<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Perpetual Student &#187; package management</title>
	<atom:link href="http://perpetualstudent.net/blog/tag/package-management/feed/" rel="self" type="application/rss+xml" />
	<link>http://perpetualstudent.net/blog</link>
	<description>Just another student of the web</description>
	<lastBuildDate>Fri, 20 Jan 2012 03:20:07 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Would you buy a locked down laptop?</title>
		<link>http://perpetualstudent.net/blog/2010/04/03/apple-locked-down-lapto/</link>
		<comments>http://perpetualstudent.net/blog/2010/04/03/apple-locked-down-lapto/#comments</comments>
		<pubDate>Sat, 03 Apr 2010 18:30:26 +0000</pubDate>
		<dc:creator>Michael Thaler</dc:creator>
				<category><![CDATA[Essays]]></category>
		<category><![CDATA[Recent Events]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[future]]></category>
		<category><![CDATA[ipad]]></category>
		<category><![CDATA[money]]></category>
		<category><![CDATA[new products]]></category>
		<category><![CDATA[package management]]></category>

		<guid isPermaLink="false">http://perpetualstudent.net/blog/?p=126</guid>
		<description><![CDATA[If Apple releases a fully-fledged laptop that you could only install software on through their channels, would people buy it? I think they would. And that scares me.]]></description>
			<content:encoded><![CDATA[<p>Let&#8217;s talk hypotheticals for a moment.</p>
<p>Can you imagine a scenario where Apple releases a fully-fledged laptop locked down like the iPhone or iPad? A fully fledged computer on which the only way to install software is through Apple&#8217;s built in App Store?</p>
<p>To borrow an overused phrase, it&#8217;s more likely than you think.</p>
<p>Would you buy it? Would other people buy it?</p>
<h2>Package management can be awesome</h2>
<p>I&#8217;ve <a href="http://perpetualstudent.net/blog/2009/11/25/package-management-is-great-when-done-right/">written about package management before</a>. I believe that locking down a package manager such that the user can&#8217;t change the available software channels is unethical and flies in the face of years of innovation. We&#8217;ve always treated computers as though they were owned by their users, and I see the popularization of devices like the iPhone and iPad as a disturbing precedent. Might Apple be emboldened to try locking down full computers the same way?</p>
<p>We live in an age in which the technology is powerful enough to implement such a thing. Apple is certainly capable of running the servers necessary for supplying its users with all their software, and it would certainly be lucrative, given how successful the iPhone&#8217;s app store is and how much 3rd party pay software exists for Macs right now (which Apple would then be able to take a cut of the profits on). There is thus a clear financial incentive for Apple to set up such a system, and for developers to continue to target it (and submit to their <a href="http://www.eff.org/deeplinks/2010/03/iphone-developer-program-license-agreement-all" target="_blank">harsh developer restrictions</a>).</p>
<p>And let&#8217;s face it: such a system would be <em>amazing</em> for users who don&#8217;t care. They would enjoy Apple&#8217;s rigorous testing process for <em>all</em> their software, and thus enjoy machines that almost never become bogged down by slow or unstable apps. They&#8217;d have an easy way of finding and installing all the software they could ever want&#8211;even simpler than what they currently have on Macs, and that&#8217;s saying something&#8211;along with Apple&#8217;s approval of all of it, which carries all the quality control that their name has become synonymous with.</p>
<p>I can imagine other possible models. Maybe they&#8217;d offer people &#8220;simple&#8221; or &#8220;advanced&#8221; options when purchasing computers, the former being cheaper and locked down for the &#8220;I really don&#8217;t know how to use computers&#8221; crowd. Such a thing doesn&#8217;t seem like them though, given how well they&#8217;ve avoided fragmenting their product ecosystem. Or perhaps they&#8217;d simply release their own blessed way to jailbreak the system if a user cares enough.</p>
<h2>Right, jailbreaking! Can&#8217;t you just jailbreak it?</h2>
<p>A cursory glance at the history of the iPhone would make one all but certain that if Apple released such a system without offering a way to unlock it, their users would find a way (as they will undoubtedly with the iPad).</p>
<p>I find this scenario similarly unpleasant, for two reasons. One is that if your enjoyment of a machine depends on an unauthorized hack, you are entirely dependent on those hackers to <em>keep</em> it jailbroken the next time Apple pushes out a system update that invariably locks you down again&#8211;the ease of which is never a certainty. It&#8217;s a cat-and-mouse game that some users appear more than happy to play, but in the long run it definitely doesn&#8217;t seem worth the effort to me.</p>
<p>The other is that you&#8217;re ignoring the device&#8217;s biggest selling point. If a device is locked down, it&#8217;s locked down as a genuine means of quality control, which Apple has shown itself to be superb at. To my mind, jailbreaking an Apple device invalidates everything good about it&#8211;Apple&#8217;s assurance that you&#8217;re getting the best you can get.</p>
<p>This argument may seem self-contradictory&#8211;suddenly a device being locked down is a <em>good thing</em>? It&#8217;s important to remember that the reasons for locking down a device in the first place are, in order:
<ol>
<li>Making a cut off of lucrative third-party software sales.</li>
<li>Making sure that 3rd-party software enriches the platform rather than makes it look bad.</li>
<li>Making the system easy to use.</li>
<li>Making the system stable, secure and fast.</li>
</ol>
<p>For most users, a locked down system is protection from systems they don&#8217;t care about knowing how to use, and from software that might harm their systems. To users who care about customization, it&#8217;s a heavy-handed restriction on something they want to use that just gets in their way. Users in the former category genuinely benefit from a locked down system, and users in the latter category don&#8217;t.</p>
<h2>So how likely is it?</h2>
<p>I&#8217;ve always felt that Apple&#8217;s primary market is the former category, and that&#8217;s why I think this scenario is so likely. It worries me, because I&#8217;ve always clung to the idealistic notion that someone who uses a computer has a responsibility to know how to make changes to how it functions. An Apple user might counter that all Apple&#8217;s lockdowns do is simplify the method for those changes so more people have access to them. I would counter that such a thing is worthless if more fine-grained customizability is lost in the process.</p>
<p>But then, I suppose that&#8217;s why I&#8217;m an <a href="http://ubuntu.com" target="_blank">Ubuntu</a> user. I <em>have</em> the tools I need to change where my software is coming from, and I use them. I just wish more people noticed or cared.</p>
]]></content:encoded>
			<wfw:commentRss>http://perpetualstudent.net/blog/2010/04/03/apple-locked-down-lapto/feed/</wfw:commentRss>
		<slash:comments>9</slash:comments>
		</item>
		<item>
		<title>Malware discovered on gnome-look.org</title>
		<link>http://perpetualstudent.net/blog/2009/12/09/malware-discovered-on-gnome-look-org/</link>
		<comments>http://perpetualstudent.net/blog/2009/12/09/malware-discovered-on-gnome-look-org/#comments</comments>
		<pubDate>Thu, 10 Dec 2009 00:15:32 +0000</pubDate>
		<dc:creator>Michael Thaler</dc:creator>
				<category><![CDATA[Recent Events]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[package management]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://perpetualstudent.net/blog/?p=75</guid>
		<description><![CDATA[A Linux user who joyfully installs every package offered is really in no safer a position than... well, the majority of Windows users.]]></description>
			<content:encoded><![CDATA[<p>In a sobering reminder to the Linux world that they aren&#8217;t as perfectly secure as they often think they are, <a href="http://www.omgubuntu.co.uk/2009/12/malware-found-in-screensaver-for-ubuntu.html" target="_blank">malware has been discovered in theme packages on gnome-look.org</a>, a repository for users to distribute display themes and other elements for customizing the appearance of many Linux-based OS installations.</p>
<p>No matter how secure your system is, there&#8217;s never a replacement for a well-educated user who knows to at least be wary of untrusted software packages. While a smart security framework can make a user pause before making a mistake, it&#8217;s ultimately still at the user&#8217;s mercy. (Though having such a system in place is certainly much better than not having one, or providing a <a href="http://blogs.zdnet.com/security/?p=4825&#038;tag=nl.e550" target="_blank">false sense of security</a>.) A Linux user who joyfully installs every package offered is really in no safer a position than&#8230; well, the majority of Windows users.</p>
]]></content:encoded>
			<wfw:commentRss>http://perpetualstudent.net/blog/2009/12/09/malware-discovered-on-gnome-look-org/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Package Management is Great, but Only when Done Right</title>
		<link>http://perpetualstudent.net/blog/2009/11/25/package-management-is-great-when-done-right/</link>
		<comments>http://perpetualstudent.net/blog/2009/11/25/package-management-is-great-when-done-right/#comments</comments>
		<pubDate>Wed, 25 Nov 2009 15:10:50 +0000</pubDate>
		<dc:creator>Michael Thaler</dc:creator>
				<category><![CDATA[Essays]]></category>
		<category><![CDATA[apple]]></category>
		<category><![CDATA[ethics]]></category>
		<category><![CDATA[iconoclasm]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[mobile]]></category>
		<category><![CDATA[package management]]></category>
		<category><![CDATA[platform]]></category>
		<category><![CDATA[ubuntu]]></category>

		<guid isPermaLink="false">http://perpetualstudent.net/blog/?p=59</guid>
		<description><![CDATA[Annoyed about Apple's horribly broken app store review process? I have news for you: you're getting what you deserve, and you can do better.]]></description>
			<content:encoded><![CDATA[<p>The iPhone App Store is, at heart, a package manager&#8211;not unlike the package managers that have been used for years in the Linux world. It provides a catalog of software that users can rummage through, finding applications that look shiny and easily installing them through an automated process that requires no user input between when the user hits the install button and when the icon appears on the applications menu. It&#8217;s a great system&#8211;it makes software browsing fun and easy, and it allows the distributor and developers to even charge money for their work, injecting revenue and ensuring a healthy ecosystem.</p>
<p>Except in this case it clearly isn&#8217;t healthy. The App Store has attracted quite a bit of negative press in recent months for its seemingly <a href="http://www.engadget.com/2009/08/06/phil-schiller-says-apple-didnt-censor-a-dictionary/" target="_blank" rel="nofollow">arbitrary</a>, <a href="http://www.engadget.com/2009/03/10/apple-stupidly-rejects-tweetie-1-3-for-foul-language-in-twitter/" rel='nofollow' target="_blank">bizarre</a>, <a href="http://www.osnews.com/story/21931/FCC_Investigates_App_Store_Policies_Google_Voice_Rejection" rel="nofollow" target="_blank">anticompetitive</a> and possibly even <a href="http://lambdajive.wordpress.com/2009/09/26/isinglepayer-iphone-app-censored-by-apple/" rel='nofollow' target="_blank">politically motivated</a> submission rejections.</p>
<p>These rejections represent a fatal flaw of the system that dooms it to <strong>always being a subpar and unethically managed package manager</strong>.</p>
<p>Let&#8217;s step back.</p>
<p>For years in the Linux world, we&#8217;ve relied on package management to handle software installation and removal. We install our OS as a distribution from some sort of organization, which could be an actual <a href="http://www.redhat.com/" rel="nofollow" target="_blank">company that</a> <a href="http://canonical.com" rel="nofollow" target="_blank">makes money</a> or just a <a href="http://www.gentoo.org/" rel="nofollow" target="_blank">hacker releasing software</a> <a href="http://www.debian.org/" rel="nofollow" target="_blank">in their spare time</a>. The important thing about installing software in Linux is that without some form of automation, it&#8217;s a pain&#8211;you would have to compile your software yourself after looking up all of its dependencies, a time-consuming process that really doesn&#8217;t make sampling software easy or fun.</p>
<p>So, to ease that process, the distributor of the OS runs servers that your machine can download software from, automatically handling dependencies and keeping track of what&#8217;s installed where on your system and what software uses what assets. Package management has only improved over the years, as software libraries expanded and user demand grew. Today, it couldn&#8217;t be easier to install a program in Ubuntu; all you have to do is fire up the <a href='http://en.wikipedia.org/wiki/Ubuntu_Software_Center' rel='nofollow' target="_blank">Ubuntu Software Center</a>, browse, click install, and enter your password.</p>
<p>But package management does have its drawbacks. There&#8217;s a bit of a security risk&#8211;while it&#8217;s pretty easy to use cryptography to reasonably guarantee that no one&#8217;s breaking into the server and sending you malicious software, you can&#8217;t know for certain that the <em>distributor</em> isn&#8217;t doing nasty things (and while I&#8217;m willing to bet there aren&#8217;t many users who audit all the source code of everything they install on their machines, releasing everything as source code still gives you the <em>ability</em> to do so, which there&#8217;s a lot to be said for). But by far the biggest one is that you&#8217;re completely dependent on the distributor for software availability. If something you want isn&#8217;t in there, or if it&#8217;s not up to date enough, there&#8217;s not much you can do besides try to manually install it, which tends to muck things up. </p>
<p>The App Store&#8217;s fatal flaw is <strong>refusing to allow independent distribution channels</strong>. Allowing them instantaneously removes the biggest issue package managers have by freeing developers to distribute their products their own way, instead of having to go through Apple. If such a thing were allowed, Apple could further create incentives for developers to produce software for them by not taking a cut of the profits (or maybe even taking it anyway through licensing agreements), thus enriching the platform. It&#8217;s how Microsoft became successful&#8211;by allowing developers tremendous freedom with their development frameworks and leaving the market open to grow according to demand. It would even force Apple to clean up their own act in order to compete with them (though that can hardly be seen as a good reason from their perspective).</p>
<p>But the iPhone is a very heavily locked down platform, which only ever gained the App Store to quell demand that was being satisfied by jailbreaking, before it became one of Apple&#8217;s main moneymakers when it proved enormously popular and lucrative. It&#8217;s fundamentally changed an industry, and yet it remains a painful symbol of exactly how unfair it is to have a single entity acting as the entire channel through which users can install software. Some users still jailbreak, but others continue to use only what Apple makes available, and that&#8217;s not good for anyone&#8211;not for Apple&#8217;s users, not for developers hoping to make money off of them, and not for Apple&#8217;s reputation.</p>
<p>If I were an iPhone user or programmer, I wouldn&#8217;t be happy. I&#8217;d be demanding that Apple open up the platform immediately to 3rd party <em>distributors</em>, not just developers. That, to me, is a prerequisite for software development. I don&#8217;t want to be at the mercy of a company that gets to decide what software I use on a machine that I purchased&#8211;especially if I hope to make money off of selling software for it. The Linux world figured it out years ago, and there&#8217;s no reason why Apple can&#8217;t. Even other mobile OS developers figured it out&#8211;<a href="http://www.networkworld.com/community/node/33850" target="_blank">Android</a> and <a href="http://www.engadget.com/2009/10/05/palm-throws-the-doors-open-review-free-app-distribution-over-th/" target="_blank">Palm</a> both allow it.</p>
<p>Is it just too lucrative for Apple to give up? Maybe. It&#8217;s still more than enough to dissuade me from ever wanting to touch their development platform. I can do better. And until Apple cleans up their act, so can you.</p>
]]></content:encoded>
			<wfw:commentRss>http://perpetualstudent.net/blog/2009/11/25/package-management-is-great-when-done-right/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

