Hacker News new | past | comments | ask | show | jobs | submit
If Apple is so pro-privacy like they claim, then they'd look for the most strict international privacy laws and abide by them. Then they could feel safe in knowing they could release the product anywhere. The fact they want to make the product available under the "rules" of the least privacy protecting countries first says a lot to me
The EU isn't asking for more privacy. This is about interoperability and competition. They don't like Apple controlling the AI interface and want a portal. They want Apple to put a backdoor into their system to allow third parties to access the data. This is insanely difficult to do while maintaining Apple's super-strict (yay!) privacy policy.
DMA is a not a privacy-oriented law.
But Apple’s excuse not to comply with it is privacy-related.
Yes. There are two values (privacy and competition) that are directly in conflict here.
How does that reflect poorly (or positively) on their privacy chops? The dispute is about a competition law, a law Apple is complying with by withholding this feature.
Its because the standard product development strategy is to get the product into the hands of users to determine value and iterate based on feedback.

The EU has rules that are expensive to implement correctly, so if you want early feedback from users, you release elsewhere first. It's a very rational way to approach it.

> If Apple is so pro-privacy like they claim, then they'd look for the most strict international privacy laws and abide by them. Then they could feel safe in knowing they could release the product anywhere.

Those are not equivalent statements. You're assuming that privacy is a one-dimensional quantity, so that anything that complies with "the strictest international privacy laws" automatically also complies with any other privacy laws. But this is not actually true. It can easily be the case that every national law allows some set of behavior (different sets for different legal systems), at the same time that the intersection of all those sets is empty.

DMA is about competition, not privacy. Apple weren’t requesting a GDPR waiver.
Apple's concern is at the intersection of DMA and privacy. Apple is worried that other parties having the same level of data access that Apple has today would create privacy issues. This is because Apple's current privacy posture is "Trust Apple with your data" rather than "Trust no one with your data - including Apple", but that would be less profitable, but would have prevented the request for an exception because Apple would be on an equal footing with everyone else, if all they could see was client-encrypted data indistinguishable from random bytes.
> Apple is worried that other parties having the same level of access that Apple has today would create privacy issues

But this is solvable. The problem is the work it takes to solve it isn’t worth the hit to time to market. (And possibly even the cost.)

> But this is solvable

That's the crux of my point; Apple could have solved this on day zero if they had a consumer-centered threat-model and/or considered user data to be a liability rather than a hook for service subscriptions.

> The problem is the work it takes to solve it isn’t worth the hit to time to market. (And possibly even the cost.)

I don't consider this to be a problem, but the DMA working as intended and preventing gatekeepers from competing unfairly.

> Apple could have solved this on day zero if they had a consumer-centered threat-model

Consumer-centered threat model is perfectly well served with on-device models and Private Cloud. What isn’t is interoperability.

> the DMA working as intended and preventing gatekeepers from competing unfairly

I agree. And at the end of the day, Apple is following the law. I am sympathetic to their position, however, that this isn’t something worth building and optimizing for at launch. If we wanted to be rose tinted, EU consumers will get a fully-baked product. (EU developers get somewhat screwed, but I suppose their offshore offices could start.)

> This is because Apple's current privacy posture is "Trust Apple with your data" rather than "Trust no one with your data - including Apple"

I think that's uncharitable. Apple prefers not to have the data either, hence the preference for on-device processing.

So Apple doesn't want to compete? Cry me a river.

I could almost feel sympathy if it were something to do with some contract that Apple signed with their AI provider. Who's that, Google?

Ahh, a "competitor"? Yeah... cry me a river.