安全与隐私stallman.org
不要使用苹果产品的理由（2018）
Reasons Not to Use Apple (2018)
2016 — 2021，它一次次回到首页
黑点是上首页（≥ 50 分）的那次投稿，空心点是没冲上去的投稿，点越大分数越高。
导读
这是理查德·斯托曼维护的“不要使用苹果产品”理由清单，列举他对苹果在隐私、用户控制、App Store、专有软件和供应链等方面的批评。页面立场鲜明，不是中立评测，而是自由软件运动视角下的长期批评文本。
为什么经久不衰：它把自由软件运动对封闭平台与数字控制的长期担忧集中成一份可反复检验的清单，今天读来仍是理解苹果生态争议和数字权利讨论的经典入口。
HN 评论精选
个人经历：认可清单有大量例证，但自己仍在权衡手机与手表，且认为苹果和谷歌的隐私政策有可取处。
+1 理查德。当然，他在挑选例子，但可挑的例子确实很多。我在家主要用 Linux 约 15 年，然后用了十年 macOS；新笔记本是 Linux 笔记本，我打算回到 Linux 作为主力。手机让我很矛盾：Verizon 的 Android 预装垃圾让我不满；用 Verizon iPhone 预装垃圾少让我更满意。我在读 Cal Newport 的《数字极简主义》，意识到需要更专注地使用屏幕时间。我很喜欢 iWatch；如果它能脱离 iPhone 独立使用（现在带数据套餐的 iWatch 仍需要手机安装配置应用），我愿意丢掉手机或大部分时间关掉手机。不过我和理查德看法不同：我认为苹果和谷歌确实有一些不错的隐私政策；个人 G Suite 账户我用得还行，苹果在隐私方面记录也相当好。
mark_l_watson查看英文原文
+1 Richard Sure, he is cherry picking examples, but there are a lot of examples to choose from. I used mostly Linux at home for about 15 years, then switched to a decade of MacOS. My new laptop is a Linux laptop and I think I will go back to Linux as my main driver. I am really conflicted about cellphones. I was unhappy with the crap ware preloaded on my Verizon Android phones. I am happier with a Verizon iPhone, as far as not having a lot of junk preinstalled. I am reading Cal Newport’s new book Digital Minimalism that is making me realize that I need to be more focused in how I spend any screen time. I really like the iWatch and if/when it becomes possible to use one independently of an iPhone (now my iWatch with a data plan needs the phone for app installation and configuration) I would like to either ditch the phone or mostly keep it turned off. Still, I differ from Richards opinions in that I think that Apple and Google do have some good privacy policies in place. I feel fairly OK using a personal G Suite account and Apple has a fairly good track record for privacy.
批评其论证方式和表达风格削弱说服力，尽管问题识别准确。
我对斯托曼的不满在于：他通常是对的，但极不善于让自己显得像拥有正当观点的人。带着明显精挑细选的证据来讨论并不真诚，用愚蠢的名字称呼公司和产品也只是幼稚。公司确实有很多问题，斯托曼很擅长发现它们，但他很不会避免别人觉得他有点疯 :/
saagarjha查看英文原文
The problem I have with Stallman is that he’s usually right, but he is remarkably horrible at coming across as someone with valid opinions. It is disingenuous to come to the table with clearly cherry-picked evidence, and calling companies and their products with stupid names is just childish. There are a lot of problems with companies, and Stallman is very good at recognizing them, but he’s just pretty bad at getting people to not consider him as somewhat crazy :/
定位追踪是蜂窝网络本身机制，不能只归咎苹果。
> 如果你带着手机，它就会告诉老大哥你在哪里。 值得记住：只要携带手机且没有完全关机，电信运营商就始终知道你在哪里，当局不需要向苹果索取这些信息。手机本来就会广播自己的位置，而移动通信系统要能工作，前提就是系统知道如何把来电和短信路由到你的手机。
JdeBP查看英文原文
> If you carry a cell phone, it tells Big Brother where you are. It's worth remembering that if one carries a mobile telephone, and it is not fully powered off, TPC always knows where you are, and the powers that be do not need to go to Apple for that information. A mobile telephone broadcasts to let the world know where it is, and the mobile telephony system only works in the first place if the system knows how to route incoming calls and SMS messages to a person's telephone. * https://news.ycombinator.com/item?id=19215636
为苹果辩护：隐私投入、供应链问题普遍、法律合规、信息自由需社会基础。
1. 苹果认真对待隐私和数据安全，投入大量工程努力保护用户数据；除非被迫，否则不会服从政府请求，并会先动用庞大法律手段抵制。 2. 其他消费电子产品的工厂并不比富士康更好；这不能免除苹果的部分责任，但如果 RMS 真担心员工受虐，他应该呼吁完全避免移动设备。 3. 数字平台无法豁免现实法律；某地禁止的东西，不能指望在当地经营的外国公司无视当地法律。若一家在华经营美国公司无视所有知识产权法，你会那么宽容吗？一家在欧洲营销构成未成年人色情材料的日本媒体公司呢？ 4. 需要尊重主权和地方习俗。阿拉伯之春的血腥结果若说明什么，就是信息自由需要一定社会基础，不能当作绝对普世价值；西方社会自己都因网络平台的信息传播而混乱，更别说公民制度更弱的社会……
flyinglizard查看英文原文
1. Apple takes privacy and data safety seriously. It invests a significant amount of engineering effort into keeping user data safe. It doesn't comply with government requests unless forced, after deploying its vast legal means to hold them back. 2. Other consumer electronics devices aren't built in factories that are any different or better than those of Foxconn. While it doesn't absolve Apple from taking some responsibility, RMS should have called for avoiding mobile devices altogether if he's so worried about personnel abuse. 3. Fortunately or not, digital platforms aren't exempt from real world rules and laws. If something is prohibited in some territory, we can't seriously expect foreign companies who do business there to ignore local laws and regulations. Would you be so lenient towards a Chinese company which operates in USA disregarding all intellectual property laws? About a Japanese media company operating in Europe that markets material that would constitute underaged pornography? 4. We need to respect sovereignty and local customs. If there's a lesson to be learnt from the Arab Spring uprisings and their incredibly bloody outcomes is that freedom of information requires a certain societal foundation, and can't be thought of as an absolute universal value. Even the Western world is in a disarray following the information propagation offered by online platforms; to expect a society with much weaker civil institution and foundations to face the same challenges is wrong. Therefore, when Apple is asked to block content in China by the local authorities and complies, it's not any more than respecting the rule of the land. The alternative to that is that the Chinese would create their own Apple (which they of course do), and that's worse for everyone at the end. It leads to a bisected global economy in the style of the Iron Curtain. I'd much rather have Apple operating in China and constantly pushing against government regulation than see the Chinese setting up their own Apple run by government cronies which would pipe user data right into the agencies of Beijing. 5. That aside, some of Apple's behavior (as illustrated by Spotify lately) is downright predatory, intended to lock Apple users to inferior alternatives. I don't like that one bit. On the balance though, I support Apple's discretion with my dollars, because I feel they are selling to me rather than selling me, and because their devices are great.
历次讨论
同类还值得读
非法素数
Illegal prime
维基百科条目，介绍“非法素数”：某些素数之所以被称为“非法”，是因为它们经特定编码后，恰好对应一段被法律禁止传播的数据——最著名的是 DVD 解密程序 DeCSS 的代码，有人把…
安全与隐私上首页 5 次 · 2010–2021en.wikipedia.org编辑精选关于 /dev/urandom 的常见误区
Myths about /dev/urandom
（Thomas Hühn 撰写，2014 年首发并持续更新）逐条反驳关于 /dev/urandom 的常见误解：它与 /dev/random 使用的是同一个 CSPRNG，一旦完…
安全与隐私上首页 5 次 · 2014–20202uo.de编辑精选AES 高级加密标准火柴人图解
A Stick Figure Guide to the Advanced Encryption Standard (AES)
一篇用火柴人漫画形式讲解 AES（高级加密标准）算法的经典科普文章。
安全与隐私上首页 5 次 · 2009–2022moserware.com编辑精选指纹是用户名，不是密码
Fingerprints are Usernames, not Passwords
作者（eCryptfs 维护者、Ubuntu 安全工程师）认为指纹等生物特征是公开、不可更改的标识，应视作用户名而非密码，不能当作秘密凭据用于认证。
安全与隐私上首页 4 次 · 2013–2017blog.dustinkirkland.comHTTPS 连接的最初几毫秒（2009）
The First Few Milliseconds of an HTTPS Connection (2009)
逐毫秒拆解一次 HTTPS 连接建立时发生了什么，重点讲 TLS 握手、证书验证、RSA 签名与密钥协商等机制，面向不熟悉该领域的读者。
安全与隐私上首页 4 次 · 2009–2020moserware.com编辑精选