Remix.run Logo
▲ elgertam 2 days ago

> What if I told you that every Mac since 2022 ships a pair of daemons whose only purpose in life is to build a graph about you and the people around you: who you are, who you know, how those people are related to you and to each other, how you communicate with them, where you go, with whom, what you do and when.

I wouldn't be surprised at all, given that Photos knows the names and faces of all the loved ones in my life. Not just people, in fact, but the "furry friends." And Calendar and Reminders knows where I go. And so forth.

The feature is genuinely useful. Only thing is it should be opt-in and have guarantees about where/how the data is stored, such as encrypted-at-rest. I trust Apple with that more than all other Big Tech combined, but still in a "trust, but verify" way.

▲ndegruchy 2 days ago | parent | next [-]

> The feature is genuinely useful. Only thing is it should be opt-in and have guarantees about where/how the data is stored, such as encrypted-at-rest. I trust Apple with that more than all other Big Tech combined, but still in a "trust, but verify" way.

Agreed. None of this is magic, and the vast majority of us have been handing this data out to SaaS providers of all sizes and shapes for decades now, for free. Many HN people even _build_ those platforms.

Would I like to see more controls around this? Yes, absolutely. Having some random app be able to read this data with only a single permission barrier is room for improvement. I would also like to see more tooling included to inspect and correct this data. Something like a Monica[1], but local and built on local data. Suddenly address book data is no longer a list of names and numbers, but a part of a data structure that you can use to surface information, like friend's preferences or vacation photos together. Not everything that collects data is insidious and a Black Mirror episode in the making.

[1]: https://www.monicahq.com/en/

▲noduerme 2 days ago | parent [-]

>> the vast majority of us have been handing this data out to SaaS providers of all sizes and shapes for decades now, for free

This is truly disappointing to hear on HN.

▲ndegruchy a day ago | parent | next [-]

It's no less true, though. I'm sure there is a cohort of HN folks who don't have or maintain a social media account (either any more, or ever), there are likely many more that do.

▲jen20 2 days ago | parent | prev [-]

You realize this site is run by a venture capital firm and startup accelerator whose alumni include companies like Flock and Delve, right?

▲noduerme a day ago | parent [-]

There's always been a good bit of tension here between the YC founders and the people who work in the industry. I was banned for comments about PG ten years ago. Neither VC nor workers here are unaware of the consequences of widespread apathy. My disappointment is with one side of that argument capitulating or acting as if the principle is lost, or perhaps being too uneducated and ignorant to state the case.

The VC around here loses more than we do if HN ceases to be a useful barometer.

▲dang a day ago | parent [-]

> I was banned for comments about PG ten years ago.

Where was that? This doesn't sound right. I was running HN 10 years ago, and it has never been a practice to ban people for "comments about PG".

We ban accounts that repeatedly break the site guidelines, including with personal attacks, but that is not a question of who the person is—it's a question of how badly they've broken the rules.

Also, if the person is connected to YC, that would make us a little less likely to ban them, by the principle described here: https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu....

▲noduerme 2 days ago | parent | prev | next [-]

On a side note, every few times I open Google's photo gallery on my android phone, it pops up a dark pattern "backup your photos" toast with a pre-selected radio box saying yes, and two or three delicate manual steps to AVOID having it start uploading all my photos right then.

Unbelievably invasive and offensive.

▲isolay a day ago | parent [-]

We’re just serfs of the feudal overlords. We only exist to fill their coffers.

▲dylan604 2 days ago | parent | prev | next [-]

> given that Photos knows the names and faces of all the loved ones in my life.

Does it know this based on something other than you told it a name for a face at some point? I have plenty of people where Photos sees an unidentified person, and they remain unidentified as I have not named them. It also knows my pets because I've also named them. Until I manually set the name, Photos did not "know" them.

▲judge2020 2 days ago | parent [-]

I think(?) it also figures it out from the contact photo you give someone and matching from that. Not everyone puts photos on their contacts though.

▲dylan604 2 days ago | parent [-]

I don't trust people that push their contact info like that. That's something from an entirely different generation that I just can't grok

▲jen20 2 days ago | parent [-]

I would _LOVE_ an option in iOS to say "don't accept these from anyone, and regardless of what you think about in the future, never send one either" that is honored indefinitely.

▲SoftTalker 2 days ago | parent | prev | next [-]

And what is your "Verify" procedure?

▲pizzaiolo 2 days ago | parent [-]

With proprietary software, you just have to take the company's word for it

▲nico 2 days ago | parent | prev | next [-]

> I wouldn't be surprised at all, given that Photos knows the names and faces of all the loved ones in my life. Not just people, in fact, but the "furry friends."

I got inspired by the automatic “memories” videos/slideshows that Photo makes, and applied it to a video game of AI creatures. The creatures accumulate memories about their experiences, and then the game builds reels with little images or replays of their memories as they happened, with comments about their feelings. It’s pretty fun to watch

▲ProllyInfamous 2 days ago | parent | prev | next [-]

Great "just a user" feedback!

>it should be opt-in

And definitely not "cannot even turn this shit off" mode.

----

I just recently installed Microsoft Office 2011 on my 27" iMac (2009 i5), and it absolutely shocked me that the default "Send User Data to Microsoft" option was `OPT-OUT`, requiring the user to manually click a radio-button to `OPT-IN` to usage data collection.

This was in recent living memory. From Microsoft.

▲kebman 2 days ago | parent | prev | next [-]

I wonder how they get around GDPR. Normally I'd expect the EU to dish out a pretty hefty fine for this sort of thing, but something tells me Apple lawyers and penpushers has been busy making sure this passes, even though it's technically illegal.

▲snowwrestler 2 days ago | parent | next [-]

If it is stored entirely on the machine you own, then you are processing and storing the data.

▲londons_explore 2 days ago | parent [-]

More and more companies will start to use this loophole...

Next, Google will be downloading a database of 2 billion ads to your PC to check against all your private data and decide which ad to show you for anything you search in the future.

And because its all on your PC, no GDPR issues - you are processing your own data.

▲saagarjha 2 days ago | parent | next [-]

This is how privacy-preserving advertising works, yes. To be entirely honest if this works I think I’d agree with that term!

▲londons_explore a day ago | parent [-]

Except it isn't... Because the company with an ad in the database for sex toys targeted at the trans community will have a damn good idea about your sexual orientation when you click that carefully targeted ad and arrive at their website.

▲hobo123 a day ago | parent | next [-]

Vendor of guns will know that people visiting their website like guns. And similarly for other toys with a barrel. Oh no.

▲saagarjha a day ago | parent | prev [-]

I mean…yeah? At some point you’re going to give them your credit card info and home address

▲Barrin92 2 days ago | parent | prev [-]

in this hypothetical setup you're effectively downloading malware, I wouldn't really consider that a loophole. Regulation that concerns data ownership can do precisely what the name says, give you control over where your data lives.

If you have full sovereignty over your data and your computer and you decide to use software that downloads ads and blasts them to you, at some point even in the best jurisdiction you're responsible for what you install

▲tpmoney 2 days ago | parent | prev | next [-]

For the GDPR to have impact here, wouldn't they have to be collecting the information in the first place? If they're doing all the work on your own computer, that wouldn't trigger any GDPR issues.

▲jojobas 20 hours ago | parent | next [-]

Could it be argued that, even though it's your hardware doing the collection and processing, it's still doing it on behalf of Apple, and for Apple to extract value, with no way for you to opt out?

▲4thguy 2 days ago | parent | prev [-]

Data collection is still data collection, it doesn't matter whether I am the one processing that data or a third party :)

Edit: I am not making any claims on what constitutes as data only what is considered as processing. And yes, data collection rules under GDPR can be quite absurd

▲semiquaver 2 days ago | parent | next [-]

It does matter. Your interpretation of “data collection” leads to absurd results.

▲tpmoney 2 days ago | parent | prev | next [-]

How far does this go? Are the Bayesian spam filters that email clients have had for years that use your own classifications GDPR violations because they collect data about what you do or don’t mark as spam? Is your browser a GDPR violation because it collects data about your system that can be used to fingerprint you? Does your OS violate the GDPR when it displays your most recently accessed files in a file picker or as first suggestions when you search for something? Is the SMART monitoring built into your drives a GDPR violation? My understanding of the GDPR is that it applies to data the company is collecting about you. If the company never gets the data in the first place, then they haven’t collected it.

▲4thguy 2 days ago | parent [-]

1. Spam filters. No, the data was collected explicitly for the spam filter to work. Anything else? Not unless you consent to it. 2. Browser collection. The browser itself? There's an agreement when installing it. The websites? There's the cookie banners. 3. OS. Is it your data? No permission needed. Your device, your data. Other people's data? Unclear. Depends on what you told the person when you collected said data. 4. SMART. I don't know a lot about how it works.

I was talking about the data you collect. Your own data processed on your device, it's fine. Your own data uploaded to be processed? You're agreeing, and it has to be an unambiguous. Sending the data outsids the EU? Explicit checkbox.

Is it absurd? Yes

▲tpmoney 2 days ago | parent | next [-]

> Your own data processed on your device, it's fine. Your own data uploaded to be processed?

Ok, but that seems to contradict your original assertion that it doesn't matter where the data is processed. The processes we're talking about run on your computer, processing data about you so that the services your OS provides can use that data to make the services work. That sounds a lot to me like "your own data processed on your device"

▲ a day ago | parent [-]
[deleted]
▲semiquaver 2 days ago | parent | prev [-]

Your uninformed opinion about what the GDPR requires is absurd, yes.

Fortunately your opinion bears no resemblance to reality, so the absurdity is confined to inside your head (except to the extent it leaks onto message boards, as here)

▲jen20 2 days ago | parent | prev | next [-]

> Data collection is still data collection, it doesn't matter whether I am the one processing that data or a third party

It absolutely matters who collects or processes for who must be GDPR compliant.

▲1123581321 2 days ago | parent | prev [-]

You should admit it’d be a bit silly to give notice to yourself that you are processing your own data!

▲MattDamonSpace 2 days ago | parent | prev | next [-]

Might not be used in the EU

▲cyclopeanutopia 2 days ago | parent [-]

[dead]

▲semiquaver 2 days ago | parent | prev [-]

It all lives on your device in order to make it work better. Apple literally doesn’t have custody of the data so it’s not relevant to the GDPR. It’s your data.

▲coldtea 2 days ago | parent | next [-]

Also available to any other app with "full disk access" to just read and upload. A permission that make apps ask for and others need to work (e.g. a terminal replacement).

▲tpmoney 2 days ago | parent | next [-]

Every piece of data on your computer that is owned by your user is available to any other app you run as your user. That's hardly unique to this data, and is a well known issue when it comes to personal data and the applications you run under the unix permissions model. That this is at least behind the "full disk access" control makes it more protected than something like all of the tax and accounting data your financial software is storing in your Documents or home folder (well, technically under macOS your Documents folder also has its own permission, but it's the same sort of thing where anything with permission to read from your Documents folder can read anything in there).

It's an eternal balancing act because every time Apple implements some new restriction in their OS that prevents apps from doing whatever they want, whenever they want, people get mad at them. But without those restrictions, the ever increasing amount of personal data that is stored on your computer is exposed to the ever increasing number of data slurping applications that you run.

▲coldtea 2 days ago | parent | next [-]

>Every piece of data on your computer that is owned by your user is available to any other app you run as your user.

That not being the case is the whole purpose of the per-app sandboxes which macOS has along with TCC. We're not discussing plain Unix permissions alone.

▲tpmoney 2 days ago | parent [-]

Ok, and the data is in a location that you need to grant full disk access to an application in order to access it. So what is the complaint here? Is it that if you run an application and give it access to the data that it has access to the data?

▲coldtea 21 hours ago | parent [-]

Isn't it obvious? It's that the per app permission for this folder shouldn't fucking be "whatever your OS user can access" or "full disk access" but either fine grained at the folder level - just like "documents" folder has.

If an app needs to read the local social graph it should ask for a permission to THAT folder (or a slightly more general "read social graph data", like we have "read Reminders data"). Not bloddy full disk access or bust.

▲tpmoney 14 hours ago | parent [-]

Sure, I guess they could add the additional lower level directory permission, but to what end? This is data that is clearly not intended to be consumed directly by other applications, just specific services the OS provides and presumably sandboxed/filtered through the OS's internal APIs for accessing anything built off of this data.

▲coldtea 6 hours ago | parent [-]

>Sure, I guess they could add the additional lower level directory permission, but to what end?

To the end that apps read only the data you allow them to, not coarse grained all or nothing.

>This is data that is clearly not intended to be consumed directly by other applications, just specific services the OS provides and presumably sandboxed/filtered through the OS's internal APIs for accessing anything built off of this data.

But that's exactly the problem. That "this is data that is clearly not intended to be consumed directly by other applications, just specific services the OS provides" and yet it is allowed to be read by any application that gets "full disk access".

What you state as already the case is precisely what I want them to fix: that it's, as of now, NOT "sandboxed/filtered through the OS's internal APIs for accessing anything built off of this data".

▲hparadiz 2 days ago | parent | prev [-]

This drives me crazy. I'm slowly working on isolating every application into it's own sandbox but the fact that this wasn't built into the kernel drives me up the wall.

▲astafrig 2 days ago | parent | prev | next [-]

> A permission that make apps ask for and others need to work (e.g. a terminal replacement).

I assume you mean 'many' and not 'make'—this is untrue; you only need to grant FDA if you're trying to access protected areas, like the knowledge graph store.

Granting full disk access to an app that you don't trust not to surreptitiously exfiltrate your data is the kind of user error where the buck stops with PEBCAK.

▲woadwarrior01 a day ago | parent | prev [-]

Which is why Apple is so skittish about "full disk access".

https://developer.apple.com/news/?id=p6zjojqw

▲sneak 2 days ago | parent | prev [-]

[flagged]

▲kogir 2 days ago | parent | next [-]

While not the default, with Advanced Data Protection, iCloud Backup does encrypt backups end to end. It’s available in most jurisdictions.

https://support.apple.com/en-us/102651#advanced

▲1over137 2 days ago | parent | prev | next [-]

>iCloud Backup, on by default

iCloud is not on by default with macOS. For starters, you have to create an iCloud account!

▲semiquaver 2 days ago | parent | prev | next [-]

  > It is safe to assume
No need to assume anything. This data is not included in iCloud backup. That detail is included in the article.

You are misinformed (or speculating) and spreading FUD.

▲sneak 2 days ago | parent [-]

> This data is not included in iCloud backup. That detail is included in the article.

The word "backup" does not appear at all in that webpage? Your claim is unsubstantiated. For these features to work, they must be running on iOS as well, for people who don't own a mac. Siri is used more on mobile devices than on desktops, generally.

▲shuckles 2 days ago | parent | prev [-]

Photos aren’t in iCloud Backup. Have you considered doing the bare minimum to understand the features you complain about?

▲sneak 2 days ago | parent [-]

They don't need to be; Photos are synced in realtime to Apple without e2ee. Apple already has them, even faster than the nightly backup.

▲oofbey a day ago | parent | prev [-]

And yet if I ask Siri “read me the most recent text message from Matt Wells” it fails saying “I couldn’t find any messages…” even though it’s right there.