https://hackaday.com/2025/10/22/what-happened-to-running-what-you-wanted-on-your-own-machine/
https://archive.ph/6i4vr
When the microcomputer first landed in homes some forty years ago, it came with a simple freedom—you could run whatever software you could get your hands on. Floppy disk from a friend? Pop it in. Shareware demo downloaded from a BBS? Go ahead! Dodgy code you wrote yourself at 2 AM? Absolutely. The computer you bought was yours. It would run whatever you told it to run, and ask no questions.
Today, that freedom is dying. What's worse, is it's happening so gradually that most people haven't noticed we're already halfway into the coffin.
The latest broadside fired in the war against platform freedom has been fired. Google recently announced new upcoming restrictions on APK installations. Starting in 2026, Google will tightening the screws on sideloading, making it increasingly difficult to install applications that haven't been blessed by the Play Store's approval process. It's being sold as a security measure, but it will make it far more difficult for users to run apps outside the official ecosystem. There is a security argument to be made, of course, because suspect code can cause all kinds of havoc on a device loaded with a user's personal data. At the same time, security concerns have a funny way of aligning perfectly with ulterior corporate motives.
[...] The walled garden concept didn't start with smartphones. Indeed, video game consoles were a bit of a trailblazer in this space, with manufacturers taking this approach decades ago. The moment gaming became genuinely profitable, console manufacturers realized they could control their entire ecosystem. Proprietary formats, region systems, and lockout chips were all valid ways to ensure companies could levy hefty licensing fees from developers. They locked down their hardware tighter than a bank vault, and they did it for one simple reason—money. As long as the manufacturer could ensure the console wouldn't run unapproved games, developers would have to give them a kickback for every unit sold.
[...] Then came the iPhone, and with it, the App Store. Apple took the locked-down model and applied it to a computer you carry in your pocket. The promise was that you'd only get apps that were approved by Apple, with the implicit guarantee of a certain level of quality and functionality.
[...] Apple sold the walled garden as a feature. It wasn't ashamed or hiding the fact—it was proud of it. It promised apps with no viruses and no risks; a place where everything was curated and safe. The iPhone's locked-down nature wasn't a restriction; it was a selling point.
But it also meant Apple controlled everything. Every app paid Apple's tax, and every update needed Apple's permission. You couldn't run software Apple didn't approve, full stop. You might have paid for the device in your pocket, but you had no right to run what you wanted on it. Someone in Cupertino had the final say over that, not you.
When Android arrived on the scene, it offered the complete opposite concept to Apple's control. It was open source, and based on Linux. You could load your own apps, install your own ROMs and even get root access to your device if you wanted. For a certain kind of user, that was appealing. Android would still offer an application catalogue of its own, curated by Google, but there was nothing stopping you just downloading other apps off the web, or running your own code.
Sadly, over the years, Android has been steadily walking back that openness. The justifications are always reasonable on their face. Security updates need to be mandatory because users are terrible at remembering to update. Sideloading apps need to come with warnings because users will absolutely install malware if you let them just click a button. Root access is too dangerous because it puts the security of the whole system and other apps at risk. But inch by inch, it gets harder to run what you want on the device you paid for.
[...] Microsoft hasn't pulled the trigger on fully locking down Windows. It's flirted with the idea, but has seen little success. Windows RT and Windows 10 S were both locked to only run software signed by Microsoft—each found few takers. Desktop Windows remains stubbornly open, capable of running whatever executable you throw at it, even if it throws up a few more dialog boxes and question marks with every installer you run these days.
[...] Here's what bothers me most: we're losing the idea that you can just try things with computers. That you can experiment. That you can learn by doing. That you can take a risk on some weird little program someone made in their spare time. All that goes away with the walled garden. Your neighbour can't just whip up some fun gadget and share it with you without signing up for an SDK and paying developer fees. Your obscure game community can't just write mods and share content because everything's locked down. So much creativity gets squashed before it even hits the drawing board because it's just not feasible to do it.
It's hard to know how to fight this battle. So much ground has been lost already, and big companies are reluctant to listen to the esoteric wishers of the hackers and makers that actually care about the freedom to squirt whatever through their own CPUs. Ultimately, though, you can still vote with your wallet. Don't let Personal Computing become Consumer Computing, where you're only allowed to run code that paid the corporate toll. Make sure the computers you're paying for are doing what you want, not just what the executives approved of for their own gain. It's your computer, it should run what you want it to!
(Score: 5, Insightful) by SomeGuy on Thursday November 06, @01:11PM (5 children)
First, just to mention, Steve Jobs would have loved to have had the original Macintosh as locked down as the iPhone. They kept tight control over the hardware, yet those "evil" third parties were de-soldering RAM, piggybacking devices on the CPU, stuffing motherboards in larger cases, and so on.
The entire idea of personal computing was to run whatever software you wanted on whatever data you wanted, under your own personal control. No expensive mainframe time, your data was not being pawed over, and it wouldn't float away eventually as if in some magical "cloud".
At the dawn of personal computing, hobbyists were hunting down inexpensive scrap parts to build their own machines. It was the stuff of science fiction coming true.
But everyone has pissed all over personal computing. Only running what Microsoft approves is only a step away. And don't talk about running Linux, MICROSOFT CONTROLS THE SECUREBOOT KEYS. There are already machines that won't boot anything other than Windows. Don't even get me started on toy cell phones.
But now with magical "AI", it watches everything you do. They don't need to lock things down. Forget about looking at naughty pictures or using a computer for secure banking. Even mutter a politically incorrect comment in earshot of the machines microphone and it might tattle on you (which will, for now, will result in corrective advertising at you). There used to be a day when spying on users would have been outright illegal.
Modern devices (they are not "computers' any more) are there to do what the big corps want, not what you want. Mine you for personal data, make you spend more money, and so on,
And somehow every idiot is ok with all of this. I hate this planet.
(Score: 2) by turgid on Thursday November 06, @01:29PM (3 children)
Turn off secure boot? It's only really there to stop corporate drones frobbing with their PeeCees and to stop Windows malware intercepting the boot loader.
I refuse to engage in a battle of wits with an unarmed opponent [wikipedia.org].
(Score: 2) by RamiK on Thursday November 06, @03:00PM (2 children)
https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-uefi-bootkit-linux/ [welivesecurity.com]
compiling...
(Score: 2) by turgid on Thursday November 06, @08:41PM (1 child)
So it has to be installed on your machine (presumably as root) and then the machine rebooted. It hijacks GRUB, so it will need to be run as root to be installed. Interesting.
I refuse to engage in a battle of wits with an unarmed opponent [wikipedia.org].
(Score: 3, Insightful) by RamiK on Friday November 07, @11:35AM
It's just a proof-of-concept but yeah. In real life it will be combined with some root escalation or along a vm / browser sandbox escape hatch. With physical access, you'd probably be better off clamping the eeprom to read the uefi password, appending a self-signed mok through the now accessible UEFI menu and shimming the bootloader by directly writing to the EFI partition so that by the time we chain into linux, we have a hypervisor around the kernel that can let us deploy compromised modules. Though, if you want to just liberate locked down hardware, simply adding your mok and preparing signed boot media to install your custom linux build makes more sense.
compiling...
(Score: 5, Insightful) by Username on Thursday November 06, @02:46PM
PC was freedom from the terminal/mainframe setups. Now we're going back to terminal/mainframe, where you need to share time/resources on some server just to create a word document or spreadsheet. It's dumb. Eventually someone will reinvent the pc and we will relive the initial mainframe to pc movement, or cloud to home, or some new lingo that will come out in 15 years.