Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Or you might think, "Ah-ha, desktop apps!" But the OS vendor can casually destroy you there.

Casually? The amount of effort and goodwill, say, Microsoft would need to spend to prevent me from installing $PROGRAM on my computer is significantly higher than the amount of non-effort a single extension reviewer would need to expend to click "no" arbitrarily because they are having a bad day.

How would Microsoft do it? Add legit software to Defender? Ship a Win10 update that disables a key API call $PROGRAM uses? Add "if program == $PROGRAM then exit" to the CreateProcess code? All possible, none casual. To the best of my knowledge they've never done something like this. I'm less deep into Apple land but I expect something similar holds on macos.



The OS vendor could "destroy" you by making changes to the OS that affect your app, right? The Old New Thing[0] is full of stories of apps that exploited undocumented implementation details of the OS, and were surprised that those aspects were in fact changed in a later OS version.

To its credit (though not everyone agrees), MS has spent a lot of effort making compatibility shims, basically doing other people's work for them, but they have no such obligation.

0. https://devblogs.microsoft.com/oldnewthing/


This strikes me as a different class of problem. Of course software developers are at the mercy of other software and hardware, and have been since the days of yore. And even in that case, you could still potentially debug the issue.

This is a different class of problem. In this case, a gatekeeper is asking you to use their service to distribute software through their channel, and that channel is governed by vague rules that may, in fact, be enforced on a whim. Further, the gatekeeper isn't being clear with the rules, and why you may have run afoul of them.


> The OS vendor could "destroy" you by making changes to the OS that affect your app, right?

You sound like someone who's made the mistake of supporting Apple


That's a software problem for any language. Will the authors break compatibility? They sure can and do all the time. You are always at someone else's mercy in computer science.


> I'm less deep into Apple land but I expect something similar holds on macos.

Well, considering how hard Apple tries lately to make sure every piece of macOS software goes through them one way or another...


Microsoft could add the software to Defender's database of signatures. Or just probably revoke your certificate.


Have they ever done such a thing for legit software (akin to Pushbullet?)

My point is not that they can't do it, my point is that they can't casually do it. It would be Real Work and it would risk major backlash.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: