←back to thread

410 points morsch | 2 comments | | HN request time: 0.42s | source
Show context
inigoalonso ◴[] No.43982322[source]
This is exactly why the EU's Digital Markets Act exists. And why it needs teeth. Google disabling Nextcloud's all-files access on Android, while quietly letting its own apps and big corporate players keep it, isn't about "security". It's about control. Nextcloud is a European, privacy-first alternative built on open standards and that can be fully aligned with GDPR requirements. Blocking its core functionality while favouring your own services is a textbook abuse of platform power. Android was supposed to be open, but moves like this show it (at least the Play Services verison) is just another walled garden. If the EU is serious about digital sovereignty and fair competition, this is the kind of behaviour that must be stopped. Otherwise, no European tech, no matter how compliant, open, or user-friendly, stands a chance.
replies(5): >>43982499 #>>43982829 #>>43982978 #>>43983045 #>>43984630 #
izacus ◴[] No.43984630[source]
Punishing Google for preventing apps from reading all your private data at a whim is quite a take to involve EU for.

Without this enforcement, malware games and apps like Facebook were just uploading your photos and scanning their EXIF locations under the guise of "needing all access".

And as we found out in existing topic, the better privacy preserving APIs exist, Nextcloud just doesn't want to use them.

replies(2): >>43984683 #>>43985254 #
DrillShopper ◴[] No.43984683[source]
Maybe there's a middle ground between "apps can't do this" and "uploading all your data to the developers without a permissions dialog or a popup"? Could we maybe design a system where this permission requires opt in consent like every other feature on Android? Third party apps access to the feature is the issue here.
replies(1): >>43984914 #
nolist_policy ◴[] No.43984914[source]
The old API works this way. Random games requested the "access all files" permission. This was bad and the rest is history.

The better middle ground is the new (9 years old) SAF API. The SAF API simply presents a directory picker to the user. The user can give the app access to any directories he likes.

replies(1): >>43989835 #
apitman ◴[] No.43989835[source]
SAF doesn't work with native code
replies(1): >>43992154 #
1. izacus ◴[] No.43992154[source]
Native code talk to Android APIs as well.
replies(1): >>43994501 #
2. apitman ◴[] No.43994501[source]
Not directly