logoalt Hacker News

leptonsyesterday at 7:03 PM3 repliesview on HN

>> people will figure that out and adapt for themselves

>No they won't. People on HN will. Not the average person.

Yes they will, Apple has made it very easy to see.

To check iOS app power usage, go to Settings > Battery, where you'll see a breakdown of battery consumption by app for the last 24 hours or 10 days, showing usage time and background activity, allowing you to identify power-hungry apps and manage settings like Background App Refresh to improve battery life.

So yeah, it's easy to see which app is taking the most power, and users can do this easily, unless you think Apple's UX is so bad that users won't know how to read it?

>The problem is, arbitrary code execution vastly expands the risks. Your "should" is doing all the work there.

If that's a problem for web browsers, then it's a problem for every single app in the app store. There's nothing really unique about a web browser app that makes it more risky than any other app. Javascript is already very much sandboxed. And there have been plenty of exploits that already target Safari. So saying other browsers are the problem is like blaming the victim (of Apple's anti-competitive practices).

>Huh? Apple follows web standards. Why the heck should it make Safari available on Android and Windows? Safari isn't a standard, web standards are.

If web standards are standards, then let other web browsers on iOS.

The real reason Apple disallows other browser engines on Safari is so they can force developers to create native apps where they can get a cut of any purchase made through the app. The problems with Apple's anti-competitive practices have been spelled out in the DOJ lawsuit against them:

https://www.justice.gov/archives/opa/media/1344546/dl?inline


Replies

otterleyyesterday at 9:06 PM

Apple made it very clear that their security concerns related to third party browsing engines are about difficult-to-contain threats posed by JIT compilation. (JITs require non-text memory pages to be executable.) Apple doesn’t allow other apps to use such technology, so they’re consistent in that respect.

Apple even disables JIT for Safari itself when you put an iPhone in lockdown mode, at no small cost to performance, in an effort to harden the device even more.

Do you have a rebuttal to that?

show 3 replies
swiftcoderyesterday at 8:27 PM

> So yeah, it's easy to see which app is taking the most power, and users can do this easily, unless you think Apple's UX is so bad that users won't know how to read it?

It's easy to see, but seeing doesn't mean the user will do anything about it. I guarantee that for the average user, their list goes something like Instagram/TikTok/FaceBook/Twitter, and they haven't uninstalled any of those yet due to battery drain...

show 1 reply
crazygringoyesterday at 7:15 PM

> go to Settings > Battery, where you'll see a breakdown of battery consumption by app

And what percentage of users do you think ever check that, or even know it's there to check?

> If that's a problem for web browsers, then it's a problem for every single app in the app store.

No it's not, the app store disallows arbitrary code execution.

> There's nothing really unique about a web browser app that makes it more risky than any other app.

Yes there is -- JavaScript.

> Javascript is already very much sandboxed.

...by Safari. It wouldn't be if you allowed any developer to write their own JavaScript interpreter as part of their own browser.

> If web standards are standards, then let other web browsers on iOS.

That's a non-sequitur.

show 1 reply