, well, for one, Apple would know, because the thumbnails would show political memes, so they'd have to be in on the conspiracy. They probably don't want that liability. Furthermore, the hashes are supposed to be auditable: a third party could check that they are what they are, a court order could order such an audit, and it would be suspicious for Apple to refuse. They wouldn't want to include anything that could piss off any sufficiently powerful government or, say, the EU, because they are likely to figure it out. And if they give different hashes to different citizens, that will also be obvious.

askonomm 2021-08-18 23:03:47 +0000 UTC [ - ]

You're in for a rough ride if you change entire platforms and ecosystems every time someone disappoints you. Afaik, Microsoft and Google do a lot worse than Apple, so where are you going to go? Linux?

gjsman-1000 2021-08-18 15:02:25 +0000 UTC [ - ]

Here's the thing. You might hate Apple for what they did. But I'm looking at the competition (Google, Amazon, Microsoft) and they're still worse for privacy in well-documented ways. It's an evil but it's still the least among evils.

mateuszf 2021-08-18 15:13:57 +0000 UTC [ - ]

> It's an evil but it's still the least among evils.

Nope, you can use a degoogled android. There's still a matter of hardware that's not open but there's not much we can do that without sacrificing a lot of usability.

gjsman-1000 2021-08-18 15:24:03 +0000 UTC [ - ]

Then you can't use the Play Store (legally at least) and can't use paid apps. You're still taking a massive usability hit.

mateuszf 2021-08-18 15:29:34 +0000 UTC [ - ]

Yeah, provided I don't find alternative open-source / self-hosted apps. I'm not saying it's easy, but it seems doable in medium/long term - if you value privacy and owning your data.

donohoe 2021-08-18 16:07:54 +0000 UTC [ - ]

Yeah, but you're still stuck with Android. Thats just an insecure mess right there.

mateuszf 2021-08-18 16:48:28 +0000 UTC [ - ]

It depends on the ROM. I've heard good about GrapheneOS. It was even recommended by Snowden.

https://twitter.com/Snowden/status/1175430722733129729?s=09

wayoutthere 2021-08-18 14:58:19 +0000 UTC [ - ]

You’re fooling yourself if you don’t think the government has a dozen other ways to backdoor you. Heck they basically just have packet scanners sitting on the networks of all the major telecoms, and almost certainly have compromised SSL root signing keys so they can trivially decrypt your traffic. Anything that goes over the network is fair game.

Love it or not, we live in a police state enforced by surveillance. Most Americans are just waking up to this because they’re not a member of a population actively oppressed by the police. Socialist / anarchist / labor communities that are more than shitposting groups meet almost exclusively in-person because their communications have long been targeted by law enforcement.

mohanmcgeek 2021-08-18 16:54:00 +0000 UTC [ - ]

The government doing this is one thing but corporations controlled by a few vocal groups deciding what you can do and what you are allowed to know is a completely different thing.

wayoutthere 2021-08-18 17:06:01 +0000 UTC [ - ]

Again, this has always been the case in the US. Newspapers were owned by wealthy businesses with a message to spread, as were the radio stations, then it was the big 3 TV networks for a long time, now it’s the 5 big tech companies. The gatekeeping is a feature, not a bug.

If you look to other societies, this happens there too. There is a symbiotic relationship between mass media and government at a fundamental level. There’s a reason that the first things you do after a coup are to lock down the Internet and sieze the TV / radio broadcast infrastructure.

mohanmcgeek 2021-08-18 18:13:43 +0000 UTC [ - ]

Except in these cases, it's not the government asking these companies to take down the "misinformation" videos. In fact, some of these companies try to add "misleading" label to actual, official government announcements.. Trying to run a parallel, unelected government.

wayoutthere 2021-08-19 12:03:11 +0000 UTC [ - ]

Which, again, has always been the case. It’s a very new phenomenon where an individual can deliver speech directly to thousands of people. The media were the gatekeepers of information and influencers of mass opinion, and they would frequently run stories with counterfactual information that suited their purposes.

Companies have always tried to run parallel, unelected governments. Whether it’s “company towns,” banana republics, or social media restrictions doesn’t matter.

No, I think the root of the problem is that the ability to disseminate information widely across a population is not a good thing. I do think there should be real regulation on mass speech that is proportional to the audience size. If you have 100k followers on Instagram, that should come with some responsibilities.

knownjorbist 2021-08-19 06:20:37 +0000 UTC [ - ]

> I'm highly opposed to Apple's CSAM move but they are still much better and transparent than Google, Amazon, and most other services.

Is this actually true? Is there a way to see what information Apple has on you? I'm sure it's not the full extent of what they have, but for example I can see(and hear) past voice prompts I've given to Google Assistant and their results. I can also choose to delete this information(obviously no way to know this is actually deleted though).

matwood 2021-08-18 15:33:37 +0000 UTC [ - ]

It is limited to photos destined for iCloud. A lot of rage appears to be around 'what if', but what if exists every day right now. I'll re-evaluate when Apple does one of those what ifs. They said they won't, and architected the system in such a way that it's hard do those what ifs, so we'll see.

The reality is, people have to trust their OS vendor.

donohoe 2021-08-18 16:11:21 +0000 UTC [ - ]

Yes, but I would argue the 'rage' is justified (even if I don't agree with the actions folks are taking). It's opening the door, not matter how noble the effort or intention.

It doesn't compel me to drop Apple. I still think they are the best of the best, but I agree in sentiment to many people here that it was a huge drop in my trust.

The lesson for me is that I cannot trust any company, and that is probably a smart approach. I will depend on myself and right now Apple, amongst all the players, is still the one that manages my privacy better than anywhere else. But I'll be watching.

gjsman-1000 2021-08-18 14:33:18 +0000 UTC [ - ]

To be honest... None.

It's a choice. You might wholly disagree, but recent events aren't enough to get me to switch yet, because I think the competition has too many tradeoffs.

I can get my photos scanned against a CSAM database... or I can have Google tracking my location constantly regardless of what they say (as they've been proven to be misleading in the past)... or I can use a Linux phone and say goodbye to battery life and useful apps I need. I'll pick CSAM Scanning over my Location data being in the hands of Google, sorry.

And as for my laptop, macOS doesn't scan, and the M1 is too impressive and has me spoiled. And I have too many horror stories with both Linux and Windows and can't stand either of them. (Don't tell me switch to Linux - I've tried over a dozen distributions over the last decade. It's just not there yet.)

xtracto 2021-08-19 17:02:24 +0000 UTC [ - ]

Agreed, I use Linux as my desktop PC (gaming and tinkering), Mac as my work PC and the Windows computer I had just died (Surface Pro 4). My mobile is an Android.

I don't any hardware or software developer... I don't really care if the US is reading my emails, images, chats and whatnot. I choose not to worry about those sort of things.

My product choices are more related to functionality and basic ROI.

redisman 2021-08-18 15:22:22 +0000 UTC [ - ]

I find it funny how many people pick a random Chinese phone in their bid for privacy (???)

system16 2021-08-18 15:34:58 +0000 UTC [ - ]

I think it's less about privacy and more about what the invading actor will/can actually do. People are less concerned about the Chinese government's reach vs. the NSA or other three letter agencies in the US. I suppose if you are important enough to the Chinese government whatever they have on you could be used as blackmail, but most 'regular' people don't fall into that category.

jon-wood 2021-08-18 16:53:11 +0000 UTC [ - ]

If one of the US TLAs has decided to target you you’re fucked. No amount of switching phones and OS is going to help you, short of completely disconnecting from the internet and not using any sort of financial infrastructure.

greyhair 2021-08-18 18:37:46 +0000 UTC [ - ]

Likewise, if the criminal underworld has decided to target you, you are equally fucked.

imwillofficial 2021-08-18 15:36:36 +0000 UTC [ - ]

> People are less concerned about the Chinese government's reach vs. the NSA

Wait what? You’re 180 degrees wrong.

macksd 2021-08-18 15:42:33 +0000 UTC [ - ]

Of the two, which government do I think is more evil? China's. Which government do I, a permanent resident of America, think could more immediately make my life harder by being able to invade my privacy? America's.

ChemSpider 2021-08-18 16:04:35 +0000 UTC [ - ]

Well, as somebody who has travel to China for business, I would not touch any Chinese hardware or OS at all. In the US and EU you have a working legal system.

croutonwagon 2021-08-18 16:21:52 +0000 UTC [ - ]

Thats moving the goalposts a bit though. The question wasnt in the context of those that go to, travel through or deal with Chinese government on the regular.

But rather in the context of those in America that largely only deal with American government officials and those outcomes.

And to my knowledge. China isnt abducting people or conduction renditions on american soil.

macksd 2021-08-18 17:09:01 +0000 UTC [ - ]

As I said, I am not such a person. Most of the English-speaking world consists of the same.

As I said - I agree that China's government is worse. In fact my previous employer had a policy that company devices just didn't cross that border, even when traveling for work. But it's still not a factor in which devices I purchase myself.

imwillofficial 2021-08-18 19:10:55 +0000 UTC [ - ]

> Of the two, which government do I think is more evil?

But that's not what the original comment said.

macksd 2021-08-18 19:51:07 +0000 UTC [ - ]

I didn't say they said that. It's also not my whole comment. Not sure what you're getting at.

dmantis 2021-08-18 15:41:09 +0000 UTC [ - ]

He is right. US has complete power over people on their soil and basically in Europe and Asia as well. They do a LOT of extraditions of other countries citizens when they go traveling or to business trips from their citizenship countries.

China, on the other hand, does not seem to give a single f* about foreigners, only about their own citizens. Most people are not so are not really endangered even if chinese spyers do know what they handle on their phones. So in battle between US spyers/China spyers I'd better give my data to Chinese, if I don't have a choice not to share my data at all.

China, as well, don't try to make extraterritorial laws (like financial regulations), so it's harder to even be targeted by CCP if your are a foreigner.

ChemSpider 2021-08-18 16:10:31 +0000 UTC [ - ]

You should talk to this Swedish guy. He was captured in Thailand(!) by Chinese agents:

https://www.dw.com/en/china-sentences-swedish-publisher-to-1...

isoskeles 2021-08-18 16:31:49 +0000 UTC [ - ]

I do feel bad for the man, but he's not just a "Swedish guy."

dpratt 2021-08-18 15:43:41 +0000 UTC [ - ]

I think the point is that the average person who resides in the US is more concerned with Orwellian overreach from the NSA than the CCP surveillance apparatus.

The Chinese secret police don’t present a threat to me, whereas the NSA has the means, motive (at the leadership level) and opportunity to violate my natural rights.

garmaine 2021-08-18 16:07:38 +0000 UTC [ - ]

Depends on the person. Those of us with ties to lands within Chinese sphere of influence are rightly more cautious. Others just don’t care.

therealmarv 2021-08-18 16:03:58 +0000 UTC [ - ]

What I think is funny: There are more privacy for consumer laws for Chinese tech companies in China than for US tech companies in USA! It's wild west essentially in USA in this regard. I'm sure what Apple is doing is also against the European Union's GDPR privacy laws. US is missing out here...

Retric 2021-08-18 16:26:35 +0000 UTC [ - ]

GDPR specifically excludes law enforcement so it doesn’t apply here. The sad thing is Apple was legally required to allow law enforcement to search iCloud backups before they implemented this system, so nothing fundamentally changed.

However, after this backlash you can bet other manufacturers will continue to hide what their actually doing.

therealmarv 2021-08-18 18:40:04 +0000 UTC [ - ]

As you've written... why there has to change something when it works already for law enforcement.

Retric 2021-08-18 19:08:10 +0000 UTC [ - ]

I think Apple was actually designing this system internally as an improvement in terms of privacy. Doing Perceptual hashing on the phones is more open and thus auditable than doing the same thing on their servers. They set things up to require multiple different images to match etc.

However, the perception was very different.

therealmarv 2021-08-19 10:14:32 +0000 UTC [ - ]

This kind of technology should not be on phone. Industry standard is doing it on the cloud. It requires only little code changes (let's say in the time frame of 5 years) that law enforcement or whoever says: Please extend that to offline photos and then it's only a few code changes to make that happen. I don't want a ticking time bomb and Apple pinky finger promises that this will not be abused in future.

Syonyk 2021-08-18 15:50:28 +0000 UTC [ - ]

That would be... literally all phones available today, wouldn't it? With the possible exception of the $2000 Librem 5 USA.

However, as one who's moved from an iPhone to a Nokia 8110 with KaiOS, which I in no way argue is as secure as iOS:

It has less on it. It has far less on it. It has my phone calls, a handful of text messages, and while it has email access right now, I'm experimenting with if I actually need that, or can remove it (leaning towards removing it). And my calendar.

The camera is horrible, so I just carry a pocket digital camera with me now if I care to take photos, which don't end up on the phone.

If I don't give it wifi privileges (which it currently has, but I've been running with wifi off and cell data off to see how that works, and the answer so far is "quite well"), there's simply not much it can really do to my accounts or network.

jazzyjackson 2021-08-18 17:13:33 +0000 UTC [ - ]

Japan, Thailand, and Vietnam manufacture a lot of phones.

isoskeles 2021-08-18 16:34:49 +0000 UTC [ - ]

I might make this change. Are you using any kind of app for 2FA like Google Authenticator?

Syonyk 2021-08-18 17:39:40 +0000 UTC [ - ]

I still have a few things like Authenticator rooted on my iPhone. I mostly use hardware tokens, so Authenticator is nice to have, but not critical for daily use. Signal is another one, I'm currently using the linked devices, but I don't have a "new root" yet.

I believe there are some Google Authenticator apps for KaiOS, just not in the main app store, and I've not gone through the process of working out sideloading yet.

kcartlidge 2021-08-18 19:31:40 +0000 UTC [ - ]

> Are you using any kind of app for 2FA like Google Authenticator?

I'd love to go feature phone, but would be missing two essentials for work purposes:

- A 2FA application (eg Google Authenticator, Authy)

- A password manager (eg BitWarden, KeePass, etc)

I can do without emails etc but not those two, yet whenever feature phones try and be more feature-some they do the same old emails, FB, WhatsApp etc instead.

sneak 2021-08-18 18:43:31 +0000 UTC [ - ]

You can use a password manager to do TOTP codes.

Google Authenticator is sort of a crap option for doing TOTP, all things considered.

neuronic 2021-08-18 15:31:06 +0000 UTC [ - ]

That’s not a bid for privacy, it’s a bid for spite.

Picking a Chinese phone based on financial circumstances, however, is understandable IMO.

gruez 2021-08-18 15:34:58 +0000 UTC [ - ]

By "random Chinese phone", are we talking about PINE, or the various OEMs that make android phones?

jcun4128 2021-08-18 15:50:28 +0000 UTC [ - ]

The Pinephone seems good as far as being mostly open, cheap, physical switches but... I guess the modem is not open. Anyway have I personally tested that the switches actually work/no soft switch somewhere no... I'm mostly after the potential emerging market (apps) over privacy.

I have a KDE edition Pinephone that I intend to use more overtime but primarily an Android user.

Also I get super annoyed when Android bundles stuff on your phone. I realize you can get rid of it/the cheap phone has to get paid somehow... but like having notifications that you can't slide away... things like that. Want more control over I realize Linux phones are lacking in software, pretty bad... Plasma looked really nice, Phosh not so nice (home screen) but it works out of the box though particularly detecting external screens. Anyway I'm looking forward to it improving over time, a cheap Samsung Dex-like experience is my desire.

fsflover 2021-08-18 17:36:36 +0000 UTC [ - ]

> I guess the modem is not open

The Pinephone modem is partially open already:

https://linuxsmartphones.com/hackers-develop-open-source-fir...

jcun4128 2021-08-18 17:39:19 +0000 UTC [ - ]

Ahh that's nice yeah I think the keywords were "proprietary blobs" or something like that, anyway that's cool

Edit: another thing to my parent comment, ads in your voicemail... the visual voicemail app in Android. Omg that annoys me so much, thankfully I have not been getting many voicemails anymore.

2021-08-18 18:42:48 +0000 UTC [ - ]

scoopertrooper 2021-08-18 14:55:27 +0000 UTC [ - ]

Exactly, I think people are just getting a little too worked up over this whole thing. Apple computes a hash of each image you upload to iCloud then check it against a list of CP hashes.

Of all the things in the world to get worked up over, this is ridiculous.

I get it, the mechanism they're using has apparent flaws, and maybe some whacko could somehow get access to your phone and start uploading things that trick the algorithm into thinking you have CP.

But, that alone is such a ridiculous phobia, if someone has that level of access to your phone, they could upload real CP and maybe even upload it to your Facebook for good measure.

jrockway 2021-08-18 15:20:31 +0000 UTC [ - ]

Apple's using my electricity and my silicon to call the cops on me. We have no idea what hashes they're checking images against; we can't see the raw data, and we can't see the hashes, and we can't see what they're sending to their servers.

There is no technical reason why this needs to exist. If they want to scan iCloud photos for something, they can do that on their servers. iCloud is not end-to-end encrypted. Law enforcement can do whatever they want with the data you send there. Since they chose the client-side route, they have to be up to something, and it all smells very fishy. Today, they say it's for CSAM. Tomorrow, it will be for any discontent against whatever government wants to oppress its people this week -- and as time goes forward, that is not just third-world countries where you don't live, it could be your own.

Do you really want to explain to the police at your door at 3:30 in the morning why you read a website called Hacker News? This is the first step towards that reality.

Imagine I wrote a program that contained the phone numbers of people I don't like. The database is encrypted, and the only way to see if you're on that list is to install the app on your phone. The app does two things -- nothing if you're not on my list, or it sends me your location (at your expense!) if you are. Would you install that app? Absolutely not, that would be crazy. But that is basically what is bundled into iOS now.

I really like my iPhone and iPad Pro. I like how Apple handles privacy in general. But I can't accept this. It's a step too far. You don't have to draw the line there, but I draw the line there.

scoopertrooper 2021-08-18 15:35:52 +0000 UTC [ - ]

> Apple's using my electricity and my silicon to call the cops on me.

Okay.

> We have no idea what hashes they're checking images against; we can't see the raw data, and we can't see the hashes, and we can't see what they're sending to their servers.

Apple is getting the entire image regardless, this happens as part of the iCloud upload process.

> There is no technical reason why this needs to exist. If they want to scan iCloud photos for something, they can do that on their servers. iCloud is not end-to-end encrypted. Law enforcement can do whatever they want with the data you send there. Since they chose the client-side route, they have to be up to something, and it all smells very fishy.

It's a hell of a lot cheaper to distribute the load onto the device than to do it on GCP. However, this whole line of thinking is ridiculous, iOS is your operating system, it can send what it likes where it likes without you knowing about it. Why does this particular thing cause concern?

> Tomorrow, it will be for any discontent against whatever government wants to oppress its people this week -- and as time goes forward, that is not just third-world countries where you don't live, it could be your own.

> Do you really want to explain to the police at your door at 3:30 in the morning why you read a website called Hacker News? This is the first step towards that reality.

https://www.txstate.edu/philosophy/resources/fallacy-definit...

> Imagine I wrote a program that contained the phone numbers of people I don't like. The database is encrypted, and the only way to see if you're on that list is to install the app on your phone. The app does two things -- nothing if you're not on my list, or it sends me your location (at your expense!) if you are. Would you install that app? Absolutely not, that would be crazy. But that is basically what is bundled into iOS now.

Again, your overlooking the fact that this app is already coming from Apple the company that made iOS. They already control your phone, why would they need some additional app?

anonuser123456 2021-08-18 15:37:42 +0000 UTC [ - ]

> But I can't accept this. It's a step too far.

So turn off iCloud photos?

novok 2021-08-18 16:52:29 +0000 UTC [ - ]

For now. We see the direction apple is moving.

anonuser123456 2021-08-18 18:25:40 +0000 UTC [ - ]

The direction of not letting people store child porn on their servers? That's pretty much what everyone in the cloud space is doing already.

This service exists so Apple can E2EE your data while still placating DOJ.

novok 2021-08-18 19:49:25 +0000 UTC [ - ]

Totally missed the point. The direction of scanning everyone's phone for 'prohibited content', pushed on them by various governments. Be it political, fine in one country but not in another (adult homosexual), etc. And a future where the content scanning applies AI and reports you for doing such things such as taking pictures of police or protests.

It's a cop in your phone.

anonuser123456 2021-08-18 20:24:51 +0000 UTC [ - ]

If that's your position, you cannot own a closed source device with binary updates. Because the device provider _could_ always do anything.

What they actually do is what is important. And what they actually do is publicly disclosed so you can make your choice appropriately.

AbjectFailure 2021-08-18 17:04:25 +0000 UTC [ - ]

Why should Apple let pedophiles store CSAM on iPhones just because they’re not uploading it to iCloud Photo Library? It’s morally reprehensible to not disable that flag when it’s such a simple thing they can do to catch so many more criminals!

skinkestek 2021-08-18 17:28:06 +0000 UTC [ - ]

This is obviously sarcasm but I'd preface it with an explanation since HN is multicultural and not not everyone here is brought up to catch it effortlessly.

Edit: The point here is that even if Apple tries very hard to make this be only about photos about to be uploaded to the cloud, if the percentage of phones that turns off iCloud storage increases as a response to this new "snitch-on-me" feature that will be a very good argument for law enforcement to ask for a list of IMEIs that are not using iCloud, and it will also tempt them to demand that Apple start scanning all files.

anonuser123456 2021-08-18 18:28:40 +0000 UTC [ - ]

You own your iPhone. Apple owns iCloud servers.

It's very simple. You want to upload images to iCloud? Then let your phone scan it and upload it. You don't want your images scanned? Don't upload them to iCloud.

AbjectFailure 2021-08-18 20:01:07 +0000 UTC [ - ]

As skinkestek kindly pointed out, the point of my sarcastic comment was that now that the precedent of scanning the contents of users’ devices - as opposed to the contents of Apple’s servers - has been set, deciding whether to do so based on the state of a single “Store photos in iCloud?” toggle is going to start looking awfully arbitrary.

zepto 2021-08-18 15:24:45 +0000 UTC [ - ]

> iCloud is not end-to-end encrypted

Yet. Have you considered that this might be a necessary precursor to making iCloud e2e?

dont__panic 2021-08-18 15:41:11 +0000 UTC [ - ]

If the goal was to make iCloud e2e, why not release both features at the same time so people can see that they're codependent (in Apple's eyes)? Without any kind of announcment or promise of e2e iCloud, we're just speculating for possible reasons why this might be OK. Might as well guess that this is going to allow Apple to give us free iCloud storage, too, while we're coming up with wishlist features.

zepto 2021-08-18 16:04:16 +0000 UTC [ - ]

> we're just speculating for possible reasons why this might be OK.

Sure. All the statements about why it’s not ok are also just speculation.

> why not release both features at the same time

That’s not how Apple typically works. They release a feature, try to make sure it works as expected and only then release the features that depend on it.

benhurmarcel 2021-08-18 20:40:22 +0000 UTC [ - ]

Then doesn't that seem hypocritical to you to defend dropping Apple right now for the imagined future possibility that all local photos could be scanned (instead of just the uploads)?

AbjectFailure 2021-08-18 16:01:59 +0000 UTC [ - ]

There’s little point in E2E encryption if snooping is moved outside of either end. This measure is only necessary for implementing E2E in iCloud insofar as it allows the feds to do the very thing I want E2E to prevent them from doing in the first place.

It’s as if USPS invented a new type of envelope that is physically impossible to open for anyone whose name is not written on the outside of it. Just one caveat: before they’ll give you any of these envelopes, you must allow them to read the letters being put inside.

If your concern is someone intercepting your mail before it gets to its intended recipient, this is great news. If your threat model involves federal agencies reading your mail, you’re no better off than you would be without these fancy new envelopes.

zepto 2021-08-18 17:03:11 +0000 UTC [ - ]

> if snooping is moved outside of either end

Yes, but this isn’t snooping.

AbjectFailure 2021-08-18 19:45:01 +0000 UTC [ - ]

They’re scanning users’ data on users’ devices. What do we call that if not snooping?

nottorp 2021-08-18 16:02:12 +0000 UTC [ - ]

Necessary ... for the US government? Definitely not for me.

IncRnd 2021-08-18 15:39:27 +0000 UTC [ - ]

Scanning people's on-phone photos clearly has nothing to do with being a precursor to e2e encryption. The photos get transferred either way, so one has nothing to do with the other.

hkt 2021-08-18 15:44:40 +0000 UTC [ - ]

Except for giving the authorities a way in to replace the one they're losing.

IncRnd 2021-08-18 16:52:19 +0000 UTC [ - ]

That's not what was being argued, but you made an excellent point.

zepto 2021-08-18 17:03:43 +0000 UTC [ - ]

What was being argued was exactly this.

IncRnd 2021-08-18 17:23:56 +0000 UTC [ - ]

I know what I was arguing, and it was specifically mentioned, so no it was not what was being argued.

zepto 2021-08-18 18:05:06 +0000 UTC [ - ]

> Scanning people's on-phone photos clearly has nothing to do with being a precursor to e2e encryption

This is what you were arguing. It is false.

IncRnd 2021-08-18 20:00:35 +0000 UTC [ - ]

Followed by this, "The photos get transferred either way, so one has nothing to do with the other."

It was clearly a technical statement not a privacy statement, so only superficial reading might lead one to believe it meant something that it did not.

That is why I replied that the person who replied to my comment, where I said I had argued something different, but that what he wrote was an excellent point.

So, what on earth are you so invested in that you feel the need to argue minutiae that don't apply?

zepto 2021-08-18 21:33:06 +0000 UTC [ - ]

> "The photos get transferred either way, so one has nothing to do with the other."

That doesn’t change anything. It may be a pre-requisite from the perspective of their business. You replied to me and I didn’t constrain my point to just technicalities.

> So, what on earth are you so invested in that you feel the need to argue minutiae that don't apply?

It does apply. I’m simply pointing out that what you said is not correct.

2021-08-19 01:33:15 +0000 UTC [ - ]

gjsman-1000 2021-08-18 15:28:42 +0000 UTC [ - ]

Apple could scan on the cloud. Rumor is that Apple wants to use E2E on iCloud, and this is a necessary step to shut up the government's biggest critique of E2E and deploy it before the government can figure out a different excuse. We'll see if that pans out.

Spivak 2021-08-18 15:44:24 +0000 UTC [ - ]

Your line is the maybe pennies of electricity over the lifetime of the phone? Weird. I can totally understand your line being the CSAM scanning itself but you seem to be fine with the exact same scanning being done with even more opaqueness and less transparency because it's done server side.

I also get the slippery slope thing since you don't really have any control over what your device does but that's been true since forever. Running some scan() method and posting matches to a URL is something that literally could have been done in the last 10 years. It's not like this tech is magically enabling something that wasn't possible before.

And I do get the using your resources argument but iPhones have had integrated DRM since forever.

The thing I don't get is why now? Surely you should have left ages ago?

jasonlotito 2021-08-18 16:51:22 +0000 UTC [ - ]

> This is the first step towards that reality.

You know, I could respect your opinion that this is where you draw the line, but you ignore all of Apple's history if you think this is the first step. This isn't the first step, this isn't the first chapter, this is at best the middle of the book where the plot twist happens.

No, this is clearly no the first step. This is the first step you chose to see the reality of the situation. You'll look back and you'll see how everything was paved with good intentions and how people sounding the alarm were ignored.

This isn't the first step.

2021-08-19 14:15:39 +0000 UTC [ - ]

andrei_says_ 2021-08-19 09:09:26 +0000 UTC [ - ]

Maybe consider that CP is just the excuse for the backdoor.

So apart from every Apple user being treated like a proven-until-innocent owner of CP, at all times, this will (yes, a matter of time) be used for political purposes, to find and silence activists, journalists, to discredit opposition leaders, to prosecute Uyugur/Muslims/women/palestinians etc.

Do we really believe that CP owners store their collections in iCloud / google cloud / Dropbox and view them on their phones? And that this is an issue on a massive scale?

Please.

These are the most expensive phones on the market, with an incredible profit margin for Apple. The part of these devices that we actually own is a shrinking territory.

Why not have the mics on all the time in case “someone says something related to a CP ring?”

carnitas 2021-08-18 15:08:01 +0000 UTC [ - ]

Apple hashes all of your photos offline and then pinky promises to only check the hashes against the official on phone database when the user initiated an upload. The problem isn’t about wackos it’s about governments forcing Apple to do things with this new weapon

tpush 2021-08-18 15:14:07 +0000 UTC [ - ]

> Apple hashes all of your photos offline [...]

No, only the ones designated for upload to iCloud.

> [...] it’s about governments forcing Apple to do things with this new weapon

Governments can already force Apple to do any kind of scanning, "weapon" being built already or not.

nottorp 2021-08-18 16:02:54 +0000 UTC [ - ]

> > Apple hashes all of your photos offline [...]

> No, only the ones designated for upload to iCloud.

How do you verify that?

theshrike79 2021-08-19 05:53:32 +0000 UTC [ - ]

If you turn off iCloud, the hash list will never get downloaded on your phone. No scanning will take place in that case.

nottorp 2021-08-19 09:47:24 +0000 UTC [ - ]

How do you verify that? :) You're just quoting what apple says. Which may be all they're allowed to say due to the national security letter thing.

theshrike79 2021-08-19 11:21:31 +0000 UTC [ - ]

I'm trusting in the hacker community with this.

If Apple really is trying to sneak in a CSAM database on your phone with iCloud disabled, someone WILL catch it and raise so much hell we'll all hear it.

nottorp 2021-08-19 12:39:29 +0000 UTC [ - ]

iOS is open source now?

withinboredom 2021-08-18 15:36:49 +0000 UTC [ - ]

Says who? Apple? How much is that worth?

Tagbert 2021-08-18 19:19:56 +0000 UTC [ - ]

If Apple were going to lie about this process, they didn't need to announce it and go into so much detail at all. They could have just kept it quiet the way the current server side CSAM scanning is done by others already. The legal and market impacts of Apple lying would be severe.

gjsman-1000 2021-08-18 15:11:41 +0000 UTC [ - ]

Every other cloud storage provider has implemented scanning since 2011-2013.

merpnderp 2021-08-18 15:40:37 +0000 UTC [ - ]

I haven't seen a single person concerned about Apple scanning photos in iCloud. The problem is entirely that the scan is happening on your personal phone with apparently some janky implementation that in one week has already shown to have serious flaws.

musha68k 2021-08-18 17:09:24 +0000 UTC [ - ]

IncRnd 2021-08-18 15:37:44 +0000 UTC [ - ]

> Exactly, I think people are just getting a little too worked up over this whole thing. Apple computes a hash of each image you upload to iCloud then check it against a list of CP hashes.

If that is what is supposed to happen, then it makes no sense for any new code to run on the device!

> Of all the things in the world to get worked up over, this is ridiculous.

Well, it is not crazy to get worked up over Apple saying they will check uploads to iCloud by checking what's on your phone - instead of simply adding code to iCloud. That seems obvious not ridiculous.

scoopertrooper 2021-08-18 15:41:35 +0000 UTC [ - ]

> If that is what is supposed to happen, then it makes no sense for any new code to run on the device!

The new code calculates the hash as part of the upload process. The comparison of the hash against known CP hashes happen on the server.

> Well, it is not crazy to get worked up over Apple saying they will check uploads to iCloud by checking what's on your phone - instead of simply adding code to iCloud.

They're still doing the checks in iCloud, but the hash is being computed on the client.

IncRnd 2021-08-18 15:46:32 +0000 UTC [ - ]

You simply repeated back to me what I wrote without addressing any of it.

scoopertrooper 2021-08-18 15:51:41 +0000 UTC [ - ]

Okay, well they're likely doing it to save money. I work in data engineering and I can tell you calculating the hash of every iCloud upload wouldn't come cheap.

Mystery solved?

IncRnd 2021-08-18 16:50:07 +0000 UTC [ - ]

You are completely missing the point. The answer to a privacy and security question shouldn't be, "it is easy for us to do things this way." You are inadvertently making the point that you are arguing against.

scoopertrooper 2021-08-19 08:03:16 +0000 UTC [ - ]

Going back to your original point, what makes you think checking for CP in images uploaded to iCloud is more private or secure when Apple's servers analyse the entire image, rather than having the client generate a hash of the image and having Apple's servers analyse that instead?

I work in data engineering and I can tell you what I'd rather do. Having Apple's servers check hashes rather than the entire image means you can segregate the original images from the CP-checker data processing pipelines. That's a much simpler and more secure security scenario.

nobodyandproud 2021-08-18 17:05:46 +0000 UTC [ - ]

What happens if someone with access to the database maliciously crafts innocent-looking images that collide with of the registered images?

Maybe include children so that on first glance the reviewer will just forward to the authorities.

You get these images, store it, then you get flagged.

Now what? What’s your recourse when the FBI insists that you’re guilty, and your reputation is ruined?

There absolutely is a problem of pedophiles, but the process that Apple is using seems ripe for abuse.

vbezhenar 2021-08-18 15:45:13 +0000 UTC [ - ]

> I get it, the mechanism they're using has apparent flaws, and maybe some whacko could somehow get access to your phone and start uploading things that trick the algorithm into thinking you have CP.

Whatsapp by default adds all received images into Photos. So all it takes is to send you few dozens of pictures while you're sleeping.

pshirshov 2021-08-18 15:45:03 +0000 UTC [ - ]

> if someone has that level of access to your phone, they could upload real CP and maybe even upload it to your Facebook for good measure.

Many messengers, including Whatsapp, save all the incoming pics into camera roll by default.

merrywhether 2021-08-18 16:02:43 +0000 UTC [ - ]

And if you have iCloud Photos turned on, those images are already being uploaded and then CSAM-scanned on Apple’s servers. The chain is just being configured differently, but this risk is already active.

pshirshov 2021-08-18 16:06:49 +0000 UTC [ - ]

The actual problem is not CSAM scanning.

The actual problem is that they've created a great surveillance tool which will inevitably get broader capabilities and they are normalising client-side data scanning (we need to eradicate terrorism, now we need to eradicate human trafficking, and now we need to eradicate tax evasion, oh, we forgot about gay russians, hmm, what about Winnie memes?).

gjsman-1000 2021-08-18 16:13:02 +0000 UTC [ - ]

But this was already true. There is no reason the governments couldn't have required this tool to be built at anytime all along. Remember EARN IT where Senators said figure something out (like this CSAM tool) or they'll do it for Apple? The EU is similar, with upcoming draft legislation saying they have to do it if they don't figure something (like this) out.

jazzyjackson 2021-08-18 17:16:41 +0000 UTC [ - ]

Back during the FBI/Apple fiasco where the government was lobbying Apple to install a backdoor to unlock phones, Apple argued that their 1st Amendment Rights were being violated, that the government could not force them to write software (since software is speech, and the government cannot force you to say something against your will)

One random article of many: https://money.cnn.com/2016/02/25/technology/apple-fbi-respon...

Edit: but through regulations they could probably say 'you're not allowed to sell phones without x backdoor' but maybe the government didn't want to spell out specifically what capabilities are required.

WorldMaker 2021-08-18 18:54:18 +0000 UTC [ - ]

Which is why CSAM is possibly a really interesting compromise/counter-argument. Supposedly, the only actual crime that the FBI has repeatedly sent warrants to Apple about have been child pornography/trafficking and it's an interesting stance for Apple to take here: "we'll address the actual and specific crime you seem most interested in, but will still not give you a generic backdoor".

Many of the arguments/fears about CSAM is that it can be widened to be a generic backdoor, but as you point out in the arguments Apple has already argued in court Apple doesn't seem to think a generic backdoor is a good idea and have strongly fought against it and CSAM seems to be entirely designed to not be capable as backdoor, and especially not a generic backdoor.

I absolutely understand the fears of false positives and whatever processes the FBI and other TLAs choose to do with the results from CSAM (though many of those concerns apply to everything the TLAs do regardless of what technical tools they have at their disposal), but I'm not sure that I understand all the fears that CSAM is a generic backdoor (in the making) given what Apple have revealed about how it is built and what Apple's quite explicit reasons seem to be to build it to entirely avoid building a generic backdoor and that everything about it seems a "thumb your nose at the FBI by doing what they ask explicitly for but not what they really want to build" by entirely building something that can't be used as a generic backdoor and is very specifically built to only a tiny explicit use case the FBI has asked for. At least from what I've seen so far.

pshirshov 2021-08-18 16:51:17 +0000 UTC [ - ]

You still may donate to liberty and FOSS NGOs, switch to ungoogled Android and drop macOS in favour of Linux. Also you have your rights and opportunities for activism and peaceful protest. This is not illegal yet (effectively illegal in Russia/China though).

gjsman-1000 2021-08-18 14:57:42 +0000 UTC [ - ]

Also, all of the "situations" where this could be abused are already applicable on all other platforms. There's no reason your Ex couldn't upload CSAM to your Google Photos account, or to your Facebook account. Google Photos and predecessors have scanned since, what, 2013?, and would detect it, and would report it to law enforcement.

Despite this having been a possibility for almost a decade... there's a suspicious lack of headlines of this attack occurring.

ApolloFortyNine 2021-08-18 15:13:06 +0000 UTC [ - ]

This kinda of sounds like "let them put a camera in my living room, I'm not doing anything wrong".

The biggest complaint here is clearly this is not where it'll end, and it's not a unique hash, so there will be false positives. And since it's publicly announced, this is very unlikely to catch any producers of CP, and would only catch the dumbest consumers. So it's an invasion of privacy with very little chance of having a noticeable impact.

syntaxstic 2021-08-18 15:29:36 +0000 UTC [ - ]

This is only applicable in the US?

gjsman-1000 2021-08-18 15:32:11 +0000 UTC [ - ]

Yes - only the US has this "feature."

cartoonworld 2021-08-18 17:58:05 +0000 UTC [ - ]

>Apple computes a hash of each image you upload to iCloud then check it against a list of CP hashes.

I don't think it computes a hash of the image, it's a tad more involved than that.

Simple hashing is easily evaded. They must be computing an identifier from the contents of the images in the CSAM database. This requires computational analysis on the handset or computer. If that's all that were happening that would be no problem, but of course there are management interfaces to the classifer/analyzer, catalog, backend, &c

The contents of the identifiers are purposefully opaque to prevent spoofing of the identifier database. I don't know what is included in the images; what if I take a picture at Disneyland with a trafficked person in the frame? Will that make it into the qualifier database? What is added to the CSAM signature database and why? What is the pipeline of hashesfrom NCMEC and other child-safety organizations->Apple's CSAM image classifer alarm?

>I get it, the mechanism they're using has apparent flaws, and maybe some whacko could somehow get access to your phone and start uploading things that trick the algorithm into thinking you have CP.

The CSAM analyzer could be subverted in any number of ways. I question how the CSAM identifiers are monitored for QA (I actually shudder thinking there are already humans doing this :( how unpleasant.) and the potential for harmful adversaries to repurpose this tool for other means. One contrived counterfactual: Locating pictures of Jamal Kashoggi in people's computer systems by 0-day malware. Another: Locating images of Edward Snowden. A more easily conceived notion: Locating amber alert subjects in people's phones, geofenced or not.

To my eyes, it appears we will soon have increased analysis challenges. Self analysis of device activity and functions for image scanning malware (for example) is slightly harder, we have added a blessed one with unknown characteristics running on the systems. Does this pose a challenge to system profiling? How/does this interact with battery management? Is only iCloud scanning, or is everything scanned and then only checked before being sent to iCloud? (this appears to be the case[X])

There should be user notification too. If some sicko sends me something crazy somehow, I would surely want to know so I can call the cops!!

All in all this makes me feel bad. There is not a lot of silver lining from my perspective. While the epidemic of unconscionable child abuse continues, I question the effectiveness of this approach.

I would not consider jailbreaking my iPhone but for this kind of stuff. I would like to install network and permissions monitoring software on my iPhone such as Bouncer[0], Little Snitch[1], although these are helpfully not available for iOS.

I feel grateful that I am unlikely to be affected by this image scanning software, I'm planning to continue my personal policy of never storing any pictures of any people whatsoever. I don't even store family photos this way. My Life is not units in a data warehouse.

[0] - https://play.google.com/store/apps/details?id=com.samruston....

[1] - https://www.obdev.at/products/littlesnitch/index.html

[X] - Apple's Whitepaper: https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...

randomdata 2021-08-18 15:15:37 +0000 UTC [ - ]

> I think people are just getting a little too worked up over this whole thing.

They aren't, but the blame is misguided. This isn't a problem with Apple. What is Apple going to do if they do detect something identified as CSAM on your device? Refuse to sell you another? Oh well. The real worry is what other parties will do if they get ahold of the information. That is what needs to be fixed. Apple is exposing the underlying problem, not causing the problem themselves.

scoopertrooper 2021-08-18 15:25:37 +0000 UTC [ - ]

Apple have said what they're going to do. If the number of hash hits reaches 30, then they'll scale the image down and send it off to their manual review team. If they confirm it's CP, then they call the police.

randomdata 2021-08-18 15:39:35 +0000 UTC [ - ]

Exactly. They're not going do much of anything. It is what happens after the final step outlined that actually concerns people, and that is where the real problem lies. Apple is simply exposing the problem; or perhaps more accurately bringing the problem we all understand exists into the limelight. Had Apple not implemented this feature, or implemented it differently (scanning server-side, for example), the problem would still be there.

scoopertrooper 2021-08-18 15:48:35 +0000 UTC [ - ]

If a pedophile takes their computer (loaded with CP) to a repair shop and they find CP they call the police.

If a pedophile uploads CP to the internet and the host finds CP they call the police.

Both seem like reasonable responses to me.

cartoonworld 2021-08-18 18:41:15 +0000 UTC [ - ]

Totally reasonable response. I would like Apple to notify me so that I can call the police after my threshold of one NCMEC and other child-safety organization image identifier matches on my personal computer systems.

This will violate my IT device usage policy! Apple is not my IT department!! We have a ZERO TOLERANCE IT device usage policy. By not calling the local police department after one violation, we violate the policy. There is also a form which must be signed before HR (Girlfriend) so they can be present on the call to LE or else be subject to disciplinary action up to and including termination.

randomdata 2021-08-18 15:54:30 +0000 UTC [ - ]

Again, it is what happens after that which has people worried. Apple is simply bringing attention to it.

scoopertrooper 2021-08-18 16:46:26 +0000 UTC [ - ]

The police investigate the matter and a case might be brought to trial?

randomdata 2021-08-18 16:47:58 +0000 UTC [ - ]

As it turns out, people don't like having to deal with police, nor do they like the idea of potentially losing a trial (especially in the court of public opinion).

scoopertrooper 2021-08-19 02:20:38 +0000 UTC [ - ]

Then it sounds like you should be arguing for for a repeal of CP laws. A controversial stance.

randomdata 2021-08-19 02:47:52 +0000 UTC [ - ]

I have no feelings towards the topic. I am merely summarizing what the consensus is writing on places like HN towards what Apple is doing.

The general sentiment does appear to be that the laws are misguided. That does not necessarily mean repeal is necessary. Augmentation may also provide a solution that satisfies their concerns. However, that is moving well beyond the topic at hand. There is no indication I can find that some kind of change is controversial. There is clear worry about the status quo based on the potential outcome of what information Apple may glean.

What remains is that Apple isn't anyone's real concern. An inanimate corporation can't do much to you. Apple is simply bringing attention to what actually concerns people, which is something that was already there all along.

nottorp 2021-08-18 16:03:56 +0000 UTC [ - ]

Again, how can you verify that's what they'll do?

ByteWelder 2021-08-18 14:41:32 +0000 UTC [ - ]

There are plenty of Android flavours that don't have Google apps, like https://lineage.microg.org/ In my limited experience so far, LineageOS works much better than it used to on my HTC Desire. Battery life has been better than any of my iPhones (3G, 4S, 5S, 7 and XS) ever had.

That said, if I had to chose between a Google Android phone and an Apple phone, I'd still pick the Apple one. Luckily there are more choices these days.

svavs 2021-08-18 15:11:35 +0000 UTC [ - ]

I haven't used Android as a daily phone since the EVO (I know, its been a while). One issue I had with Android and custom firmware was the time involved. Being on a computer all day, and often times at night, having to deal with tech support issues on my device is a hard stop (for me, personally, plenty of people love it).

That's the nice part of Apple's ecosystem - its pretty simple and requires minimum intervention.

blakeinate 2021-08-18 16:47:11 +0000 UTC [ - ]

As someone who had an Evo with custom FW back in the day, I can attest the process is much simpler in recent years. If you do your research and ensure the device you are purchasing has official lineage support, the entire setup procsss takes less than an hour. Lineage includes built in update support as well, although to upgrade between major versions you still need to use a computer if I remember correctly.

I purchased my first iPhone since the 3G this year, and it is currently for sale on swappa. I am willing to compromise on a slightly less polished UI and subpar camera to get the UX of android back; at least for me, iOS was lacking many features I could consider essential.

RussianCow 2021-08-18 15:14:58 +0000 UTC [ - ]

To be fair, once you get past the initial setup, everything mostly Just Works™. But still, I completely understand not wanting to deal with installation and the potential consequences if something goes wrong. (I nearly bricked a device from a botched installation once, so I know how stressful that is.)

ziml77 2021-08-18 15:35:37 +0000 UTC [ - ]

I don't doubt that it just works nearly as well as an iPhone, but I want someone else to be responsible if things do go wrong.

For similar reasons, I don't self-host important services like email despite having my own domain. If shit goes wrong, I want the company I'm paying to have their people take care of it. I don't want to have to rush to fix it myself.

mylons 2021-08-18 14:48:40 +0000 UTC [ - ]

android is no where near competitive with apple’s user XP. i was a long term android user until 3ish years ago. i’ll never go back to a fragmented device ecosystem again if i can help it.

alangibson 2021-08-18 15:34:06 +0000 UTC [ - ]

It's like QWERTY vs Dvorak. The best one is the one you're used to. I personally find Windows and iOS frustrating, but I know it's because I'm used to Linux and Android.

mylons 2021-08-18 15:57:59 +0000 UTC [ - ]

that’s not true. i just gave an example of switching from what i was used to, to something new that i thought was superior.

rcMgD2BwE72F 2021-08-18 16:44:52 +0000 UTC [ - ]

Why would fragmentation be a problem as an Android user?

mylons 2021-08-18 22:51:39 +0000 UTC [ - ]

google doesn't control for device screen sizes, software that other vendors load on, or the CPU/ram/storage on the phone, watch, or tablet. they also allow 3rd party app stores. this creates an experience that is out of google's control and in a lot of cases is sub optimal for the user. it's not as stream lined or polished as it could be.

rcMgD2BwE72F 2021-08-19 15:53:08 +0000 UTC [ - ]

Any example? I've been using both iOS and Android devices of all shapes and form factors since both launched (and I work at a mobile app editing co) and have no idea of the inconvenience for end users.

RussianCow 2021-08-18 16:14:14 +0000 UTC [ - ]

To each their own. I switched to an iPhone early this year after always having used Android before, and I won't be buying another one. Apple nails the big picture stuff, but they have really dropped the ball on some of the details in their UX. Just a few arbitrary gripes off the top of my head:

* The Clock app doesn't let you set a snooze length? Seriously?!

* Not having a notification LED or some other indicator really sucks. I might set my phone on the counter while I'm doing other things, and with Android, it was nice to be able to look up and see if I've gotten something without walking up to the phone and checking. (I know Apple will likely never implement this because it's a great pitch for their watch.)

* Face ID is slow and inconsistent compared to a fingerprint reader (especially during COVID), and I'm bummed that Apple ditched the latter. It works well about 80% of the time, and the other 20% I'm that crazy-looking person that's making faces at his phone trying to get it to unlock.

* If you had any sort of media app open previously and then connect some Bluetooth headphones, the media controls for that app open up and take up most of the lock screen, and there is no way to swipe them away; you have to kill the app to get them to disappear.

* I miss the inline notification controls. On Android, apps can give their notifications extra buttons, so you can do things like delete an email right from the notifications bar without having to open the app.

* My friend and I regularly send each other voice memos. First of all, the built-in voice memo feature in iMessage is atrocious (no seek and you have to restart from the beginning if you leave the screen), so we use the Voice Memos app to send each other audio files. Except, when you play an audio file inline through either iMessage or Mail, the screen will still turn off and lock, which pauses the file. You have to save it to Files, then open it via the Files app to ensure that it continues playing in the background. How are you supposed to know this?!

* If your iCloud storage is close to full, Apple will continually notify you every few days via your phone and email, and there is no way to disable these notifications.

* Needing a special charger sucks. Everything else I own is either USB-C or microUSB at this point, but my iPhone needs its own charging cable that nothing else uses.

* All of the special treatment that only Apple's apps get is frustrating. For instance, why does only Apple's Clock app get a special timer UX on the lock screen, and everyone else's has to use a notification? Why does only Safari support ad blockers? And why is the camera button on the lock screen limited to the built-in Camera app? They really push their own apps with these artificial benefits, which detracts from the plethora of apps in the App Store.

* Syncing files (in both directions) without iCloud is a pain, and I'm not going to pay for an iCloud subscription. There are lots of different ways to achieve this, but none of them are as easy as simply using SyncThing on Android.

Even though Android is lacking in certain areas, I find the UX to be a lot more consistent than that of iOS, and I would take the consistency and flexibility of Android over all of Apple's corner cases and attempts to predict how I will use my device. But again, that's my personal preference, and to each their own.

(Sorry, this turned out to be much longer than I expected. I guess I'm more frustrated by iOS than I realized!)

2021-08-18 15:31:04 +0000 UTC [ - ]

ocdtrekkie 2021-08-18 15:05:49 +0000 UTC [ - ]

microG is still sending information to Google in order for apps and services to work. It does NOT free you from Google.

RealStickman_ 2021-08-18 15:37:47 +0000 UTC [ - ]

Use Lineage without microG then.

runjake 2021-08-18 14:45:31 +0000 UTC [ - ]

Plus, in the same use case (photos in the cloud), they’re still being scanned for CSAM and probably piracy and whatever else Google scans for.

gjsman-1000 2021-08-18 14:48:07 +0000 UTC [ - ]

Google has been scanning photos for CSAM for... what, almost a decade now?

Also, as an iPhone user, contrary to the recent Hacker News fight, I actually view this CSAM scanning with a sign of hope, because this hints that we could get end-to-end encryption on iCloud Storage. The CSAM scanning is rumored to be just a prerequisite to get the government to shut up with their biggest critique of E2E, so that Apple can then turn it on.

If I can get E2E storage from iCloud but accept CSAM scanning on my device to satisfy the law... I'm OK with that choice. You might not, in which case, Android (and I'll probably buy a backup Android phone "just in case").

sigmar 2021-08-18 15:06:20 +0000 UTC [ - ]

Oh yes, I'm sure the FBI will be satisfied with using the backdoor to only find CSAM, they definitely will not use the access for 'anti-terrorism' and drug enforcement. That sounds just like the FBI.

What good is E2E encryption when they can scan your client with a backdoor? All Apple is doing with this hashing is giving themselves plausible deniability when this access gets abused down the road. "Oh we didn't know they would use those hashes to arrest those protesters, we couldn't have foreseen this"

twobitshifter 2021-08-18 16:19:33 +0000 UTC [ - ]

Doesn’t Apple have a front door to change your phone at the FBI behest? Weren’t they already able to upload data (telemetry etc)? It doesn’t make sense to pretend that there was an existing state where Apple couldn’t get data off your phone if the FBI ordered surveillance.

sigmar 2021-08-18 16:52:07 +0000 UTC [ - ]

There was a huge court case about Apple refusing to update the OS of a particular phone that was in fbi possession in order for the fbi to see its encrypted contents. https://en.wikipedia.org/wiki/FBI%E2%80%93Apple_encryption_d...

2021-08-18 15:20:33 +0000 UTC [ - ]

withinboredom 2021-08-18 15:42:09 +0000 UTC [ - ]

Yes, we are one warrant away from just sending all data to the FBI using this system.

Spivak 2021-08-18 15:49:18 +0000 UTC [ - ]

But this was already true! I don't get why this is the thing that's made people realize that they have zero control over their phones and that Apple could have any time in the last decade just uploaded all of your data to the FBI if compelled to.

gjsman-1000 2021-08-18 15:10:15 +0000 UTC [ - ]

E2E with some scanning at the onramp is still much better than no E2E. If iCloud was compromised, your data is still safe, among many other reasons. If the US Military physically raided the data center and carted out all the hard drives, my data would still be secure. It's still a better alternative. It's not perfect by any stretch, but it's better than what we have now.

Also you are aware Google Photos, Facebook, etc. do scanning anyway and have for almost a decade?

beders 2021-08-18 15:45:44 +0000 UTC [ - ]

There is no privacy on the internet and on your phone. People really need to get over this.

runjake 2021-08-18 16:06:18 +0000 UTC [ - ]

I won’t get over it. You need to get over people not getting over it.

bastardoperator 2021-08-18 16:17:11 +0000 UTC [ - ]

This^

For me it boils down to ecosystem and integration. I can have a fragmented set of devices and tools, or I can deal with CSAM having literally zero impact on me.

I also have an M1 laptop, it's insane that this little MacBook Air with 16GB ram is walking all over a 16'inch Macbook Pro with 64GB ram.

netsec_burn 2021-08-18 14:40:27 +0000 UTC [ - ]

AOSP/FDroid would be a middle ground for your requirements, no?

gjsman-1000 2021-08-18 14:42:42 +0000 UTC [ - ]

I've tried that too. But I work from home and not having the ability to use Banking apps on AOSP without a ton of patching and hacks that could fail anytime afterwards is an issue. Also the camera performance on AOSP is noticeably worse in my experience, and I'm not alone.

To make AOSP "usable" for my life, I need to install the Play Store. At which point I've already lost and would prefer an iPhone for my privacy.

RMPR 2021-08-18 17:55:44 +0000 UTC [ - ]

> To make AOSP "usable" for my life, I need to install the Play Store. At which point I've already lost and would prefer an iPhone for my privacy.

To be fair you don't need to, I use Aurora Store, they have a guest mode where you don't need to register any account.

giancarlostoro 2021-08-18 15:38:40 +0000 UTC [ - ]

It's only a matter of time before Google starts doing the same thing. I can't imagine Google wont do it eventually.

bengale 2021-08-18 15:42:05 +0000 UTC [ - ]

I don't think they will. They already scan it all in the cloud, and the benefit of doing it on device is for user privacy, that's not something google gives a shit about.

TrueGeek 2021-08-18 17:11:49 +0000 UTC [ - ]

Or does it already and didn't feel the need to make a press release.

0x0 2021-08-18 14:48:15 +0000 UTC [ - ]

macOS has been announced to scan just like iOS

gjsman-1000 2021-08-18 14:49:48 +0000 UTC [ - ]

Incorrect. It will use a generic model to warn children that they could be exposed to nudity, but that runs on-device and sends nothing to Apple. (It's just a generic nudity detection model).

On iOS and iPadOS, they will implement the iCloud Photos CSAM scanning, but Apple left out macOS as having that for now. Rumoredly according to GitHub reverse-engineers of the system, it's due to the mathematical precision of the NeuralHash algorithm being processor-dependent on ARM and not Intel.

0x0 2021-08-18 14:51:15 +0000 UTC [ - ]

From https://www.apple.com/child-safety/ :

> These features are coming later this year in updates to iOS 15, iPadOS 15, watchOS 8, and macOS Monterey.

tpush 2021-08-18 15:09:01 +0000 UTC [ - ]

It's a bit confusing; 2 paragraphs above that line:

"Next, iOS and iPadOS will use new applications of cryptography to help limit the spread of CSAM online, while designing for user privacy."

That implies macOS isn't getting the CSAM scanning stuff (yet?).

djrogers 2021-08-18 15:04:51 +0000 UTC [ - ]

That's at the end of a summary of all 3 features. Each one has the specific OSs listed though:

> iOS and iPadOS will use new applications of cryptography to help limit the spread of CSAM online

gjsman-1000 2021-08-18 14:53:12 +0000 UTC [ - ]

In that case, I'm not sure. The people reverse-engineering the algorithm say they aren't quite sure if that's because the system hasn't shown up in MacOS Developer Previews yet (where it has in iOS and iPadOS), or if that's because they are referring to the generic nudity detection instead of the database matching system.

For now, the security experts looking at this say that the nudity detection model is on all platforms, but the database matching in iCloud Photos is only on iOS and iPadOS and it's unclear whether it will come to macOS.

rvz 2021-08-18 15:51:34 +0000 UTC [ - ]

> Rumoredly according to GitHub reverse-engineers of the system, it's due to the mathematical precision of the NeuralHash algorithm being processor-dependent on ARM and not Intel.

If true, it's highly probable that Apple can just port it to macOS and have it work especially for the Apple Silicon line up rather than Intel.

But only Apple knows. But so far, it seems like ignoring the M1 hype was the smart thing do.

AnIdiotOnTheNet 2021-08-18 15:04:58 +0000 UTC [ - ]

I'm reasonably confident that Google listens to every conversation I have within earshot of my phone. It isn't uncommon to find things in my news feed that are related to things I have no interest in but a friend or coworker had just mentioned to me in passing.

NationalPark 2021-08-18 15:18:08 +0000 UTC [ - ]

The conspiracy that never dies. I think it's so sticky because people feel very uncomfortable when they realize how much Google knows about you without having to listen.

nicce 2021-08-18 15:30:33 +0000 UTC [ - ]

It is not conspiracy. There is literally an option on your Google account to stop using mic for collecting data. On older accounts, it is enabled by default.

NationalPark 2021-08-18 15:41:17 +0000 UTC [ - ]

Are you referring to the voice assistant telemetry? That's not passively recorded according to Google, but if you have evidence to the contrary I can think of a number of news outlets (and prosecutors in 2 party consent states) that would love to have it.

nicce 2021-08-18 15:48:14 +0000 UTC [ - ]

The option was there before voice assistant existed in 2013 or something. That is when I figured it out myself. I don't know how the description of that is changed during the years.

thealistra 2021-08-18 15:17:51 +0000 UTC [ - ]

At work you have the same IP. Your coworker may have googled what he was taking about. This is a much easier explaination than a constant mic monitoring for arbitrary phrases

withinboredom 2021-08-18 15:39:24 +0000 UTC [ - ]

Don’t people have data caps where they’d notice if a ridiculous amount of audio was sent to a server?

dont__panic 2021-08-18 15:56:02 +0000 UTC [ - ]

If you did all of the analysis on device, even quite cheaply, you could just transcribe key words and phrases into a text file and upload that. That would only be a few kilobytes of data tops per day of unique words and phrases, I should think. And if you've ever tried to monitor data usage on an Android phone, you'll know that the monolith of Google Play Services phones home all the time with all kinds of pings and datapoints, so it wouldn't be hard at all to upload that data.

KaiserPro 2021-08-18 16:01:25 +0000 UTC [ - ]

and you'd have no battery inside an hour.

watch words are simple to listen for, generalised transcription is far harder.

fsflover 2021-08-18 17:43:55 +0000 UTC [ - ]

Doesn't your phone stay on charge sometimes?

AnIdiotOnTheNet 2021-08-18 15:22:50 +0000 UTC [ - ]

There are a lot of people at this company, and my news feed doesn't diverge enough to account for all of their varied google searches.

zepto 2021-08-18 15:26:32 +0000 UTC [ - ]

No, but it would be easy to tell that you associate with your co-worked by correlating Bluetooth beacons, which many apps do for exactly this purpose.

Yeri 2021-08-18 15:42:16 +0000 UTC [ - ]

More realistically, your co-worker googled it on their phone. They also email/chat/sms/call you once in a while, so they know you're connected.

Now, it's only logical that you may share certain interests, so why not show ads for things they bought/googled for to their contacts?

bengale 2021-08-18 15:41:14 +0000 UTC [ - ]

Yeah I can't decide on this one. Part of me thinks this can't be happening, and that someone would have realised. But there's been a couple of occasions that go beyond the "creepy coincidence" ads to something that I was speaking with my wife about that day and neither of us had put into the internet, suddenly we get ads for it.

jdgoesmarching 2021-08-18 16:03:49 +0000 UTC [ - ]

People really aren’t capable of conceptualizing how intimate normal data collection and analytics are capable of being. You think your phone is listening because you assume that’s the only way the ads can know so much, and ironically the truth is far more invasive.

misiti3780 2021-08-18 15:19:05 +0000 UTC [ - ]

I doubt they are listening - What is more likely is Google can use your lat/lng and knows that you and your co-worker work near each other, etc and is making recommendations based of proximity.

AnIdiotOnTheNet 2021-08-18 15:23:58 +0000 UTC [ - ]

It's plausible, but I still don't buy it because I don't see divergent things when I, say, sit next to a complete stranger in the break room cafeteria.

2021-08-18 15:21:16 +0000 UTC [ - ]

exhilaration 2021-08-18 15:48:42 +0000 UTC [ - ]

Have you considered an even scarier alternative: that Google simply has such an enormous amount of data about yourself and the people around you that they can make incredibly accurate predictions like this?

salzig 2021-08-18 15:20:26 +0000 UTC [ - ]

you don't need to listen at every conversation. Your friend was tagged with those topics, and there is a connection to you. It's simple enough to "copy" those topics over to you, cause you're maybe also intrested. :)

guerrilla 2021-08-18 15:11:42 +0000 UTC [ - ]

What do you say about the people who have tested this and found nothing?

AnIdiotOnTheNet 2021-08-18 15:25:24 +0000 UTC [ - ]

There's a good chance I'm wrong, but it certainly seems like that's what's going on. I haven't seen anyone's testing of this, but it is also possible their methodology is flawed.

hnfong 2021-08-18 15:15:07 +0000 UTC [ - ]

AB testing?

laurentlbm 2021-08-18 15:18:56 +0000 UTC [ - ]

Maybe Google heard them say that they were going to test!

cassianoleal 2021-08-18 15:18:18 +0000 UTC [ - ]

https://news.ycombinator.com/item?id=28118619

macOS does _something_ related to this system. It's unclear what though.

I agree with how impressive the M1 is. I've replaced my 16" fully specced i9 with a 13" M1 Air. The only thing I sometimes miss is the larger screen but not by much.

corndoge 2021-08-18 15:43:32 +0000 UTC [ - ]

> It's just not there yet

Respectfully, it is there. You are not. Which is fine - I prefer a Mac for general purpose computer use, word processing, web browsing, that sort of thing. But Linux can do these things just as well, it just requires you to configure them, which is strictly a "you" constraint and not a failure of the system.

BlueParanoia 2021-08-18 17:33:21 +0000 UTC [ - ]

This is a pretty bad argument. You can apply that "you're the constraint" logic to tons of bad designs and products and claim they're not actually bad.

Linux is not necessary a bad system, but usability (degree of effort, burden of knowledge, misuse risk) are absolutely a core determination on where or not a piece of technology is "there yet"

fsflover 2021-08-18 17:41:43 +0000 UTC [ - ]

> degree of effort, burden of knowledge, misuse risk

I don't understand what you mean. My non-technical relatives use Linux just fine. There is no "burden of knowledge".

fartcannon 2021-08-18 15:24:53 +0000 UTC [ - ]

What would they have to do to lose your business? Literally get you arrested?

You're financially supporting the creation of an Orwellian dystopia.

artursapek 2021-08-18 15:26:52 +0000 UTC [ - ]

If you're uploading your photos to someone else's computer, you've already accepted this state of things. It's a trade-off for convenience.

fartcannon 2021-08-18 15:33:04 +0000 UTC [ - ]

I'm not and you shouldn't either.

artursapek 2021-08-18 17:04:29 +0000 UTC [ - ]

I'm not telling you what to do, am I?

gjsman-1000 2021-08-18 15:25:41 +0000 UTC [ - ]

Every other cloud provider has scanned since 2013. We're already in the Orwellian dystopia.

28220968 2021-08-18 15:35:25 +0000 UTC [ - ]

Can someone explain this to me --

The whole premise is that Google and Facebook and everyone else are just doing this on the unencrypted photos you upload, in their cloud, with their own (presumably, but correct me if I'm wrong) undocumented algorithms and datasets.

Now here comes Apple, documenting almost everything except the dataset itself, and everyone is freaking out because it's happening on your own device. But then it's encrypting the whole thing and uploading it to Apple where they presumably do no additional scanning.

What is the actual difference if it's being looked for on-device vs. by the provider? Supposedly in preparation for a bigger push of encryption of the photos themselves, if they are not already encrypted in the cloud.

Am I missing something more than "but it's happening on-device!"?

marcus_holmes 2021-08-18 16:07:17 +0000 UTC [ - ]

I think part of it is that Apple has always said "what happens on your iPhone stays on your iPhone". People expect Microsoft to be evil, and (post "don't be evil") Google to be evil. Apple was supposed to be the good guys in this. So it's more surprising and feels more like a betrayal when Apple decides to be evil.

Also, it's actually pretty easy to mess with Android and get it un-googled. Google don't make most Android phones, so there's less hardware-level enforcement of rules, and more independent alternatives. This is less so for Apple devices. If Apple decides to do something you don't like to your phone, you are SOL; you can only accept it or ditch Apple and switch to Android/something else.

nicce 2021-08-18 16:11:05 +0000 UTC [ - ]

> "what happens on your iPhone stays on your iPhone"

Well, technically this is still true. Files you are putting to iCloud by yourself voluntarily are not staying in your iPhone in the first hand. Everything which is against this, is only speculation currently.

marcus_holmes 2021-08-18 18:25:40 +0000 UTC [ - ]

Except that this is all about analysing files that are not on iCloud, but on the device. So what is on your phone is now being reported to people who might decide to trash your life. Hardly "staying on your iPhone".

nicce 2021-08-18 18:38:44 +0000 UTC [ - ]

That is not true if you read the technical details. Scan applies for files (and only for those) which are prepared to be uploaded into the cloud.

If you don't trust that, that is another story. System is full black box.

marcus_holmes 2021-08-19 09:35:45 +0000 UTC [ - ]

Yes, but it happens on your iPhone. So what happens on your iPhone isn't staying on your iPhone like they said it would.

28220968 2021-08-19 13:25:23 +0000 UTC [ - ]

So when I said:

Am I missing something more than "but it's happening on-device!"?

Your answer is "no".

nicce 2021-08-18 16:07:25 +0000 UTC [ - ]

> Am I missing something more than "but it's happening on-device!"?

People think that this kind of capability was not there already, while it was. The simplest example case is normal iCloud sync. It scans your files and gets metadata, finally comparing to cloud to know which files to sync.

Other concern is, that this can be easily expanded to other kind of content, or whole device (outside of iCloud files). While, this sounds like valid concern, government who can force this change, could have forced it already. "Technology does not exist" is not valid excuse, never was. There are pretty expensive consults used by politics to prove these excuses otherwise.

nicce 2021-08-18 15:28:01 +0000 UTC [ - ]

I think Apple is the only major company who tries at least a little to resist Orwellian dystopia. Business model of other companies cannot allow resisting.

Keats 2021-08-18 16:04:26 +0000 UTC [ - ]

Are we talking about the major company that is happy to give access to all of their users content if the country (eg China) asks? If they were really serious about privacy they would not operate under those conditions.

nicce 2021-08-18 16:08:52 +0000 UTC [ - ]

Company can't operate in the country, if they don't follow country's rules. Sad truth. They should have left the China in that case. On their defense, they have given only information which is stored by their system, not actively increasing the collection of it or creation of backdoors.

fartcannon 2021-08-18 15:32:26 +0000 UTC [ - ]

Lineage and Linux exist and they're incredible. You've simply give up.

gjsman-1000 2021-08-18 15:34:59 +0000 UTC [ - ]

Lineage requires the Play Store to have paid apps or things I now pretty-much need for everyday life, at which point you've lost and it doesn't really matter whether it's Lineage or stock Android.

Linux is incredible... and still unusable for many everyday apps and workflows, and simply not an option for many people including myself. I've tried Linux distributions since 2011, they aren't there yet.

nicce 2021-08-18 16:00:45 +0000 UTC [ - ]

> Linux is incredible... and still unusable for many everyday apps and workflows, and simply not an option for many people including myself. I've tried Linux distributions since 2011, they aren't there yet.

I have actually totally dumped Windows recently (I have tried it past 5 years), because now Linux is getting very close for everything I need, and this same applies for many people. Can you give some examples which aren't there yet?

fartcannon 2021-08-18 15:43:38 +0000 UTC [ - ]

None of those things matter as much as a future where corporations don't have carte blanche over your information.

Support the continued freedom you enjoyed in your youth for future generations.

2021-08-18 14:50:38 +0000 UTC [ - ]

intricatedetail 2021-08-18 16:33:16 +0000 UTC [ - ]

When a pedo gets released from prison, in some jurisdictions they are required to have scanning software installed on their devices. Apple makes every customer a suspected pedo. If you are comfortable with being treated this way, whatever floats your boat. Not everyone fancy receiving the same treatment as criminal on parole.

racl101 2021-08-18 15:52:21 +0000 UTC [ - ]

Same here.

rhn_mk1 2021-08-18 15:03:43 +0000 UTC [ - ]

> I can get my photos scanned against a CSAM database... or I can have Google tracking my location constantly

That's a false dichotomy. There are competitors offering various levels of maturity and functionality. Jolla exists, PinePhone, Xiaomi, Librem 5, dumb phones, POTS landline, no phone...

And yes, Linux on the desktop is also a valid choice. It most likely won't track you either.

account_created 2021-08-18 15:06:53 +0000 UTC [ - ]

Surprised to see Xiaomi on your existence list of maturity.

rhn_mk1 2021-08-18 20:15:34 +0000 UTC [ - ]

I'm not sure why, because: a) it exists, and b) it exists on a maturity scale :)

gjsman-1000 2021-08-18 15:06:30 +0000 UTC [ - ]

There's a reason why that's 98%+ of the market. There is a dichotomy between the two camps in the smartphone market, everyone else is fringe. On the fringe, good luck using banking apps, transit apps, vehicle rental apps, or other apps increasingly necessary and useful.

I don't think you know what you are talking about when you mentioned Xiaomi as an option. That would be among the dumbest options you could possibly choose.

Linux on the desktop is a valid choice, but as I said above, don't tell me to switch to it, it's just not practical in my life. I've tried over a dozen distributions since 2011 and probably over fifty releases of them, and Linux isn't there.

mateuszf 2021-08-18 15:17:20 +0000 UTC [ - ]

> On the fringe, good luck using banking apps

Tried that yesterday on CalyxOs with anonymous MicroG account and my banking app works fine. No problem with contactless nfc payments.

gjsman-1000 2021-08-18 15:21:38 +0000 UTC [ - ]

Aren't anonymous microG accounts illegal though? (Or at least a violation of the TOS.)

Also you can't use any paid apps with this method.

mateuszf 2021-08-18 15:27:36 +0000 UTC [ - ]

Maybe a violation of TOS, but I guess it's one of these things that would not be enforced at all. Same way as Oracle can't do much about Google using Java or Microsoft doesn't do anything about Wine.

Regarding the second point - that's true. I've heard there are some plans to add payments to the Aurora store/F-Droid (which are alternative app stores) but right now you can't use paid apps.

I consider this to be a plus though - gives me a chance to switch to open-source / self-hosted apps.

gjsman-1000 2021-08-18 15:37:42 +0000 UTC [ - ]

There isn't always an open-source alternative to what you need. Especially for people who use their computers for work.

mateuszf 2021-08-18 16:45:44 +0000 UTC [ - ]

True. That's why for work I still use a MBP. But I decided to separate work equipment/data/apps. That's a good thing to do anyway because of many reason.

rhn_mk1 2021-08-18 15:57:19 +0000 UTC [ - ]

> That would be among the dumbest options you could possibly choose.

You don't get to dismiss others' concerns by saying "it's a choice", and at the same time dismiss choices others present...

rvz 2021-08-18 15:40:12 +0000 UTC [ - ]

> Linux on the desktop is a valid choice, but as I said above, don't tell me to switch to it, it's just not practical in my life.

For Desktop, if I have to choose between macOS CSAM spyware of paying users or the Linux ecosystem and its tiny userbase of unpaid users I would go for using and targeting the paid users since they are the ones paying the bills and thats where the money is.

For smartphone alternatives, the phones themselves are still immature as well as the Linux phone software ecosystem which is again still light years behind. If they can't even run the same Android apps on modern Android devices, then it is close to no chance.

If they don't hurry up, Google Fuchsia will steam-roll them silently.

> I've tried over a dozen distributions since 2011 and probably over fifty releases of them, and Linux isn't there.

Likewise, with the GUI software I'm writing, 'Defining Linux support' is something that is not worth doing given that there are tons of distros out there and by selecting one or two distro's there will always be an endless amount of people asking to support X distro or Y distro.

gjsman-1000 2021-08-18 15:42:45 +0000 UTC [ - ]

> Likewise, with the GUI software I'm writing, 'Defining Linux support' is something that is not worth doing given that there are tons of distros out there and by selecting one or two distro's there will always be an endless amount of people asking to support X distro or Y distro.

There was a major game developer (sadly forgetting the name) who decided to support Linux as a test around 2018ish. The Linux users were only a few percent of their users but ~20% of the support tickets. They said never again.

imwillofficial 2021-08-18 15:35:45 +0000 UTC [ - ]

It never will be there. A focused group of devs who care about details will always beat design by committee. Always.

2021-08-18 14:59:07 +0000 UTC [ - ]

pshirshov 2021-08-18 15:50:12 +0000 UTC [ - ]

> I think the competition has too many tradeoffs.

I believe that, for example, anticorruption activists and gay people in Russia who may be subjected to state-imposed surveillance won't agree with you. Apple won't leave even the russian market in case the government demands to expand capabilities of the system. And they will never leave chinese market.

> macOS doesn't scan

I'm afraid I have some bad news for you:

"Features to detect child abuse material stored on iCloud coming in updates to US users iOS 15, iPadOS 15, watchOS 8, and macOS Monterey."

BugsJustFindMe 2021-08-18 15:54:35 +0000 UTC [ - ]

> Apple won't leave even the russian market in case the government demands to expand capabilities of the system. And they will never leave chinese market.

Who will? Google? Microsoft? HP? Dell? Huawei or Xiaomi or Lenovo (lol jk)? Which computer or phone manufacturers or service providers refuse to do business in Russia and China?

pshirshov 2021-08-18 16:03:15 +0000 UTC [ - ]

JFYI Google left China. Not sure about Russia. Anyway that's not an excuse for implementing such a neat surveillance tool.

Fortunately for now you have some escape hatches.

I believe that it would be a smart move for everyone to stop paying for nooses for their own gallows and start investing into privacy. There are some realistic ways to do it, just buy a damn Fairphone for a no-brainer start.

BugsJustFindMe 2021-08-18 16:35:56 +0000 UTC [ - ]

> JFYI Google left China

I know they did briefly after some attacks, but I also know that they had very little market share to lose at the time and have subsequently worked to get back in. Do you have a good summary of their current position there?

pshirshov 2021-08-18 16:56:29 +0000 UTC [ - ]

> Do you have a good summary of their current position there?

Nope, why would I? Also I'm pro-google, just pointed to a fact I know.

mapgrep 2021-08-18 15:38:56 +0000 UTC [ - ]

On laptop I moved to Qubes a few years ago, on a ThinkPad X1 carbon which is an amazing machine. I keep a c2014 MacBook around for miscellaneous things (e.g. syncing Spotify local songs to my phone over local WiFi, which I have not figured out how to do in the Linux client).

For phone I’m very interested in /e/os and the one phone you can get new with it preinstalled, the Teracube 2 (wired has a Teracube review of the very similar previous model).

I am looking at photoprism running on a home server (intel nuc) synced via PhotoSync (can sync photos via sftp). It actually looks really cool and uses tensorflow to do some sort of AI photo sorting locally.

By the way, while there’s a learning curve to this stuff, it feels very empowering and educational once you’ve put in the work. It feels like the future. Compute and storage is cheap. I think hosting things on your own server is the inevitable future. Once you’re set up it just hums along. This stuff will eventually be sold in appliance form (see Helm email server for the model).

pshirshov 2021-08-18 15:36:50 +0000 UTC [ - ]

Phone: Google Pixel 5 plus CalyxOS at the moment. Probably will switch to pure LineageOS due to call recording support. The bootloader is locked so the phone is secure and does not call home. Highly recommend. Some apps and in-app purchases doesn't work well on microG, also there are some issues with paid apps. And Android UX sucks but it's a reasonable price to pay for privacy. In fact I've been suprised - with this phone I don't feel as bad as I expected.

I really hope that Pixel 6 will have better camera and bigger screen and also would be supported by Lineage.

PC: I have an AMD desktop with Gentoo and going to buy Purism laptop later.

Watch: I don't use them. Actually was going to buy next Apple Watch but...

Apple Pay: no good replacement, though contactless cards aren't THAT bad.

Apple Carplay: phone+organic maps.

mapgrep 2021-08-18 16:13:11 +0000 UTC [ - ]

What initially drove you to Calyx vs Lineage? I'm new to the Android fork landscape. I gravitate to /e/os because I like that it's prepackaged, but have no qualms about rooting a phone myself if the OS is good. My main concern is privacy and with Lineage I didn't trust myself to set it up properly - it seems as much oriented toward people wanting to just upgrade their Android phones or add features as people interested in privacy. So I worried about defaults. Calyx looks a little more explicitly pro privacy?

pshirshov 2021-08-18 16:52:12 +0000 UTC [ - ]

> What initially drove you to Calyx vs Lineage?

The promise of locked bootloader. Later I learned that Lineage does the same job, they sign their builds for AVB. Though their documentation sucks and forums full of idiots screaming "NEVER LOCK YOUR BOOTLOADER".

Regarding "privacy" - I'm not really sure how much work is done in Calyx. Well, you may choose cloudflare dns out of the box and you have a "firewall" (just a better fronted to android permissions API). Though you can perfectly get that on Lineage. Lineage has its telemetry but you can switch it off.

Actually I'm thinking about building my own lineage-based distro (with proper call recorder built in), that's not that hard. Though for now I don't want to invest too much time into that.

mapgrep 2021-08-18 17:26:37 +0000 UTC [ - ]

Thanks and be sure to post the distribution here on HN if it ever happens, call recording sounds great (I achieve this only with a tangle of wires, adapters, and a physically separate audio recorder)

28194608 2021-08-18 14:06:32 +0000 UTC [ - ]

Main reason I'm using apple devices is for their quick security updates. I don't trust Samsung phone because they even run ads on $1500 phone. I am thinking to go with Pixel phone.

ByteWelder 2021-08-18 14:10:29 +0000 UTC [ - ]

I'm an Android developer myself, and Samsung is universally hated among devs due to the bloatware/adware.

Manjaro Linux has rolling releases, so you get updates more swiftly than with other Linux flavours. LineageOS (regular or microG variant) get weekly updates if I recall correctly.

Pixel is a solid hardware choice in my book.

RealStickman_ 2021-08-18 15:43:48 +0000 UTC [ - ]

Afaik Lineage for microG is twice monthly, but still much better than many OEMs.

kasbah 2021-08-18 14:21:20 +0000 UTC [ - ]

Put GrapheneOS on that Pixel. I run it on a 3a. It's pretty easy to install and updates itself very regularly, can recommend.

https://grapheneos.org/

bboylen 2021-08-18 14:29:04 +0000 UTC [ - ]

Yeah I am considering switching to an iPhone.

A big kicker was opening the default Weather app on my Samsung Galaxy S9 and seeing an inappropriate ad that took up 1/3 of the screen. Absolutely shameful that they would be so desperate for cash to include such ad space in their flagship phone.

Although the recent news about Apple has me questioning the switch...

2021-08-18 14:16:13 +0000 UTC [ - ]

howinteresting 2021-08-18 14:20:06 +0000 UTC [ - ]

Apple also runs ads everywhere on its really expensive phones, mind. They're ads for other Apple products.

https://mjtsai.com/blog/2020/02/17/the-paywalled-garden-ios-...

A Google Pixel has far fewer ads than an iPhone these days.

0x000000001 2021-08-18 15:56:58 +0000 UTC [ - ]

I have never seen the iOS show me an ad. I've seen some third party apps, but not the OS or core apps.

howinteresting 2021-08-18 16:03:14 +0000 UTC [ - ]

The linked post has plenty of evidence, it might be worth going through it.

2021-08-18 14:22:24 +0000 UTC [ - ]

emaro 2021-08-18 14:33:50 +0000 UTC [ - ]

I'll buy a Fairphone with pretty high probability next time. No more iPhones. On desktop I was always a Windows user, but recently switched to PopOS.

I try to use open source software where possible and after the endless stream of depressing news about working conditions and environmental impact of our juicy tech I'm ready to pay more for less to get (relatively) fair and open hardware too.

Edit: Considering Linux phones like Pinephone or Librem too, but they seem not ready to me yet and they emphasise much more on technical freedom and less on fair production.

tannhaeuser 2021-08-18 15:52:58 +0000 UTC [ - ]

In pursuit of an acceptable phone, I've eyed the Fairphone with its laudable stance on repairability in the name of eco-friendliness as well. Problem is it comes with Google's spyware (Android), a much bigger threat on privacy than anything Apple does. The solution seems to be to buy eSolutions Fairphone with de-Googled Android.

I can live without free GPS navi but I'm wondering what to do about the few cases where you need a "trusted" device (a misnomer if there ever was one), such as banking push TANs or other mobile banking TFA apps, TOTP apps, vaccination pass apps or Covid contact tracing/registration apps (I've managed to evade the latter kind of apps until now).

danhor 2021-08-18 17:56:22 +0000 UTC [ - ]

For a free GPS navi, OSMand does the job. You'll probably have to give up banking apps, while TOTP, by virtue of being a standard, has plenty of open-source implementations.

The contact tracing apps in europe interoperate, you can get the CCTG app from F-Droid and it works on AOSP (also includes vaccination pass storage). There are also others available.

lettergram 2021-08-18 14:29:21 +0000 UTC [ - ]

I’ve been working on my pinephone. But it’s really underpowered imo.

I’m considering a Librem 5. Which has more cpu power and battery.

The appeal to me is really getting off any major tech platform. Further, you can disconnect the components via switches — iE unplug the microphone. That being said, I can’t even use Signal on them without some major configurations.

https://forum.pine64.org/showthread.php?tid=13728

I have also considered the “freedom phone”. But my understand is it’s just Graphene + process isolation on a slightly modified hardware. Until it’s heavily vetted I wouldn’t use it though.

And ugh yeah, that’s about it.

sphinxcdi 2021-08-18 20:38:42 +0000 UTC [ - ]

> I have also considered the “freedom phone”. But my understand is it’s just Graphene + process isolation on a slightly modified hardware.

No, it's not. You may be confusing it with another company with a similar name selling devices with GrapheneOS and various apps installed. Both are not associated with GrapheneOS, by the way.

gjsman-1000 2021-08-18 14:36:34 +0000 UTC [ - ]

You are aware that the Librem 5, in real-world testing, has terrible battery life... and is a brick in thickness. That's why I can't switch yet. :(

seba_dos1 2021-08-18 15:14:28 +0000 UTC [ - ]

Around 6 hours of active usage and around 16 hours of idle time (exact values depend on what's kept enabled and the signal strength of course). Currently it does not suspend to RAM at all, which is how PinePhone achieves longer idle times.

josteink 2021-08-18 15:17:42 +0000 UTC [ - ]

> That being said, I can’t even use Signal on them without some major configurations.

Sadly bridging Signal into a matrix home-server and just using a matrix-client from the PinePhone/Librem is probably the simplest option.

acheron 2021-08-18 14:48:53 +0000 UTC [ - ]

It should be obvious that anyone who says “I’m concerned about privacy, so I’m going to switch to using Google products!” is not a serious person.

If you’re actually going to switch to using open source hardware phones and whatnot, then good luck I guess. I can see where more progress in that area would lead to general improvements, so it’s not entirely tilting at windmills.

fartcannon 2021-08-18 15:38:38 +0000 UTC [ - ]

You're looking directly at an example of Apple not caring about privacy and you still can't see it. Apple does not care about your privacy. They care about your money.

Popegaf 2021-08-18 15:35:14 +0000 UTC [ - ]

LineageOS and GrapheneOS are as close as you can get to freedom and privacy on your phone while keeping lots of features. Open hardware + software phones are in the budding stage so people investing in them and using them right now are trail-blazers - not everybody wants to be one.

Therefore Android phones with custom ROMs are the way forward for privacy conscious people. It's easy to mock if you aren't serious about getting away from walled gardens.

traceroute66 2021-08-18 15:11:21 +0000 UTC [ - ]

> anyone who says “I’m concerned about privacy, so I’m going to switch to using Google products!” is not a serious person

Amen to that !

To modestly paraphrase an old saying....

With Apple, you buy the product. With Google, you are the product.

fartcannon 2021-08-18 15:39:06 +0000 UTC [ - ]

With Apple you lease the product. Because you don't own anything about it.

kwerk 2021-08-18 14:15:41 +0000 UTC [ - ]

I’m testing how much I can move from services before switching devices and don’t have everything mapped out just yet.

- cloud backups: testing iMazing Wi-Fi daily backups to NAS. Tested a clean restore to an iPad that was perfect. The daily backups aren’t running consistently yet but likely has to do with power save settings.

- Photos: syncing with Synology Photos. Backup seems fine (40k of 65k pictures so far). The app leaves a lot to be desired vs Apple Photos.

Will test Calyx / Graphene on a Pixel at some point but not likely to pass the wife test.

helen___keller 2021-08-18 14:50:59 +0000 UTC [ - ]

I've been down this road long before CSAM, the gist is:

Use FOSS when possible, minimize all other internet-connected devices when FOSS is not available.

I actually still plan to continue using iPhone as a necessary evil until PinePhone, Librem, or similar are production ready (as my use cases demand). But I don't trust the device, my world doesn't revolve around the device, and that's kind of the only way to live with having devices running proprietary, untrustworthy code.

pshirshov 2021-08-18 15:55:44 +0000 UTC [ - ]

Something is ready: https://esolutions.shop/

Seems like you have no such excuse anymore.

Also: https://store.google.com/product/pixel_5 + https://calyxos.org/

sjaak 2021-08-18 14:32:18 +0000 UTC [ - ]

I'm thinking of getting one of these: https://frame.work/

Any people here with experience with one?

yashasolutions 2021-08-18 14:36:08 +0000 UTC [ - ]

this one looks terrific! I saw the review made by Linus : https://www.youtube.com/watch?v=0rkTgPt3M4k - totally got me convinced. I left Apple to System76 2 years ago, but that'd likely be my choice if I'd be doing this today...

rkangel 2021-08-18 15:04:03 +0000 UTC [ - ]

I was waiting to read a trustworthy review, so just watched the video. Glad to hear that it's pretty good. Build quality was what I was worried about but it sounds generally good.

My only other question is Linux driver support. There was a brief mention about fingerprint scanner in Linux, but I really appreciate that Thinkpads under something like Fedora just work out of the box. Hopefully Framework will have similar support - it seems like the sort of laptop linux hackers would like to be using!

nrp 2021-08-18 18:17:54 +0000 UTC [ - ]

The latest Fedora 34 respins (and soon Fedora 35) work out of the box with everything including the fingerprint reader. Ubuntu 21.04 supports everything but the fingerprint reader, which needs libfprint 1.92.0. There is a pretty active community of Framework Laptop users now providing tips on how to set up different distros: https://community.frame.work/c/diy-edition/linux/91

rPlayer6554 2021-08-18 14:37:21 +0000 UTC [ - ]

If you look up the Linus tech tips review, he gave it a stunning review.

cfeduke 2021-08-18 15:16:25 +0000 UTC [ - ]

I had tried configuring one a couple of weeks ago, but the website was having problems.

I haven't owned a PC laptop in several years - the last one I tried was a System76 with an abysmal keyboard. Turns out I need to type to have a functional laptop!

I ordered one of these Framework machines today, should ship in September. Seems promising. I am hoping that things just work after I install Linux on it and I can get down to writing code with minimal setup and configuration.

alpaca128 2021-08-18 15:41:19 +0000 UTC [ - ]

> I am hoping that things just work after I install Linux on it

Apparently Linux runs everything out of the box except the fingerprint reader. It's still unknown whether there'll be an official fix and when.

rgrmrts 2021-08-18 14:45:48 +0000 UTC [ - ]

I ordered one, currently on a 2019 16” MacBook Pro. I just got an email saying they’ll start shipping my batch soon so I’m very excited.

My plan is to use it as my daily-non-work development computer. I just started playing around with NixOS on the server side and will likely use NixOS on my Framework laptop.

It’s an exciting concept and appears to be well executed. I’ll reserve full judgement til I’ve used it for a while.

prophesi 2021-08-18 15:02:00 +0000 UTC [ - ]

For those who want to keep using their Apple devices, I highly recommend Nextcloud as an iCloud Photos alternative. I've been running an instance of it on a little Pine64 for quite some time now without any issues.

Though I'll still the say the crux of the issue is that the majority of users _won't_ have iCloud Photos disabled, and thus have their privacy violated.

kwerk 2021-08-18 16:22:40 +0000 UTC [ - ]

How large is your photo library / how would you compare NextCloud photos to Apple Photos? I'm starting with testing Synology Photos which has at least basic local people tagging (a must with small kids). Feels like a big tradeoff with all the self-hosted options. I've heard NextCloud is slow. PhotoPrism looks awesome but no mobile client (yet) which makes family adoption tricky.

prophesi 2021-08-18 18:03:34 +0000 UTC [ - ]

I'm using mine as a general cloud storage alternative as well, so it's using a little over 1TB. About a quarter of that is photos. So not too huge, considering they're saving at full resolution.

Nextcloud has https://apps.nextcloud.com/apps/facerecognition which integrates with their CardDav, but I don't think my Pine64 with only 2gb of RAM would be able to run that.

swozey 2021-08-18 15:32:24 +0000 UTC [ - ]

Hackernews is by far the worst place to ever come for this advice. You're going to get the range of basically "use emacs, newb" to stupidly random Ebay laptops nobody has heard of. Roll your own thing and don't worry about what others use. I use void linux and I would never use hn for *nix advice.

ByteWelder 2021-08-18 15:36:37 +0000 UTC [ - ]

I'm already using Emacs, so that's alright :D

I noticed a couple of comments where people were wondering what the alternatives were. With this thread, we can possibly save people some research time, as I've spent quite a few hours in the past week or so.

MeinBlutIstBlau 2021-08-18 16:43:09 +0000 UTC [ - ]

I agree here as well. Criticism of linux here is like condemning Jesus at times.

I just use windows cause it's easy and everything almost always works on it.

swozey 2021-08-18 17:05:20 +0000 UTC [ - ]

I'm a contrib on a bunch of nix projects and people are shocked when I tell them my home desktop "chill machine" is windows. I do work dev on osx. I had so many problems with my 16" macbook running my 49" monitor I threw it all into void linux desktop w/ kvm and gpu passthrough.

A whole lot of work to use osx on a machine that doesn't constantly throttle, but not enough work for me to justify spending $3-5k on the apple hardware I need.

And honestly I hadn't used nix on the desktop in years, almost all of the apps I needed work natively - the Zoom client even looks exactly like the OSX/Windows zoom. I'm slowly de-osxing myself.

fsflover 2021-08-18 16:47:19 +0000 UTC [ - ]

Nobody doubts that Windows works flawlessly on Windows-certified hardware. Same with Linux (on Linux-certified hardware). As a bonus, you get no tracking and no adware in the latter.

rootusrootus 2021-08-18 14:44:33 +0000 UTC [ - ]

None. I am hoping that someone attacks me with a few dozen grayscale perceptual hash collisions so I can save them on my device, to iCloud, and hope it slips by Apple's checkers. And NCMEC's checkers, etc. Because I too want to retire as a king, and losing a few friends who can't really wrap their heads around a gray image attack ... well, no biggy, I'm kind of a loner to begin with.

Daedren 2021-08-18 15:06:50 +0000 UTC [ - ]

XZ1 Compact with microG. I still have an iPad, though I see myself in the future upgrading to a the equivalents of the iPhone 12 mini and a Samsung Tab S7. (I prefer small phones, and there's no Android ones now)

Don't put your data in places where you can't export data (Apple Notes for instance), or ideally places that aren't cross-platform.

This allows me the freedom to move between OSes, and most importantly, have more choice in my products. Getting stuck in an ecosystem is exactly what Apple and Samsung want, and it's very anti-consumer in the end.

istingray 2021-08-18 15:33:52 +0000 UTC [ - ]

1. I just setup dual booting on my 16" Macbook Pro!

Didn't think it was possible because of T2 but then found the "T2 Linux Community" here: https://t2linux.org/

They have a step by step guide for Ubuntu and a helpful Discord group to walk me through.

I dug into Purism Librem and System76 Laptops. Dual booting Ubuntu buys me some time.

2. I also disabled iCloud and started NextCloud on a third party host. It's pretty clunky, still getting that setup. In the open source world it seems like there's less opportunities to pay for quality. Take my money!!

arael 2021-08-19 10:37:52 +0000 UTC [ - ]

I used MacOS exclusively for 8 months before making my mind up. The initial plan was to use it for at least one year but after 8 months I was really fed up and went back to GNU/Linux. I expected it to be better but in the end I found it was not, at least not for me. Although Apple invests a lot of money and effort in the MacOS user interface development I found it way too restrictive compared to any DE or window manager I used in past on GNU/Linux. I am not Gnome nor KDE user but would pick any of these two over MacOS interface without second thoughts. Homebrew is useful and commendable but far worse than any of the major package managers on GNU/Linux. Macvim was fine, but it did not have features I relied on in Gvim. I never used Safari because compared to Firefox the interface was clunky. I do not know about current Safari status but back then it didn't have extensions. I wanted to switch many times over the 8 months and was relieved when I did. To me, personally, Apple products are overrated. MacOS? No. But thanks.

tarkin2 2021-08-18 15:22:33 +0000 UTC [ - ]

Pinebook and pinephone, I hope. Debian and whatever pinephone is using. It's only the photos which are a bit annoying. But with a bit of js and my own server I'm fairly sure I can transition over to something fairly easily. I'll keep my icloud email address I think.

moistbar 2021-08-18 16:11:45 +0000 UTC [ - ]

For photos, you could always do Nextcloud and save yourself the work of writing something (unless, of course, you're doing it for fun).

geophile 2021-08-18 17:28:46 +0000 UTC [ - ]

I switched from my 2015 MBP to a System76 Darter Pro, and I've been very happy with it. (The MBP was dying, and the new MBPs had the execrable touchbar, and the broken keyboard.)

There are no good iPhone alternatives. I now don't trust either Google or Apple on privacy, for different reasons. As a practical matter, Apple is probably better for me, as I find it very unlikely that governments forcing Apple to do their bidding are going to be interested in me, personally.

I am relying on the Apple cloud, and I hate it. I have mp3 files for all my music, and I will soon stop relying on Apple for music completely. I take photos on my phone, and they go to the cloud. I think I'm stuck there, but again, I do have my own copies (via download to my wife's Mac). Ideally, I could get photos from my phone to my Linux laptop directly, but I don't know of a good way to do that.

ravenstine 2021-08-18 14:43:36 +0000 UTC [ - ]

Is the CSAM an issue for macOS? That would be my only concern since I do not own an iPhone.

Honestly, as much as I go to extreme lengths to limit invasions of my privacy, short of going full Stallman, it would take a lot for me to chuck my M1 MacBook Air. I know people say they have a non-Apple laptop that is as good, but that has not been my experience. Every PC laptop I have owned has ended up being a pile of crap for one reason or another. Usually the hardware is flimsy, plastic gets warped and scratched, it gets slower over time, etc. I have never had such experiences with the Macbooks I have owned other than my keyboard giving out on my 2015 MBP a few months ago. This is coming from a former hardcore Linux user who used to look down on people with Macs.

(that said, I would love recommendations on comparable laptops for the day that may come where I ditch Apple)

I really hope that I can prevent or block CSAM on my current Macbook if it's being adopted on macOS.

istingray 2021-08-18 15:41:27 +0000 UTC [ - ]

Yes, an issue for MacOS

"These features are coming later this year in updates to iOS 15, iPadOS 15, watchOS 8, and macOS Monterey."

https://www.apple.com/child-safety/

gjsman-1000 2021-08-18 15:54:22 +0000 UTC [ - ]

In the same article, earlier in it, they say that the scanning is just iPadOS and iOS. macOS is just getting a generic nudity detection AI model for protecting children from new content that doesn't require contacting Apple about anything.

"Next, iOS and iPadOS will use new applications of cryptography to help limit the spread of CSAM online, while designing for user privacy."

istingray 2021-08-18 22:19:49 +0000 UTC [ - ]

got it, thanks for the clarification. Any speculation as to why the CSAM scanning isn't added to MacOS already?

Zelphyr 2021-08-18 14:59:33 +0000 UTC [ - ]

I believe it is, if you have iCloud Photos enabled.

fbnlsr 2021-08-18 15:44:35 +0000 UTC [ - ]

I've been using Pop!_OS on a Lenovo Thinkpad T480 for a year now, coming from a Macbook Air, and I couldn't be happier.

The thinkpad cost me less than half the price of a Macbook, and I was able to change its keyboard (for a QWERTY one) and add 8 GB of RAM in less than an hour (and for less than $100).

Pop!_OS is amazing. It feels close enough to MacOS that the adaptation period was almost non existent, and it's been running flawlessly for more than a year now.

lucasyvas 2021-08-18 14:30:47 +0000 UTC [ - ]

Hardware-wise I've been in the Pixel, ThinkPad camp for a while.

There are decent custom ROMs for Pixel already mentioned, and the ThinkPad line even ships with full Linux support now so not too bad at all there.

As for cloud services, I'm still stuck on Google. I've been putting off switching because it's a lot of work.

2OEH8eoCRo0 2021-08-18 14:23:33 +0000 UTC [ - ]

I ditched my last Apple products in 2013 due to lack of control. I daily drive Linux (Fedora 34) on desktop and Android on my phone (Pixel 4). I use Plex and a home server to control my media.

tandem5000 2021-08-18 14:36:40 +0000 UTC [ - ]

I've been lifelong Apple user (webdev, sysadmin, power user) up until 2018. I switched to dual-boot Fedora/Xfce and Win10 on a Lenovo X1C 6th Gen. It took several months to get used to, but I did not look back even once. The user experience is not as polished, but it gets the job done. In hindsight I was irrationally concerned about features or apps which I thought I would miss.

mtalantikite 2021-08-18 14:34:21 +0000 UTC [ - ]

One thing I'd really like is to find a semi-dumbphone I can use Signal on and just get rid of having a smartphone with me. I'm not sure if I'm going to drop Apple completely and this morning I was wondering how far I could get with an Apple Watch and something like the Nokia 8110.

If anyone has suggestions for a small, minimal phone I can still run Signal on I'd love to hear it.

city41 2021-08-18 15:51:03 +0000 UTC [ - ]

I used to be a massive Apple fan, all hardware in our house was Apple. About 3 years ago we started switching away, and now only have an iPad Pro left.

desktop: custom PC running Ubuntu MATE 20

laptop: Thinkpad running Ubuntu MATE 20

Phone: Android Moto E

Streaming Device: Roku 3

Car: Android Auto

watch: no watch

tablet: Amazon Fire

I find it interesting that the Moto E is the cheapest smartphone you can get in America. Comcast gave it to me free with my plan. Yet it's totally fine, meets all of my needs no problem. Only thing I did was add an SD card for more storage. Similarly with the Amazon Fire tablet, it was only $75 and easily meets all of my needs. Ignoring the privacy implications of Amazon/Google ran Android devices, Android OS is impressive.

ksec 2021-08-18 14:26:42 +0000 UTC [ - ]

I think you need an "Ask HN" in the title.

ByteWelder 2021-08-18 14:36:19 +0000 UTC [ - ]

Thank you! I've updated the title.

eblanshey 2021-08-18 14:29:25 +0000 UTC [ - ]

I've been using CalyxOS on a Pixel 4a 5G for like 4 months now and love it. Came from another stock Android phone though, not iOS. If anyone has any questions feel free to ask!

mateuszf 2021-08-18 14:44:32 +0000 UTC [ - ]

- Laptop - https://starlabs.systems/pages/starbook + coreboot + NixOs

- Phone - Pixel 4a + CalyxOs

- Watch - https://www.withings.com/pl/en/steel-hr

jivings 2021-08-18 14:50:28 +0000 UTC [ - ]

I changed my phone to a Fairphone 3+ running LineageOS. I'm liking it so far. I think it's as ethical & private as I can get while still have a smartphone right now.

I also changed my photos to backup to Nextcloud, which I'm self-hosting.

I wrote about switching from Google Photos to Nextcloud here: https://blog.leavemealone.app/moving-from-google-photos-to-n...

whoknowswhat11 2021-08-18 15:32:12 +0000 UTC [ - ]

Fantastic. Thanks for write-up.

elliekelly 2021-08-18 14:28:42 +0000 UTC [ - ]

I'm questioning whether I even need a phone at all so I'm considering making the switch to... a landline. I think I can give it a try for a month and see how it goes.

baby-yoda 2021-08-18 15:39:12 +0000 UTC [ - ]

been thinking about the same the last week+, and for phone I can't help but want to go back to a Nokia feature phone. Email has been off my phone for a year and a half, no notifications. Trying to quit WhatsApp as well so not having it is a feature. The models available now aren't quite there yet but I am hopeful. Really, my ideal would be:

  - Good/great camera, 8+ MP; Front facing optional. Dedicated shutter button/quick access from sleep
  - GPS and HERE maps
  - Simple, native "apps" - Phone, Alarm, Calendar, Contacts, threaded SMS/MMS, weather, podcasts, flashlight. Email optional
  - High quality screen (3", OLED, high PPI)
  - 4G connectivity, 5G optional
  - Tethering/Hotspot capability
  - USB-C
  - Candybar form factor with number pad would work, but would prefer an E71/72 reboot
Thats basically it. Given how inexpensive something like the just released 6310 is (~50 EUR), it would be nice to have a "high end" feature phone around the 250 EUR/$300 price point. Long battery a nice side benefit as well.

Gys 2021-08-18 14:34:50 +0000 UTC [ - ]

Not yet switching but until last week I wanted to buy the next Watch (none yet), next iphone (now at X) and next ARM MacBook Pro. I decided to wait another year and first move all cloud stuff to some private hardware.

mark_l_watson 2021-08-18 18:14:51 +0000 UTC [ - ]

Great discussion. I live in Apple's ecosystem, and this is even more compelling with our new Honda Pilot basically being an extension of our iPhones. I have been on three road trips in the last 8 weeks, and this feature was so nice!

I am still considering stepping back, switching to a Pixel 5 from the CalyxOS organization, rely on my wife's iPhone while on road trips, start using my GPU Linux laptop from System 76 as my main driver, and fall back on using ProtonMail with my email domain.

I did recently remove virtually everything from my iPhone except Freedom, text/email, Chess, Go, Music, podcast, and Safari. I think my phone should just be a phone, more or less.

I am not so disappointed with Apple's CSAM functionality as I am about their longer term trend. They are starting with something that has wide support, but who knows what is next.

tomxor 2021-08-18 16:27:30 +0000 UTC [ - ]

I'm 10 years early to this party but:

Desktop: Debian + i3wm is where I landed and stayed...

If anything were to change in future it would be Debian, but I'd be taking my setup with me (few dot files), which is a nice capability to have.

This is easier if you are a developer (not an iOS developer ofc), because most work on the CLI is just so much easier on Linux. I tried The BSDs at first, various Linux distros, and ultimately settled on Debian after using Ubuntu for a while. This is an opinionated area, and no distro is perfect, but I settled on Debian due to it's ubiquity as a base for other distros and therefore familiarity and wealth of support and knowledge, but also because it's the less opinionated base you can add whatever you want to... I also like their focus on openness.

My recommendation to anyone who _likes_, (or liked) Apple desktop and UI: don't try to replace it or replicate it in Linux, you will be upset. Learn to love something else: control, and the permanence and stability it brings to your life. If you want a ready made full desktop environment they exist, KDE and GNOME, but in a way they are just another Apple, dictating and evolving how you do things with each update - It's probably easier when you first switch, but you may eventually find yourself moving towards something simpler and less shiny... less is more, they are just window decorations at the end of the day, most of it is bloat.

If you do any kind of media, video, audio, raster, vector work... I wont lie and pretend this is a comparable alternative, you will need probably need either WINE or Windows, unless you know exactly what you need and know of a well supported program for Linux, e.g blender is supposed to be a pretty good contender for the proprietary 3D packages these days. While I like Linux, I agree Inkscape and Gimp are trash compared to Photoshop... i don't even like adobe products but I've used both, and the former are an exercise in pain endurance - they are last resorts, don't expect them to replace.

Traster 2021-08-18 14:58:55 +0000 UTC [ - ]

I feel like I'm totally out of the loop on this. My understanding is that Apple scans for CSAM (as it legally is required to) when it uploads files to it's cloud storage. What's the problem and who exactly are you expecting to provide cloud storage and not do this?

HanaShiratori 2021-08-18 15:21:14 +0000 UTC [ - ]

GrapheneOS. Been using it since half a year and it exceeded my expectations by far. Maybe I was too pessimistic using an Android phone without Google play services but thanks to fdroid there are plenty of open alternatives for pretty much every app needed ... (At least in my case)

yabones 2021-08-18 15:46:55 +0000 UTC [ - ]

Computer - Thinkpads with Linux or BSD flavours - enough to run web apps, and a capable SSH client.

Phone - Nokia 225 (dumbphone) - enough to call 911 or my partner/mother/pizza shop.

I'm keeping my iPhone SE, but it's essentially going to stay in one or two rooms at home, only used for things that need a mobile device.

The key is adjusting your expectations. I don't get apps at easy reach anymore, but I don't need them and never should have had them in the first place. My personality is far too prone to addiction, and physical control is easier than self control. That it's going to have a positive impact on my privacy/security/safety is just a nice plus.

mullingitover 2021-08-18 15:05:02 +0000 UTC [ - ]

I would be concerned about what people think when I tell them that I'm going to extremes to avoid having my devices detect and report CSAM, even if I swear it's purely for privacy reasons.

vorpalhex 2021-08-18 15:16:17 +0000 UTC [ - ]

When you criticize the TSA, nobody thinks you're a terrorist. You can criticize invasive measures and most people get it.

mullingitover 2021-08-18 15:30:50 +0000 UTC [ - ]

This is a pretty flimsy analogy because we're not talking about criticism, we're talking about taking pretty onerous, inconvenient steps to avoid having CSAM detected on your devices. You might not have it on your devices, but if you tell someone you're doing all this the average knee-jerk reaction is going to be suspicion.

istingray 2021-08-18 15:45:47 +0000 UTC [ - ]

I don't refer to it as CSAM. I say I'm switching because of Apple's surveillance of my files so they can find stuff to report to the police. People get it.

floatingatoll 2021-08-18 19:04:51 +0000 UTC [ - ]

Lying by omission isn't a good choice, because you're using a classic tactic of overstatement-by-framing that has been weaponized into standard police procedure to sway people into believing you. The truth is more precise:

"I'm switching because of Apple's surveillance of my files so they can find child porn to report to the police"

But that's also much less likely to win you converts to your cause, which is why we never see anyone saying it so clearly in these conversations. Which is more important to you, being completely honest about your beliefs, or evangelizing others to believe them too?

istingray 2021-08-18 22:01:02 +0000 UTC [ - ]

good perspective, thanks!

mullingitover 2021-08-18 15:58:07 +0000 UTC [ - ]

This thing is pretty well publicized, people do get it but not in the way you're implying.

If you have children and you explain to the other parents that you're just really passionate about privacy and are dumping all your iDevices for...reasons...your kids are probably not going to have friends come over to visit much after that.

2021-08-18 16:50:14 +0000 UTC [ - ]

swiley 2021-08-18 16:50:16 +0000 UTC [ - ]

The last thing from Apple I had was a phone, I've switched to a Pinephone entirely.

That was a lot of work, I had to write my own power management service so I could get notifications during sleep without draining the battery excessively and there are still tons of bugs and little hacks I've written. If that scares you please just switch to a trackphone because smartphone software authors will continue taking advantage of you after you switch to something else.

ho_schi 2021-08-18 15:35:50 +0000 UTC [ - ]

Desktop/Laptop: Already using Archlinux for many years

Phone: Pixel 4a (only regular sized smartphone available not from Apple)

Carplay? Never used.

Apply Pay? Never used.

Maps: Garmin, which works autonomous minus the GPS. Or OSMAND or OrganicMaps.

The problem with Pixel is, it is from Google therefore you don't have GNU/Linux but Google/Android. Which comes with a lot drawbacks, for example you need to switch on Miracast support in the bootloader.

traceroute66 2021-08-18 15:00:34 +0000 UTC [ - ]

I am not switching.

I already had a deep mistrust for "cloud" services irrespective of who the provider is. My position on "cloud services" meant I have never used any Apple cloud services.

I see no reason to switch away from what is otherwise a very high quality platform. This is perhaps especially the case on the phone side where the overall security and privacy in general is better than Android.

vbezhenar 2021-08-18 15:41:10 +0000 UTC [ - ]

I'm waiting for Macbook 16" announce and then I'll decide whether to move to Apple ecosystem or to stay at PC and migrate to android.

My PC future plans would be:

Smartphone: Google Pixel, optionally with AOSP, but I'm not sure.

Laptop: most powerful Dell Precision with Fedora Linux. It should have Nvidia GPU. I'll install Windows in KVM and with GPU passthrough I'll be able to play some games.

SergeAx 2021-08-18 17:05:12 +0000 UTC [ - ]

Desktop: I am currently on Windows 10. I have a lot of experience with Windows since Win 95, and more or less sure I can keep their invasive features in check via registry editing tools and also double check suspicious addresses on home router. Otherwise Windows is quite open OS without strict binaries signing rules.

I develop on PHP, Python, Kotlin and Go natively, using WSL for things like Ansible.

Phone: any recent Android with medium privacy settings on Google services. I allow location tags on Photos and location history on Maps, because it is quite useful. I tried to regulary change GAID, but untargeted ads became really awful, so I am keeping it for now.

Laptop: I don't always use it, but when I do - it is Lenovo X1 Carbon with Windows 10.

Fitness bracelet: cheap monochrome Xiaomi (v3, I think). I am interested in step count and sleep monitoring, it is good enough for me.

SergeAx 2021-08-18 17:06:21 +0000 UTC [ - ]

Ah, and I have Firefox as the only browser on desktop and mobile with uBlock Origin installed.

ostenning 2021-08-18 16:11:42 +0000 UTC [ - ]

Linux has progressed a lot, but for productivity apps, it doesn’t come close to macOS.

What I want to see is a user-friendly productivity app suite as good as macOS for linux:

- Calendar - Mail - Preview

These apps need feature parity with the macOS, need to “just work” with sane defaults and need to be well thought out with an equivalent UX.

Don’t get me wrong, I ran Manjaro and Arch for a long time and I would love to go back to them as my daily workhorse, but the app support isnt nearly as good.

Even apps like Spotify bring my linux T480 thinkpad with 32GB ram to its knees because Spotify doesnt give a shit about Linux. So as a result I have to find shitty second class apps that dont have full features, are buggy or dont work. Then I end up spending more time trying to get my computer to run apps properly than actually use it for its intended purpose.

seltzered_ 2021-08-18 14:46:24 +0000 UTC [ - ]

I don't know enough yet whether to care about the CSAM issue, but I recently switched away from apple for a more ergonomic-but-portable setup where I can use a computer without wearing eyeglasses and save my neck from looking down without dealing with secondary keyboards, second monitors, etc.

This led to finding a combination of:

- An intel tablet - specifically HP makes one called the Elite X2 G4 (now G8) which has a 3k2k 13" display. Running Ubuntu which isn't perfect but tolerable - I keep a list of workflows replacements (primarily from mac to linux) here: https://docs.google.com/spreadsheets/d/148zTJUwfVv9xfDcpSoH3...

- A 'tiny tower stand', which allows one to prop the tablet close to the face. Other stands (e.g. roost) don't enable this. It's been sold out this year but hoping they come back.

- A nutype f1 keyboard (wired usb-c or wireless), and an apple trackpad (wired lightning or wireless). The combination still fits within the footprint of the tablet, eventually want to make a case for it for easy carry.

Again the motivation is finding something more ergonomic and portable enough to use at another desk. Do I recommend it? Depends on your intentions and time available. Mine are just around exploring ergonomics.

gambler 2021-08-18 15:09:12 +0000 UTC [ - ]

Does /e/ foundation ship stuff to US yet? Last time I checked they didn't. I see this now:

https://esolutions.shop/shop/e-os-teracube-2e/

Anyone used this thing?

bnastic 2021-08-18 15:33:50 +0000 UTC [ - ]

It’s difficult to move away from Apple if you want to keep all your projects/hobbies inside one computer. I can (barely) make Windows do all the things I need, but that’s not an improvement in any way. (Fwiw, aside from software dev I’m also a heavy user of audio software and AU/vst plugins. Thousands I spent on software doesn’t translate to Linux).

And as I was typing this, my iPhone popped up a warning that the websites mandated by my kid’s school have all been compromised and offered assistance to update the passwords on there. Good job, Apple (and we’ll see how image scanning saga unfolds… I might just switch to OneDrive for photos, but it’s a question if it’s any better in that regard)

ajay-b 2021-08-18 14:22:41 +0000 UTC [ - ]

With my phone I won’t accept any more updates, at least the ones I can resist, and I’ll switch to Android when there’s no other option. CSAM is a line crossed too far and I feel like Apple is telling me I’m just not holding it right again, and that makes me unhappy.

robertwt7 2021-08-18 15:08:15 +0000 UTC [ - ]

I don’t know man. I feel like I’ve been spoiled by apple ecosystem by having watch, airpods, mac, and iphone.

Thinking about moving everything seems to be so much work on top of my daily job and side projects.

Unhappy with apple’s decision, but also feel like I’m stuck atm

istingray 2021-08-18 15:50:07 +0000 UTC [ - ]

I hear you, I'm in the same position. I started by turning off iCloud, running Ubuntu in Parallels. Then last night I got Ubuntu dual booting on my MBP!

Once you disconnect from iCloud, or have one non-Apple device, the whole ecosystem benefit starts to unravel.

tw600040 2021-08-18 16:50:42 +0000 UTC [ - ]

Hard truth is Apple has really built its ecosystem brick by brick and is constantly getting stronger. And other companies don't even seem like they have their eyes on the game wrt ecosystem. They do some parts better than Apple but no one seems to be focussing on the big picture. Once someone is fully in the ecosystem (phone, iPad, Mac, watch, Apple TV and some iCloud services) it's really hard to find another ecosystem that works as well.. and that's not a good thing for the industry in general

lazzurs 2021-08-18 15:47:28 +0000 UTC [ - ]

I’ve bought a Google Pixel 4a today to do some testing with Graphene OS.

I already have my data in Nextcloud so that makes the switch easier but some things like WhatsApp are going to be harder and for that it appears the Matrix bridge is the thing.

What ever path I go down my partner is going to follow so it has to just work and take great photos. If the Pixel 4a as a test device works I’m excited about the Pixel 6 Pro.

On the desktop, just got the new Mac Mini and not looking to jump yet but Linux is a decent desktop OS. All I need is Firefox, a Terminal and Jetbrains to get the job done.

sphinxcdi 2021-08-18 20:09:44 +0000 UTC [ - ]

WhatsApp works fine including its push notifications, you can download it from their website or via Aurora Store.

The AOSP Camera app is not as good as Google Camera but you can install it if you want. It requires Play services but you can install that too including in a dedicated user profile so other apps like WhatsApp don't use it unnecessarily.

576i 2021-08-18 14:54:41 +0000 UTC [ - ]

I always saw Apple stuff as toys, so I own several ipads and boughta Mini 12 iphone because I was impressed with the size. For computing, I use real computers running Windows 10 Pro or Linux (mostly Ubuntu) and I'm ready to leave Windows behind as soon as work no longer requires me to keep it.

Since that CSAM is not coming to Europe any time soon I guess I can ride that out and keep the iphones/ipads and slowly have a look around if there's an acceptable, dual sim phone that compares to the 12 Mini. Maybe my next phone will be a foldable...

adrianN 2021-08-18 14:42:43 +0000 UTC [ - ]

I recently bought a Thinkpad T460p with 32GB RAM and run Debian on it. I use an iPhone because that seems to be the only kind of phone where I can expect security patches for more than two years.

pengo 2021-08-18 19:37:11 +0000 UTC [ - ]

For mobile I'm using Sailfish OS on a Sony Xperia XA2 Plus. Both laptops are running Linux Mint 20.2. No issues with any of these.

I have retained an off-line MacOS on my Mac Mini for music production because, although Reaper runs well on Linux, I can't install all the licensed plugins I use. The alternative was Windows, but in my experience it is still below par for performance and reliability.

aborsy 2021-08-18 21:44:03 +0000 UTC [ - ]

Linux is already, in my view, by far the best operating system! Complete freedom to do what you want, with high quality software.

So I continue to enjoy various wonderful Linux flavors!

I hope my iPhone deprecates faster than usual so that I can soon ditch it for a de-googled phone! (Or possibly a Linux/Pinephone, once batteries get good enough).

lucideer 2021-08-18 15:47:38 +0000 UTC [ - ]

Happily Linuxing on a Dell Precision 5550

Very surprisingly decent touchpad for a PC, lighter than my last MBP, same usbc/thunderbolt 3 ports & charger I've now become familiar with and have peripherals for littered around the house (plus — and this may seem dumb ̄— but something so small as the fold-out HDMI/USBA dongle included in the box just drives home that little bit further how actively user-hostile Apple are).

alexfromapex 2021-08-18 15:00:54 +0000 UTC [ - ]

Surprised Elementary OS 6 wasn’t first mentioned for desktop

tapoxi 2021-08-18 14:23:01 +0000 UTC [ - ]

I'm looking for an alternative Android phone mostly because I'm annoyed by the lack of control over the computer I use the most. Any suggestions?

hhvbnm 2021-08-18 14:31:18 +0000 UTC [ - ]

PinePhone or another device that you can run mainline Linux on

jivings 2021-08-18 15:00:42 +0000 UTC [ - ]

Fairphone 3+ is great

taylodl 2021-08-18 18:08:59 +0000 UTC [ - ]

My understanding is Apple is not scanning photos on the device, but scanning photos uploaded to their servers: i.e. iCloud. I also understand this is the norm for most (all?) cloud-hosted file and photo storage platforms. I can opt-out having my photos uploaded to iCloud (which I do, but not for security concerns).

Am I misunderstanding anything?

istingray 2021-08-18 15:35:41 +0000 UTC [ - ]

Also see these 2 previous discussions from the past week:

Phone-alternatives: https://news.ycombinator.com/item?id=28164208 Laptop-alternatives: https://news.ycombinator.com/item?id=28216287

vwoolf 2021-08-18 14:37:20 +0000 UTC [ - ]

On desktop, Dell's "developer edition" (DE) XPS 13" is great, Linux ships by default, and it should shortly come with an OLED option (https://www.tomsguide.com/reviews/dell-xps-13-oled-review).

On the phone, the iPhone seems more secure and privacy conscious overall.

ZeroCool2u 2021-08-18 15:53:42 +0000 UTC [ - ]

I've got a Pixel and a Dell XPS 13 Dev Edition. I really only use Signal, so I don't miss iMessage/FaceTime. I don't know if I'd say it's perfect, but everything seems to "just work" for the most part. I definitely have less issues with my setup than with my fiancés MacBook Air.

reedlaw 2021-08-18 14:49:40 +0000 UTC [ - ]

I've never had a MacBook but I feel the LG Gram line of notebooks is top-notch. I have a 17" version and it's light, fast, and has a long battery life. It has a full keyboard and is easily upgradeable. I run Arch Linux with GNOME desktop. All the hardware works on Linux except the fingerprint reader .

yulaow 2021-08-18 15:55:18 +0000 UTC [ - ]

I was looking at the lg gram 17 too but in the 2021 version they soldered both the ram slots and the wireless card, which is bad imho.

Like I cannot even find a version with 32gb of ram and if I buy the 16gb version I will never be able to upgrade it.

reedlaw 2021-08-18 19:48:09 +0000 UTC [ - ]

That's too bad. I have the 2020 model and was able to upgrade RAM to 40GB and add a second NVMe drive.

jdlyga 2021-08-18 16:00:26 +0000 UTC [ - ]

To be honest, I don't care that much. Google, Facebook, Microsoft, they all do the same thing or worse. I started using an iPhone because it had the best tech at the time and it was the most convenient. The privacy stuff is nice to have, but it's not a big deal to me.

raydev 2021-08-18 20:57:02 +0000 UTC [ - ]

How have switchers resolved video calls with extended family? FaceTime seems to be the standard now.

I'd have to convince everyone to create a Google account for Meet or similar free video calls.

mindcrime 2021-08-18 15:33:51 +0000 UTC [ - ]

I never used any Apple products or services to begin with, so I won't be changing anything. I've always disliked Apple and their locked-down, consumer-hostile, "walled garden" approach, so this is a big nothing-burger for me.

null_object 2021-08-18 16:11:08 +0000 UTC [ - ]

Is it useful to add my vote to the very many "none" posts already in the thread? I have to admit I was annoyed by the implied assumption that's in the wording of the title, which seems (to me) to imply that a sizable portion of HN is in the process of moving off Apple's products because of the CSAM issue.

I tend to hope that everyone else sees every issue the exact same way that I do, and can word leading questions like the OP did here in the hope of somehow pulling everyone along as though (in this case) switching is the only reasonable choice and the question boils down to which platform to choose, rather than whether switching is a rational decision in itself.

Otherwise all the other posters giving good reasons why not to switch have done a much better job than I have in explaining why not.

duxup 2021-08-18 14:28:56 +0000 UTC [ - ]

Honestly I'm planning on moving FROM android TO Apple...

I feel like that's still more secure than the other options / effort involved. I still think privacy wise Apple is the better play vs all non custom alternatives.

bdamm 2021-08-18 14:31:04 +0000 UTC [ - ]

I'm with you. Going it alone is so inconvenient, very much reminds me of the 1990's where one needed to compile your own linux kernel. It just ends up being a big hobby with all the time implications attached to that.

I use Apple because I have other things to do with my life now, and it's the best of the big ones. They still are.

wilsonfiifi 2021-08-18 17:49:32 +0000 UTC [ - ]

Is there anything wrong with the dell xps developer edition? I don’t see it mentioned very often when Linux laptop conversations come up. Lenovo, system76 etc… but rarely the xps.

Syonyk 2021-08-18 14:57:47 +0000 UTC [ - ]

As of about a week and a half ago, I moved from a 2020 SE to a Nokia 8110 4G "Bananaphone" (the name totally fits) for my primary cellular device. I still have the SE because I've not found replacements for a few key things yet, but it's almost entirely shut off now. Amusingly, AT&T is shipping me a free Flip IV, because my Nokia isn't listed on the "We know it will work with the 3G networks turned down" device list. The tech support guy was quite amused, as was I, so I'll have a legitimate flip phone here in a day or two as well as the bananaphone.

Perks of the bright yellow "What on earth is that?" - it opens up conversations about why I'm moving off Apple.

The lack of KaiOS Signal is a problem, though I've seen some work towards it - perhaps this will drive more development towards the not-Apple, not-Android ecosystems.

I considered a Pixel with GrapheneOS, but Google's hardware reliability lately has left an awful lot to be desired, and I'm just tired of the smartphone concept anyway.

I've been playing casually with a PineBook Pro for the past year or so, and I'm getting that into duty to replace my MacBook Pro for in-house laptop use. There's a new firmware that makes the trackpad actually good, not the laggy, clunky, borderline usable thing that it shipped with, so that's been nice. I simply don't use that much computing power in the evenings, and the PBP accomplishes most of what I want. Unfortunately, again, it doesn't have things like Signal as "easy to install" options (AArch64 is worse than ARMv7/AArch32), so I should throw some time at that as well.

My office, which has a M1 Mac Mini I've done quite a bit of testing and work on, is going to suffer through going to a small ARM box as well - I'm going to put an ODroid N2+ in there, and see how it works. I'll have to drop back from the LG 5k to a 1440p display, as the ODroid can't drive the 5k, but... eh, whatever. Again, I just don't use the computers for an awful lot. I will lose some functionality with regards to video editing, but I simply don't do much of it, and I do have an x86 Windows/Linux PC in the house I can do that on if I need.

The one thing I've not found a great solution for yet is the iPad. I use it for PDF reading, for web browsing, etc. It's probably safe to use in that style, if I strip accounts off, but... even then, I'd like to get rid of it if I can find an alternative. That's going to be a longer project. I'm very interested in the PineNote announcement, as it would make a great PDF reader in theory, but see "a lot of development to make it work." They don't even promise it will run the display when shipped...

As for paying for things, I've got contactless credit cards that can largely replace Apple Pay for "wave something and go," I just have to separate them from the stack of cards first. Not a big deal.

There's a definite loss of function here, but I'm unwilling to state strongly that I'm opposed to all this, and then continue using Apple products as before.

And I've been looking to get away from the tech ecosystems for a while, so this is just a good kicker for me to do it.

I'll probably keep the 2015 MacBook Pro as a "I do still have some value to an Apple device, Apple having been part of my life for nearly 20 years now," but I'm going to strip stuff off and leave it mostly in archive mode.

2021-08-18 15:03:55 +0000 UTC [ - ]

at_a_remove 2021-08-18 16:48:12 +0000 UTC [ - ]

I have been idly looking around for something in the tablet space for dummies. I am not good at the times I must "wrangle" Linux. It is a personal failing.

sydd 2021-08-18 16:28:38 +0000 UTC [ - ]

This is my plan:

Laptop: Framework laptop, if they start to sell it in the EU.

Phone: Currently an ASUS one (one of the very few, thats not made in Shenzen), but I'll switch to a Fairphone if it dies.

ralphc 2021-08-18 17:12:45 +0000 UTC [ - ]

This starts in iOS 15. What if I never upgrade, or wait for others to upgrade, they make outrage and then Apple issues an update that takes the CSAM feature out?

calebkaiser 2021-08-18 15:49:10 +0000 UTC [ - ]

For anyone else who has experienced the frustration of trying to find a Linux replacement for the iPad, I highly recommend the Microsoft Surface.

I tried a variety of alternative tablets/touchscreen options, until finally I bought a used Surface Pro 3 for ~$100 on eBay and installed PopOS. Over the last year, it's been the best tablet I've ever owned (at least for my needs), including iPads.

There's a whole subreddit dedicated to running Linux on Surfaces, if anyone is interested: https://www.reddit.com/r/SurfaceLinux/

stjohnswarts 2021-08-19 03:09:55 +0000 UTC [ - ]

- calyxos on pixel5

- pop_os linux on my pc

- idrive for backups/photos

- magic earth / organic maps for maps

- k9 email for gmail

- protonmail

- all backups to idrive

johschmitz 2021-08-18 15:42:34 +0000 UTC [ - ]

ASUS Zenfone 8. One of the very few relatively small Android phones with 5G connectivity, good camera and a flagship CPU (Snapdragon 888) and not way too expensive.

z3ther 2021-08-18 16:01:45 +0000 UTC [ - ]

Check out samsung products - they're top of the line and many apple products have a Samsung counterpart that's as good or better?

forgingahead 2021-08-18 14:34:21 +0000 UTC [ - ]

How are you finding Manjaro for dev work? I set up Ubuntu 18 on a desktop build last year, it's decent but it's still finicky to be my daily driver, so I still use my MBP for work.

I think for a phone I may just drop back to a Nokia 3210 and buy a camera for family pictures. Whatsapp will be a loss, but hey, maybe it'll be nice to not have my phone as a distraction during the day.

entropy1111 2021-08-18 15:36:55 +0000 UTC [ - ]

> Manjaro

- https://github.com/arindas/manjarno

- https://manjarno.snorlax.sh/

There are only 3 distros worth using. Fedora KDE Plasma upgrading after stabl-er point releases, Arch and openSUSE Tumbleweed.

Everything else is very unprofessional or full of technical or human issues. I'm not trying to gatekeep newbies, like, if you use elementaryOS or Linux Mint you're still using Linux. No elitism intended I'm just giving you my opinion.

For exploration or self inflicted harm you can also use NixOS or weird small distros. Although I like Nix' concepts I don't like their implementation or approach to users.

ByteWelder 2021-08-18 15:04:28 +0000 UTC [ - ]

It works well so far. Android Studio works just fine, and Emacs (doom-emacs in Evil mode) is obviously well supported in Linux. My professional development work still happens on a MacBook Pro, as my employer drives that choice.

fsflover 2021-08-18 16:54:52 +0000 UTC [ - ]

ostenning 2021-08-18 16:25:11 +0000 UTC [ - ]

Genuine question: why not just use macOS without signing into iCloud?

Personally I use dropbox and my own private mail server

kUdtiHaEX 2021-08-18 15:44:55 +0000 UTC [ - ]

You are however aware of the fact that you could just stop using iCloud or just Photos service and move on?

whytaka 2021-08-18 17:26:05 +0000 UTC [ - ]

I'm waiting out to see whether Apple buckles to pressure but if no:

Laptop: Framework with Linux

Phone: Pixel 5 with CalyxOS

2021-08-18 15:29:30 +0000 UTC [ - ]

bitL 2021-08-18 16:43:42 +0000 UTC [ - ]

Desktop: Linux Mint

Notebook: ASUS Zenbook S 3300x2200 with Linux Mint

Phone: Sailfish OS

Tablet: none

Streaming: NUC with Linux Mint and Kodi

Drybones 2021-08-18 15:43:25 +0000 UTC [ - ]

Ironic, I just switched to the Apple iPhone ecosystem 2 years ago after a decade of using exclusively Android, to rid myself of Google and to get better made apps.

- Phone: There is no phones anymore that interest me from the Android ecosystem and iPhones satiate my desire to upgrade every year from getting updates and not turning to shit from use over time. Plus there isn't much more I'd want other than a TouchID option besides FaceID. After moving my (big) whole family to iPhones, we iMessage and FaceTime a lot. I can't re-teach my mother all over again to use something else.

- Watch: My first and only watch was a year ago. Android ones don't interest me. Looking at the Amazfit GTR 2e and that looks good, but if I had to, I'd probably consider the PineTime watch cause it's cheap and obviously not sucking my information or reliant on an app.

- Laptop: I had a MacBook Pro 15 2017 that I recently traded for a MacBook Air M1 that is working better in every way. I don't use laptops much at all but I like it as an Apple dev environment when needed.

- Desktop: I have a custom built Ryzen+Radeon PC. I recently switched from Windows 10 when rumors about Windows 11 leaked. I currently use Ubuntu 20.04 (GNOME) at home and KDE Neon (Ubuntu 20.04) at work.

Linux Desktop Rant: But let me just say that Linux is a fucking disaster on the desktop still.

GNOME (GTK specifically) doesn't have an icon/thumbnail view mode when selecting files (GTK File Chooser Module) and they have refused to fix this. Every GTK base DE has this issue (GNOME, XFCE, Budgie, Cinnamon, Pantheon, LXDE Switching to a different unique DE like KDE doesn't help much either cause apps BUNDLE GTK in them and force you to use the GTK File Chooser module

The most promising unique and usable distro (elementary OS) for the average user still has 3 major flaws: GTK based, Ubuntu dependent, and buggy releases. Elementary OS 6 still has a LightDM bug that makes it so that if you lock the screen or it goes to sleep, you can't get back into your desktop session unless you force reboot.

The app ecosystem is splintering and some of the new options are just as bad or worse than regular package managers. I despise Canonical's Snap stuff. Everything about Snap sucks to use. Makes apps 3x slower, spams my volumes list with loop devices, has flawed sandbox security, and apps can't respect my OS's theme so everything looks like shit.

I tried this weekend to get Arch (gave up due to complex issues) and Manjaro i3 (I also tried various other Ubuntu distros) setup on my work laptop this week only to have the issues with my installs. Kubuntu doesn't allow me to encrypt my drive at installation. Arch and Manjaro fail to find my NVMe drive UUID at boot via GRUB EFI so it can't even get to the decrypting LUKS which I have to do manually. And now I find out OpenWebStart doesn't even support anything not Ubuntu/Debian even for it's compiling. IDK what else to use for launching JavaWeb applets. I ended up on KDE Neon cause it's KDE and Ubuntu and allowed encrypting my drive at installation, so that works I guess but boy am I not happy with this compromise.

Oh and guess what, KDE Plasma doesn't work well on Wayland. I already had it freeze and lock up on Wayland within just an hour of using it and now I'm running it on Xorg.

It's all so tiring.

beders 2021-08-18 15:38:53 +0000 UTC [ - ]

> "CSAM backdoor plans" Comparing hashes is not a backdoor.

dopu 2021-08-18 15:47:42 +0000 UTC [ - ]

It absolutely is. It's just a pretty narrowly-defined backdoor (which could always be subject to widening).

abdulmuhaimin 2021-08-18 15:23:53 +0000 UTC [ - ]

for phone, I'll buy Sony Xperia 10 ii, and install Sailfish OS.

PC already on Pop!_OS

suifbwish 2021-08-18 15:10:07 +0000 UTC [ - ]

I feel sorry for anyone who was riding apple stock for their retirement.

2021-08-18 16:02:44 +0000 UTC [ - ]

thunkshift1 2021-08-18 16:59:02 +0000 UTC [ - ]

What if you dont use the camera at all on iphone?

oxymoran 2021-08-18 14:51:16 +0000 UTC [ - ]

Alternatively, what about just giving up the camera and pictures and getting a stand alone device for that? Not terribly convenient but neither are the other options.

Popegaf 2021-08-18 15:43:54 +0000 UTC [ - ]

Linux laptop or desktop: https://linuxpreloaded.com/ or customize a desktop yourself

You can checkout compatibility of hardware components @ https://linux-hardware.org/

It's of course possible to keep your Macbook, do the environment some good (less waste) and run linux on your mac: https://github.com/Dunedan/mbp-2016-linux

Phone: a phone that supports LineageOS ( https://download.lineageos.org/ ) or GrapheneOS ( https://grapheneos.org/faq#device-support ). Neither are perfect:

- LineageOS still has some google config but at least it doesn't have Google Services (use microG for that https://lineage.microg.org/ )

- GrapheneOS only runs on Google Pixel devices so you will be putting money into Google's hands

newsclues 2021-08-18 15:27:41 +0000 UTC [ - ]

Pen and paper.

patatino 2021-08-18 14:56:16 +0000 UTC [ - ]

Closing my eyes and hope the issue resolves itself

underscore_ku 2021-08-18 15:27:56 +0000 UTC [ - ]

i switched to Ubuntu 10 years ago

guerrilla 2021-08-18 17:01:08 +0000 UTC [ - ]

Is using an alternative Photos app and using something like NextCloud an alternative?

harlanji 2021-08-18 16:49:35 +0000 UTC [ - ]

Phone: Mobile router with rj11 jack, hotspot, and SMS web interface.

Computer: RasPi 4 8GB + 7” screen with Ubuntu Mate in a SmartiPi case.

Car: put the computer onto the visor and flip the display, hook up accessories.

I’m still with iPhone but pretty close to that setup. Mainly I am thinking about emergencies where I want my SIM in my phone when I leave my car. A second SIM that supports WiFi calling is likely the final step, giving the new # to the iPhone and using WiFi only when possible, at home or in car.

Sounds complicated, no doubt. Tethering CarPuter to iPhone is a much easier approach. I’m a VanLifer.

hkt 2021-08-18 15:42:40 +0000 UTC [ - ]

I've never used Apple stuff, but my setup is this:

* Dell XPS 13 running Manjaro/GNOME3. When this XPS dies, I will use the Framework laptop instead.

* Fairphone 3 running /e/OS (degoogled android) with Aurora Store and Aurora Droid.

* Withings Scanwatch, which doesn't have much in the way of regular smartwatch functionality but does monitor my heart rate, provide ECGs and checks my blood oxygen saturation as well as pulse, steps etc.

* Contactless payments just through my bank card. Sometimes I try to remember cash is probably the safest and most ethical choice for payments, but I'm not good at this.

2021-08-18 14:56:27 +0000 UTC [ - ]

shp0ngle 2021-08-18 14:53:44 +0000 UTC [ - ]

Lol.

micromacrofoot 2021-08-18 15:29:46 +0000 UTC [ - ]

To be honest, I'd rather let Tim Cook personally review every photo I take and show them to his friends at parties than use that tech stack.

I hate to say it, but if these are the best alternatives then I guess I have to be ok with losing my privacy. I'll keep pressing Apple and donating to the EFF and Fight for the Future.

martinky24 2021-08-18 14:16:13 +0000 UTC [ - ]

Not switching TBH! Most people don't care!

excalibur 2021-08-18 14:33:21 +0000 UTC [ - ]

If you want to stick with a large name-brand cult you could try MAGA or QAnon, but their whole asthetic is pretty cringe. Scientology is always a good option.

EugeneOZ 2021-08-18 14:32:57 +0000 UTC [ - ]

Happy to see discussions like this - hope it will affect MBP prices!

api 2021-08-18 14:37:15 +0000 UTC [ - ]

It would be hard to leave Apple. I'm at least waiting to see how this shakes out, and I'm aware of the fact that the other major commercial vendors (Microsoft, Google) are far worse than Apple on most of these issues.

Linux is still too high-maintenance for me, though I could be convinced. I am watching https://frame.work/ closely and considering grabbing one just to support that effort. The big flaw is use of Intel chips which are total shit compared to even Ryzens on power/performance.

The M1 makes leaving Apple even harder. The performance is great and the power efficiency makes a laptop feel like it has some kind of zero point infinite energy device in it. You can do a full day's work on an M1 running real apps like large builds, VMs, and IDEs and still have 1/3 battery remaining, and it's faster than a top-end Intel Mac.

There is absolutely nothing comparable to the M1 in the x64 PC ecosystem. A latest-generation Ryzen would be the closest you could get, but it's hard to find good Ryzen notebooks due to Intel's strong-arming of that space.

ByteWelder 2021-08-18 15:28:30 +0000 UTC [ - ]

In terms of power usage versus CPU performance, nothing beats M1 indeed. In terms of pure performance, Ryzen 7 5800X beats M1 in nearly every benchmark. That's ~200W versus ~20-30W though.

In terms of SSD performance, the M1 SSD upgrade from 256 GB to 1TB cost about 500 EUR, while a 1TB Samsung 980 SSD (with very similar performance) costs about 120 EUR total.

2021-08-18 14:22:10 +0000 UTC [ - ]

lambda_dn 2021-08-18 14:53:12 +0000 UTC [ - ]

None, I don't have CSAM on my phone and never will have so why should I care. If it helps reduce these crimes im all for it.

grae_QED 2021-08-18 15:58:08 +0000 UTC [ - ]

Good lord. Why is everyone so upset by this CSAM scanning? Google scans every email you send, Facebook tracks every gesture and post you click. What makes you think that apple hasn't been scanning, or at least had access to, all your stuff in the cloud anyways? The instant you trust your data with a third party, you forfeited your privacy. The whole CSAM thing isn't a revelation.

If you're upset by the thought of a third party entity looking at your stuff then stop using products by these companies. Use FOSS for your computer programs and OS's. Use a phone OS like graphene, /e/, or something else privacy oriented.

The only way to stop being a commodity is by sacrificing convenience and the only way to gain that convenience back is to build your own tools. Talk to the old timers here that have been using minimal OS's and building custom scripts for the past 20 years. They'll tell you that you get a level of speed, efficiency and customizability you can't get with name brand OS's.

The learning curve is worth it considering you build knowledge and skills not a lot of people today have. Not to mention you gain technological independence, which is worth its weight in gold.