Also browsers can use extensions to modify pages, and that opens up SO many possibilities. And bookmarks. And history. And tabs. And search. Most apps never implement any of these, much less all.
I do wish we had a more widely supported system for push notifications though. WebPush exists and broadly works quite well, but provides nowhere near the control, reliability, and observability that native apps do. ...which is a good thing when you don't want them, but crippling when you do, and it contributes to the general "few sites do it at all" problem. E.g. Slack doesn't use it, nor does Zulip (particularly painful because their mobile web UI is much better than their app), nor most chat apps in general even though they're an ideal scenario.
- Write emails to companies that provide desired services that way suggesting they make an actual application.
- Revoke all JS execution permissions from all domains that are not verifiably in control of only the company running that web app.
- Audit your use cases and try to find native applications that can fulfill them instead of web apps.
- Try not to use web apps on domains that you have no control of.
- Treat every domain trying to get you to execute random code like you would receiving a .exe in the email from a similarly unknown person or address.
The idea that most native applications collect more information than web apps is false. It is only true in the very restricted domain of smartphones. It is obvious to everyone in practice and in law that users of smartphones do not own them or control them and will not be allowed to. The problem is the smartphone, not native applications. Giving up even more control and ceding everything to a remote web service, will make this worse, not better.
And yes, copying this article's structure for my response is intentional parody.
Besides, the manifesto style is too off-putting to take this seriously.
That said, all the privacy reasons listed apply just as much to websites as they do apps.
I have to disable noscript a lot when it comes time to fill out what is glorified <input type=“text” /> for a lot of day to day transactions. Especially anything involving a credit card these days.
Fully disagree though
Mobile apps can't run on device startup on iOS. They can't modify or delete device storage outside of your sandbox. Same with Access contacts, call logs, SMS. Contact yes, but you have to give explicit permission and you can't access call logs or SMS.
I just stopped reading this because whoever is writing is overstating their case. Maybe the case is different on Android, but last I saw Android is slowly moving toward the granular permission model that iOS does with their data.
zahrevsky•1h ago
Groxx•44m ago
jeremyjh•41m ago
zahrevsky•22m ago