Slashdot Mirror
Apple In Trouble With Developers
geek writes "According to Marco Arment, the creator of Instapaper, Apple may be in trouble with developers. According to Arment, the new sandboxing guidelines from Apple are pushing developers away in droves. 'I've lost all confidence that the apps I buy in the App Store today will still be there next month or next year. The advantages of buying from the App Store are mostly gone now. My confidence in the App Store, as a customer, has evaporated. Next time I buy an app that’s available both in and out of the Store, I’ll probably choose to buy it directly from the vendor. And nearly everyone who’s been burned by sandboxing exclusions — not just the affected apps’ developers, but all of their customers — will make the same choice with their future purchases. To most of these customers, the App Store is no longer a reliable place to buy software.' Arment also comments on the 'our way or the highway' attitude Apple often takes in these situations and how it may be backfiring this time around."
Remember, that line didn't even work out for Vader and he had Star Destroyers and millions of clone troopers at his command. If you have the upper hand you can sometimes force people to accept a one sided deal. But if you go beyond that and keep changing the terms on it eventually everyone figures out they might as well take their chances because they are hosed anyway. You have to leave them some hope of survival.
I especially liked how the article has this:
"This even may reduce the long-term success of iCloud and the platform lock-in it could bring for Apple. Only App Store apps can use iCloud, but many Mac developers can’t or won’t use it because of the App Store’s political instability."
Anyone who would write that, in the context of it being a good thing!, is obviously a Kool-Aid drinker. When you are driving those people away it is a warning sign.
Imagine how badly Microsoft is going to bungle this same gambit. Notice how Valve is already running for the exits? Uh huh, good times ahead for everyone!
Democrat delenda est
I loathe Apple. They are probably one of the most detestable companies in the technology sector right now. I see them as a modern version of 90s Microsoft.
But this? I think this is a move in the right direction. The added security benefits sandboxing brings far outweigh any negative consequences a few developers too lazy to implement something Apple's been telling them they need to implement for the better part of a year might experience (at least according to the OS X review a few days ago from Ars Technica). And it's not like these developers have no recourse; as long as they register with Apple or whatever, the default OS setting will allow users to go download those products from the vendor's website.
There are plenty of reasons to hate Apple. Their push toward better security practices is not one of them.
Except there is no evidence that developers are "leaving in drones" neither from the linked blog posting or anything from the summary. That was just sensationalism added in to rile up the Apple crowd.
What was that about the cheesemakers?
systemd is Roko's Basilisk.
Apple probably doesn't care. When one merchandiser leaves, another one will gladly take its place.
My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
As a developer I see what he is saying.
But as a user the changes only make it MORE likely I would look in the app store first for something. I know something from there will work along with the system security restrictions.
With more people looking in the app store, the simple truth is more developers will have to service that market somehow or lose users (or at least not grow at the same rate as the mac install base does).
Apple has already changed some ways in which sandboxing works, to accommodate some application needs. And they will do more of that going forward - but historically Apple implements overly strong security to start with, and then whittles it away as required instead of letting users get used to an overly permissive model.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Except there is no evidence that developers are "leaving in drones"
If i were leaving i don't think a drone would be my preferred conveyance.
Developers think "Great, I can release an App Store version... I just need to remove x and y." So they do that, and people buy the App Store version. Then the developer realizes his App Store version now can't do Z, which makes it much harder to keep making in parallel with his native version. So he stops updating the App Store version. App Store customer sees non-App Store version getting updates and gets angry.
Many, MANY people buy Macs because they believe that they are better/more stable/more secure than the Windows machines they've used for the past decade. Whether they are or are not is an endless Slashdot debate that is completely tangential to my point, because what's at question here is the perception, not the reality.
If people perceive the Mac to be the stable part, software that doesn't work will likely be blamed on the developer, not Apple. To them, a sandbox is a place young children play in, not a computer security model. A developer trying to explain this to someone who truly doesn't understand the security model will make himself look foolish to the customer, not enlighten the customer.
The App Store will still be used by many Mac users in the same way Origin is used by EA customers. Few (if any) EA customers desired Origin, it's just necessary for Battlefield 3, Mass Effect 3, and The Sims. Similarly, even if many Apple developers ditch the App Store, the fact that Final Cut Studio, Logic, and Aperture are available through it will keep a huge demographic begrudgingly using it. Adobe is probably the one company who can likely keep a working trigger finger on Apple preventing conventional software installations, but their pushing their 'Creative Cloud' model may weaken their grip on said trigger. Ableton and Serato may be in a position to help pick up the slack a bit, but they definitely don't have the same level of clout.
Finally, long time Mac incumbents may be wary of the Mac App Store, but newcomers who love their iPhone/iPod/iPad may be more inclined to start at the App Store since that's "where software comes from". It's part of the vertical solution that they feel they bought from Apple. The question will be whether developer A's FOO_APP skiddishness in being included in the App Store will be the golden opportunity for similarly-functioning FRA_APP to eat its lunch. Again, Adobe may be able to keep itself afloat with selling stuff through adobe.com/journeyed/cdw/staples, but searching the App Store through functionality puts developers on much more even levels for those that would be affected by the sandboxing and not having a legal team at their disposal to go RIAA on their posteriors.
Apple hinted to sandboxing being mandatory at WWDC11, they announced it would happen later that year, then forced everyone to a few months ago. So, where does this "new" come from exactly?
What I've seen is that many apps are starting to have 2 versions:
a) The internet version
-- designed the way the developer wants
-- paid upgrades
-- weak or weaker tie to iOS version
b) The app store version
-- designed the way Apple wants
-- free upgrades (or rarely 100% rebuy upgrades)
-- strong tie to the iOS version via. iCloud
That's a really interesting choice. So far I've always gone for the internet version because the app store worries me. I like the idea of iCloud integration, but most of what I want I could get though dropbox and sym/hard links. I could get the update management the more traditions way (http://www.macupdate.com/desktop/) but frankly all the apps check by themselves at this point mostly.
But I don't know the App store is "in trouble". I think there is likely to be a fork in what you get where. The App store might have lots of inexpensive simple applications, free demos, desktop support for phone apps and other apps that are single purpose while the retail side focus on the $20 on up apps which are more versatile. I don't think it is good that the market is forking creating two software ecosystems with different tastes.
I love that people on here bitch endlessly about how insecure OSes are. Then Apple makes a move to require devs to code in a more secure manner, result? They freak out. Did I miss anything?
"There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed H
Problem is, I read the linked post and can't tell if he's right or wrong. He refers to developers leaving, he refers to customers being burnt, he refers to sandboxing exclusions... but he doesn't give a single example to illustrate his point!
So what exactly are you talking about, Marco Arment?
#DeleteChrome
Will iTunes run in the "sandbox"? QuickTime? Safari? Keynote? Numbers? FinalCut "Pro"?
As a newcomer to the Mac, I was not at all interested in the App Store. Maybe I'm too cynical, but goddamn it, I'm proven right too often to change my ways. The App Store does not solve any existing problems for me, as a user. If I can find some app in their, then I could have Googled for the author's web site just as easily. I actually prefer apps that self-update, rather than having to open the inflexible App Store client. I don't need a 3rd party getting between me and the developer, isn't that the whole point of a global network ? We don't need no stinkin' middlemen!
Another peeve is how their delivery method makes it difficult to back up the installation files. I don't want to redownload the dumb thing every time I set up a test box, or follow their annual OS upgrades (from scratch - fuck inline updates!) For regular users, I'm sure the experience is seamless, but as soon as you start messing in a terminal, the messy parts become painfully apparent. It's kind of like that last bit in Portal, where you break out of the test area and run around the broken-down maintenance hallways.
It's a fine model for the iPhone/iPad, but desktop/laptop computers have a long legacy that predates this sort of integration and far greater diversity in how people use them. Tell me how to use my computer and I'll tell your company to go fuck itself.
-Billco, Fnarg.com
Right now the Mac app store makes no distinction between system/developer utilities and regular consumer applications. As a result, the list of available entitlements are too narrow. Regular users are baffled by the file system and getting it out of their faces is a great idea. Locking down apps is also good from a security perspective for most apps and users.
Apple just needs to make a special more rigorous review process for these sorts of apps and only allow those apps to request admin access or touch the file system outside the sandbox. In fact only the Developer and Utility categories need allow this sort of thing.
On a related note, Apple needs something like Windows' contracts so apps can specify the types of data they can provide or accept and let the system manage the interaction. This gives a safe clean way for apps to share data... The primary drawback of Apple's current "share nothing" model.
Natural != (nontoxic || beneficial)
Who needs evidence? Apple is "in Trouble". Because someone has a complaint. No one ever had a complaint before. Ever.
And it missed a line:
"Disclaimer: Marco Arment, the creator of Instapaper, is likely more than a bit disgruntled with Apple, now that the functionality of Instapaper has been rolled into Safari."
Apple has a history of driving away developers by incorporating their ideas into the bundled apps. Not many developers though... only those of really well thought out OS enhancements.
While Marco does have a point, the timing of the statement smacks more than a bit of sour grapes. As a developer, he's known the sandboxing exemptions were temporary for, well at least a year. He's had more than a month since the sandbox closed its lid. I think he'll find that anyone developing heavyweight applications never even entered the App Store; they're still going strong on their own. The App store does great things for apps that are happy to live within the sandbox though; lightweight apps that have nothing to do with managing the computer but instead accomplish specific tasks.
What Marco will find is that for every serious application developer leaving the Mac App Store, there are 50 App developers moving in -- some of them migrants from the iOS App Store, who are just adding a secondary target to their development builds.
In my opinion, the App Store was never the place for non-sandobxed software in the first place. In time, Apple may create more sandbox features that will enable more heavy applications to re-enter the Store, but this will only be after the honeymoon period is over with the "App" crowd -- expect another year of shakedown before anyone doing complex OS tasks can "trust" the store.
Kudos to Apple though for starting in restricted mode and slowly enabling more features -- and at the same time having a blanket exemption period for more serious developers to play with the store and see if it's right for them.
If you go back to the article Ament links to, their complaints are:
None of these, save the last one, have anything to do with sandboxing. The last one does, but I don't understand it, because access to the user's calendar and photos are explicitly-defined entitlements that you can access, all you have to do is check a box in Xcode. A sandboxed app cannot access the filesystem of the computer, except for paths specifically named by the user in an Open or Save dialogue (the dialogue boxes are run by a separate daemon that passes the paths to the client application over IPC, so you can't futz with it to pick open more of the user's fs than they specifically let the application see.) Obviously this is deadly to bulk renamers, but I don't understand the complaint in the context of document creation, utilities or accessories, games, or really anything but document indexers -- which would have to just be sold the old fashioned way, on a website.
Don't blame me, I voted for Baltar.
Valve will be fine. They'll just have competition.
Did anyone ever believe that Valve would never face any challenges from competitors? As long as they keep delivering value, they'll continue to do well.
The notion that success can only mean you are #1 in your sector is one of the things that's hurting business in what passes for capitalism in the 21st century. Like an old commercial used to say, number 2 has to try harder, and even though most corporations don't like it, "trying hard" is supposed to be part of the deal. We've had too many corporations who have believed "trying hard" means killing all your competition via the legal system instead of the marketplace.
You are welcome on my lawn.
I suspect people reading here dont' have a clue about sandboxing or what a BFD it is. Sandboxing is massively overdue. It's been available for years and years in OSX but there has been a zero adoption rate. I came across it in Xgrid, an apple application which relied heavily on it.
Xgrid is a job server that lets other people run jobs on your computer---safely. How the heck do you do that safely and still have left an environment that can do anything at all. You can't do this with linux permissions or firewalls. But you can with sandboxing. in sandboxing you specify in detail what resources every application has access to. What parts of the file system it can't see even if it has unix permissions. What parts of a network it can access. How much memory it can use. etc... It's a universal wrapper that can be created for every program.
Since firefox can be wrapped it's insane to use any browser without wrapping. If some roque plug in contains the ability to do something nasty you dont' care because it can't. it can't access resources it needs. You are essentially shutting down bad behaviour not bad apps.
So why is it not default?
Cause it's annoying to set up. If you take shortcuts in your application based on giving it more privledges than it needs you get punished by the sandbox.
lazy developers hate it.
time to force the issue. it's good for consumers.
It doesn't do anything for apple, other than make the OS better.
Some drink at the fountain of knowledge. Others just gargle.