justinschuh · TEXXR

@runasand @lilyhnewman And that's before you get into the really hard parts of counter-abuse, account recovery, and all the other integrated systems that have to be rethought from the ground up. The progression towards E2E is a good thing, but it ain't easy, and it comes with major end-user tradeoffs.

2022-08-12 View on X

Wired

After the Nebraska abortion case, Meta tests more E2EE chats and backups in Messenger, and says default E2EE messages and calls will roll out globally in 2023

Lily Hay Newman / Wired :

View original

This is a longer read, but necessarily so because it uses actual data to make a cogent case. And it's a refreshing departure from the innuendo and anecdata that normally fills the space around browser competition. https://twitter.com/...

2022-06-27 View on X

Infrequently Noted

A deep dive: how Apple uses iOS WebKit monopoly to strip-mine and sabotage the web, hurting all browser engine projects and draining the web of future potential

the only platform that actually supports Safari *and* competing browsers. @satefan : An open letter to Tim Cook signed by all iOS browsers builders (big and small), an alliance, wr...

View original

@migueldeicaza Exactly. The notion that Apple needs Safari protected from browser competition on iOS is patently absurd when the exact opposite has proven out in their majority share on Mac—the only platform that actually supports Safari *and* competing browsers.

2022-06-27 View on X

Infrequently Noted

A deep dive: how Apple uses iOS WebKit monopoly to strip-mine and sabotage the web, hurting all browser engine projects and draining the web of future potential

the only platform that actually supports Safari *and* competing browsers. @satefan : An open letter to Tim Cook signed by all iOS browsers builders (big and small), an alliance, wr...

View original

Getting to it “next month” is a very bad answer for an actively exploited issue. In my guest spot on last week's @SCWpod I mostly talked about architectural security and safe coding between browsers. We didn't get into vuln response, but it's always been a weak point for Apple. https://twitter.com/...

2021-08-25 View on X

The Citizen Lab

Investigation details ForcedEntry, an iMessage “zero-click” attack used by NSO Group that circumvents iOS 14's BlastDoor, likely used by the Bahraini government

View original

I once heard a friend describe the broader problem here as “there is nothing more legally and ethically fraught than running an open bit bucket on the Internet.” https://twitter.com/...

2021-08-07 View on X

@wcathcart

[Thread] WhatsApp says Apple's approach to CSAM is a setback to user privacy, will be more fraught outside the US; WhatsApp flagged 400K+ cases to NCMEC in 2020

even photos you haven't shared with anyone. That's not privacy. Will Cathcart / @wcathcart : We've worked hard to ban and report people who traffic in it based on appropriate measu...

View original

I once heard a friend describe the broader problem here as “there is nothing more legally and ethically fraught than running an open bit bucket on the Internet.” https://twitter.com/...

2021-08-07 View on X

MacRumors

In response to CSAM detection misuse concerns, Apple says protections will roll out in the US first, then on a country-by-country basis after legal evaluation

Apple this week announced that, starting later this year with iOS 15 and iPadOS 15, the company will be able …

View original

This article provides quite the catalog of accumulating damage that Safari has done to the Open Web over many years, but at the same time the perspective of the author misses some key points (and I think that last part needs some digging into). [1/12] https://httptoolkit.tech/...

2021-07-31 View on X

HTTP Toolkit

Safari's extremely slow pace in adopting popular features and fixing showstopping bugs, and refusal to engage with contentious API proposals, is harming the web

Features not implemented are not dangerous —'Safari is the next IE' is well supported by many bugs —Ignoring Chrome proposals without engaging or alternative offers, makes the prob...

View original

Given the final minutes of the Epic v. Apple trial, I'm wondering if Epic may actually break open the App Store payment monopoly. Would also be interesting to see how this applies to Apple's recent moves to similarly monopolize in-app advertising. #IANAL https://www.theverge.com/...

2021-05-24 View on X

Protocol

As Apple and Epic make their closing arguments, a look back at the judge's pointed questioning of Cook on Friday that touched on App Store's lack of competition

Judge Yvonne Gonzalez Rogers, who is presiding over the Epic v. Apple antitrust trial, saved her best for last.

View original

Given the final minutes of the Epic v. Apple trial, I'm wondering if Epic may actually break open the App Store payment monopoly. Would also be interesting to see how this applies to Apple's recent moves to similarly monopolize in-app advertising. #IANAL https://www.theverge.com/...

2021-05-24 View on X

TechCrunch

In his Epic v. Apple trial testimony, Tim Cook offered a carefully tended ignorance that left many of the lawsuit's key questions unanswered, or unanswerable

View original

@migueldeicaza This was immediately following the Blink fork. Apple had to grow their team just for basic maintenance, because Google had been doing the lion's share of the work up to that point. E.g. My team handled essentially all Webkit vulnerability response and remediation.

2021-05-05 View on X

Protocol

At trial, Tim Sweeney contends that the App Store taking “30% off of the top” is an existential threat to Fortnite becoming a metaverse or platform for creators

Epic CEO Tim Sweeney finished his time on the stand Tuesday afternoon, during day two of the Epic v. Apple trial.

View original

@migueldeicaza This was immediately following the Blink fork. Apple had to grow their team just for basic maintenance, because Google had been doing the lion's share of the work up to that point. E.g. My team handled essentially all Webkit vulnerability response and remediation.

2021-05-05 View on X

9to5Mac

On Day Two of the Apple vs Epic trial, Sweeney said he would have taken an exclusive App Store deal, Apple recounted Epic's praise of Apple's Metal API, more

Simon says Apple refused to let it prominently mention COVID-19 in an update that appeared in its app, because it worried the topic —including just mentioning lockdowns — would be ...

View original

This offers an interesting peek into how this struggle played out inside Apple nearly a decade ago. Sadly, they largely gave up on Safari anyway, as they pivoted to driving everything into their app store, where they can now enforce their cut on all monetization. https://twitter.com/...

2021-05-05 View on X

Protocol

At trial, Tim Sweeney contends that the App Store taking “30% off of the top” is an existential threat to Fortnite becoming a metaverse or platform for creators

Epic CEO Tim Sweeney finished his time on the stand Tuesday afternoon, during day two of the Epic v. Apple trial.

View original

This offers an interesting peek into how this struggle played out inside Apple nearly a decade ago. Sadly, they largely gave up on Safari anyway, as they pivoted to driving everything into their app store, where they can now enforce their cut on all monetization. https://twitter.com/...

2021-05-05 View on X

9to5Mac

On Day Two of the Apple vs Epic trial, Sweeney said he would have taken an exclusive App Store deal, Apple recounted Epic's praise of Apple's Metal API, more

Simon says Apple refused to let it prominently mention COVID-19 in an update that appeared in its app, because it worried the topic —including just mentioning lockdowns — would be ...

View original

Both the thread and the article are worth a read. One really important takeaway is how poorly designed “privacy” measures actually lead to more invasive forms of data collection while simultaneously advantaging the biggest players. https://www.ft.com/...

2021-05-02 View on X

Financial Times

By limiting iOS apps' ad tracking capabilities, Apple could see increased commissions from IAPs and subscriptions if developers start charging for apps

as every company involved in advertising will be forced to learn the new rules https://www.ft.com/... Neil Shah / @neiltwitz : Great reporting! Software has been eating the world b...

View original

We're rolling out a bunch of new security and privacy protections in Chrome, along with making longstanding controls much more discoverable and easier to use. https://www.blog.google/...

2020-05-20 View on X

VentureBeat

Google launches Chrome 83 with updated safety and privacy settings, third-party cookies blocked in Incognito mode, DNS-over-HTTPS support, and new dev features

Emil Protalinski / VentureBeat :

View original

Plus there's a ton of ongoing work to prevent snooping on your browsing activity in transit, with credit to @KenjiBaheux, @cos_theta, and team. https://blog.chromium.org/...

2020-05-20 View on X

VentureBeat

Google launches Chrome 83 with updated safety and privacy settings, third-party cookies blocked in Incognito mode, DNS-over-HTTPS support, and new dev features

Emil Protalinski / VentureBeat :

View original

And take a look at the new Extensions UI that we're rolling out. We'll be bringing more capabilities here as we give people more insight into and control over how their extensions interact with their data and the sites they visit. https://twitter.com/...

2020-05-20 View on X

VentureBeat

Google launches Chrome 83 with updated safety and privacy settings, third-party cookies blocked in Incognito mode, DNS-over-HTTPS support, and new dev features

Emil Protalinski / VentureBeat :

View original

Very happy to see the team rolling this out. These kind of resource limits are exactly the right defense against abusive patterns like cryptocoin mining ads. https://blog.chromium.org/...

2020-05-15 View on X

VentureBeat

From August, Chrome will start blocking ads that consume 4MB of network data, 15 seconds of CPU usage in any 30 second period, or 60 seconds of total CPU usage

Emil Protalinski / VentureBeat :

View original

We shared an update today on our plans to phase out 3P tracking from the Web over the next two years. https://blog.chromium.org/...

2020-01-15 View on X

CNET

Google says it will phase out support for third-party cookies in Chrome within two years

just not anytime soon Tweets: Justin Schuh / @justinschuh : We shared an update today on our plans to phase out 3P tracking from the Web over the next two years. https://blog.chrom...

View original

Just to be very clear on this point: This is not about blocking a subset of 3P cookies via lists and/or heuristics. This announcement is that we are going to remove 3P cookies and related tracking mechanisms entirely. https://twitter.com/...

2020-01-15 View on X

CNET

Google says it will phase out support for third-party cookies in Chrome within two years

just not anytime soon Tweets: Justin Schuh / @justinschuh : We shared an update today on our plans to phase out 3P tracking from the Web over the next two years. https://blog.chrom...

View original