According to Tim Bryce, the three tenets of management are discipline, organization, and accountability.

Google is finally forced to impose one of these on its malware-beleaguered app ecosystem -- accountability -- and suddenly people think it's the evil empire.

"General purpose computing" is nice to have if you're tinkering around, but from an infosec standpoint it boils down to "arbitrary code execution", and when it comes to the devices ordinary people use in the everyday world, people don't want it. It's too much of a risk. My wife carries an iPhone, and is incredibly thankful that Apple is protecting her data and privacy, in part by refusing certain kinds of apps to run on their platform. People have their bank accounts, credit cards, government IDs, taxes, health information, etc. tied into these devices, all of which can easily be stolen or fraudulently used if we allow random software to run willy-nilly. It's time for accountability in the mobile app space. Part of being a professional is staking your professional reputation on everything you put out there, and if you're not willing to do that, don't develop for the platform. If you want to tinker around, buy a Raspberry Pi 500.

▲

_aavaa_ 4 days ago | parent [-]

> People have…

Then provide security guarantee. Apps can’t read my contacts unless I explicitly give them access. Google and Apple have still yet to take trivial steps to protect users (e.g. ability to deny an app network access). This has nothing to do with security and everything to do with control.

> If you want to tinker around, buy a Raspberry Pi 500.

Why? Why should tinkering be banned completely of the computer that most people use the most in their whole life (often their only computer)?

	▲	bitwize 3 days ago \| parent [-]
		> Then provide security guarantee. Apps can’t read my contacts unless I explicitly give them access. Google and Apple have still yet to take trivial steps to protect users (e.g. ability to deny an app network access). This has nothing to do with security and everything to do with control. Even if such a permission existed, how many grandmas do you think will obey when instructed: "I will send you a link, please do the needful and download this app, then go into settings and enable internet access, contact access, and payment method access"? My guess is: a lot. > Why? Why should tinkering be banned completely of the computer that most people use the most in their whole life (often their only computer)? Because 99.9% of the users of such computers do not care about "the ability to tinker", wouldn't miss it if it were gone, and are at substantially greater risk of fraud, identity theft, or worse if it were there. Because the average user cannot reliably—and doesn't want to—manage security permissions for every app. The UAC dialogs were a stark lesson in this. Users are easily tricked or lulled into giving an app permissions it shouldn't have. Anyway, Google isn't banning tinkering completely, only tinkering without accountability.