Remix.run Logo
epistasis 11 hours ago

The question isn't if there's corruption, the question is who is behind the corruption.

Condescendingly and incorrectly assuming that others think that corruption is impossible is kinda rude and also dodges attempts at correcting the corruption.

AnthonyMouse 10 hours ago | parent [-]

Not only that, "corruption" is pretty squishy. Let's apply Hanlon's Razor for once.

Google et al go to the government and say they've got this attestation thing that can something something security. No one is taking a bribe but also no one they're hearing from is telling them that doing this is going to cement the incumbents. "Security" is good, right? So it makes it into the law.

That doesn't meet most formal definitions of corruption. It's more like incompetence than malice. But the outcome is indistinguishable from corruption. The bad thing gets into the law.

The difference is, if the politicians are taking bribes and you get mad at them, they fob you off because they're more interested in lining their pockets. But if the politicians are just misinformed bureaucrats and you get mad at them, they might actually fix it.

And attributing everything to "corruption" discourages people from doing the latter even in cases where it would be effective.

danielmarkbruce 9 hours ago | parent | next [-]

Anything involving trust cements the incumbents or at least creates a force to an outcome of few players. It is what it is.

It's not a given that it's incompetence.

AnthonyMouse 8 hours ago | parent [-]

> Anything involving trust cements the incumbents or at least creates a force to an outcome of few players.

I don't think that's even true, unless you're using "trust" as a synonym for centralization.

Suppose you had actual competing app stores. Google doesn't control which ones you use; you can use Google Play or F-Droid or Amazon or all three at once and anyone can make a new one. You could get Android apps through Apple's store and vice versa. And then you choose who you trust; maybe you only trust F-Droid and Apple and you think Google and Amazon stink. Maybe you install 90% of your apps through F-Droid but are willing to install your bank app on GrapheneOS from Google Play because you trust your bank and you also trust Google enough to at least verify that the bank app is actually from your bank.

This is the thing that doesn't help the incumbents, right? The bank and the customer both trust Google to distribute the bank app but Google isn't allowed to prevent the user from trusting F-Droid for other apps as a condition for getting the bank app from Google Play. You can have trust without centralization.

danielmarkbruce 8 hours ago | parent [-]

You have given a situation where there are a 3 players - a very concentrated market. Give an example with 30 players and think through all the implications for all the actors. You'll quickly realize it's a total disaster. Building broad trust requires scale on some dimension.

AnthonyMouse 7 hours ago | parent [-]

How is it in any way a disaster?

Consider how Linux distributions work. Every distribution is distributing variants on the same kernel and utilities, but there are hundreds of distributions and dozens of popular ones each with their own repositories. You can choose whichever you like, and make a different choice than someone else.

Coming in at #31 on DistroWatch is a lightweight distribution called Alpine Linux. It's popular on things like firewalls and VoIP servers but is rarely recommended to ordinary users because that isn't its niche. It doesn't matter that most people haven't heard of it because the people relevant to it have. It's fine for things to have a niche, and the people in that niche are the only ones who need to be familiar with it.

Meanwhile around half of Linux users use Debian derivatives. Debian and Ubuntu are very similar, but their repositories are maintained by different organizations, so even when choosing between two things that are nearly the same, you have different options.

And the distribution is not the only place to get software. Maybe you like a stable distribution in general but you want the bleeding edge drivers for your GPU. You can add the repository for the hardware vendor and still get everything else from the distribution. The vendor doesn't even need to maintain their own full distribution to have enough of a reputation for people to make an informed choice about where they want to get their drivers.

> Building broad trust requires scale on some dimension.

The flaw is in assuming that broad trust is a requirement. Narrow trust is good.

danielmarkbruce 5 hours ago | parent [-]

The long tail of linux distributions work precisely because they need very little trust and are consumed by highly technical users who can verify all manner of things themselves. They especially don't require multi-party verification.

Broad trust is required in lots of situations. Hardware attestation, financial clearing networks, or even physical supply chains. Ie, you have multiple independent parties who need mutual, verifiable trust to operate. Establishing that requires transaction costs like audits, SLAs, legal liability, and cryptographic integration. The economics don't work for 30 different players to cross-verify each other. So, we have oligopolies...

10 hours ago | parent | prev | next [-]
[deleted]
fragmede 10 hours ago | parent | prev [-]

> Google et al go to the government and say

The money that goes into lobbying in order to have that say is, depending on who you ask, corruption. I, as a random citizen, don't get the same say that a multi billion dollar international corporation does.

AnthonyMouse 9 hours ago | parent [-]

That seems like a pretty useless definition of corruption. It implies that retirees writing letters to Congress is "corruption" because working people don't have the same amount of free time to do that.

It's also kind of weird to propose it as an asymmetry. Google's parent company spends around $4M on lobbying in the US:

https://www.opensecrets.org/federal-lobbying/clients/summary...

That's around $0.01 per capita. Your per capita contribution for individuals to out-spend Google on lobbying is two cents.

coliveira 8 hours ago | parent [-]

The day a low income retiree can have meetings with politicians to lobby for their favorite policies is the day this comparison will be useful.

AnthonyMouse 8 hours ago | parent [-]

You don't think the AARP has meetings with politicians to lobby for things?