I Won't Download Your App. The Web Version Is A-OK

https://www.0xsid.com/blog/wont-download-your-app

No, I Won't Download Your App. The Web Version is A-OK. | Sid's Blog

Web browser is a sandbox by default. Worst a sketchy site does is eat a tab, less if you run an adblocker. Native app? Background processes, hardware ID shenanigans, your contacts, location. The whole buffet.
Using flatpaks or mobile apps, you can view the sandbox permissions and adjust them if you have to.

> your contacts, location. The whole buffet.

It's not like an app is getting those without your knowledge, and many times it's useful for an app to have your contacts or location...

Almost never is it useful for an app to have my contacts or location.

That said only on some platforms is it possible to stop a native app from getting them.

Android and iOS both require user permission for apps to access contacts or location.

Are there other platforms that can't even manage this basic level of user protection?

One of the most enraging things about life since 2005-ish is that no matter how private and careful I am, it doesn't even matter because every other inconsiderate fool I know and interact with will HAPPILY let some random company have access to THEIR contacts--which includes me--in order to play Farmville for a month until they get bored of that and offer up my private information to the next bullshit ad company that asks for their contacts.

It used to frustrate me that people didn't care about their own privacy, because I genuinely didn't want evil people to hurt them. But, it's even more angering that people don't have the common decency to consider whether their friends and family would want them sharing their phone numbers, email addresses, photos of them, etc.

Famously, that's how shadow profiles got created for Facebook and LinkedIn and many others.
I'd argue it's absolutely ludicrous to give _other people's information_ up to an app (or website). Your contacts contain names, phone numbers, potentially photos and addresses of _other people_.

Not without my knowledge or your knowledge sure. But I'd bet there's significant percentage of the population who is tired of thinking about permission popups and just hit yes yes YES to get the App started. Especially if it forces retries before going forward.

I think they're counting on these popups wearing people out.

After GDPR made these incessant annoying cookie popups mandatory, I just robotically click any button to dismiss it as fast as possible. Some website could probably write "Give root access" in that box and I'd probably click it without thinking.

But most of the time it’s really, really not.
Location can also be extracted by JS on a website with these geo functions, IIRC?
Requires permission.
so does an app
Apps have to request your permission for contacts and location. iOS is really good about not giving bad permissions to apps without user being asked for consent.

bias disclosure: i used to do Android dev and kinda hate the browser personally.

i don’t get this take. “Web browser is sandbox by default”. sure, it has to do the rail grind with a rake to access system calls, but in a modern system apps are also sandboxed, especially on a smartphone or when downloaded with a managed app service. the OS gives you the ability to specify permissions, although to what degree depends on your provider. your browser _obviously_ also has the permissions you’re talking about. and now we have introduced yet more vectors in the form of cookies where web _applications_ can track activity _between applications_ with that just kinda being part of the spec, and it totally neuters the protections that the OS gives you because once you configure Firefox to get your location for Open Maps, now you’ve totally given control to your location permissions for _all web apps_ to yet another corporate driven point of failure.

don’t even get me started on the UI mess.

my tinfoil hat theory is that the browser is pushed by mostly bad actors trying to get data, while anyone providing a real user experience has a nice native app.

press F for my reputation.

That's my stance as well. Unless the website is completely broken or the devs force me to download the app by blocking features on the website I prefer the web.

With responsive design becoming mainstream I'm fine with using my browser for 90% of my internet work. In some cases like Google docs it's painful to use the web version so I just use the app.

EDIT: I wish they'd add a console to mobile web browsers though.

> the website is completely broken or the devs force me to download the app by blocking features on the website

for me, this is signal that i wasn't supposed to be visiting that resource in the first place

Yeah, crippling your website in order to force users to download an app that may be able to access for of a user's data, is a clear sign that there are people you don't want to do business with.

There are several sites I use regularly for which I refuse to install the app. There are a lot more sites that I visit only occasionally because someone links to it, and that site immediately wants me to download the app and refuses to show me the content that was linked to. Fuck off with that.

Yep. If someone is trying to make you do something, or stop doing something, or buy something, your first question should always be "Why?".

Why would someone try to force me off of my browser (that has ad-blocking and tracker-blocking mitigations) and on to a locked-down app that may want permission to run in the background, display notifications, access my files or camera, etc?

Maybe it really is to "improve my experience"... yeah, right.

> Unless the website is completely broken or the devs force me to download the app by blocking features

That's already the norm.

As a developer, I resent having to go beg for permission for getting my app published. It just rubs me the wrong way to have to play approval roulette with some bored jerk working for Apple or Google. I've had both reject things that were previously alright, then weren't, and then were again.

I default to building web applications. Actually getting people to install your special app is in any case a race to the bottom. Some will, most won't. It's onboarding friction. If you can shave a few steps of your onboarding process, the chance that somebody comes out the other end is simply higher.

As a user, I rarely install apps to begin with and frankly the appeal of "native" is limited to well guarded APIs into jealously magical device capabilities that phones have that most applications don't actually need. I know how the sausage is made and there just isn't that much there.

> Unless the website is completely broken or the devs force me to download the app by blocking features on the website I prefer the web.

Facebook seems to be in this game. Constant notifications to install the app, and as well increasingly degraded experience in the web version (both desktop and mobile).

often the blocked features are specifically blocked on the mobile web (i.e. on your desktop they won't make you get your phone out to use the app instead), so forcing the webpage to desktop mode helps.

What most people dont get:

Most of folks on HN here are much older than todays "first customers" of 16y/17/18

For them: The "Smartphone is the internet", while for most of us the "Smartphone is an extension of the internet from our desktops" that we were used to (remember the years before dot com bubble, saying: "I will be down in the basement at the computer to surf on the net little bit" ? :-)

But today, the very first touchpoint with "the internet" for younger folks is a smartphone display. The even do homework on this small screens!

Companies are seeing this switch, so they adapt.

Personally, a service which is "only an app" will be not used by me as I prefer to have a larger screen with more information (actually I use my mobile phone only when Im in public transport or similar, at home I have a notebook laying around if I need something)

This. I posted this on my other comment, but there's a meme that "Gen Z Kids Don't Understand How File Systems Work" [0].

There seems to be a disconnect between some developers and the younger folks.

[0] https://news.ycombinator.com/item?id=30253526

Gen Z Kids Don't Understand How File Systems Work | Hacker News

I can say for certain this is true. People my age look at me like I have 3 heads if I ask them to do anything more complex than open a web browser

(17 yo here), I think that I am eternally grateful to my cousins who convinced my parents to give me a desktop computer which is still working right now (it had a minor hiccup in the processor recently but it works), before that, I was having a 1 gb crt monitor win7 on which I somehow ran Vscode smoothly.

I am very frugal (to save money on webcam, in online classes, I had droidcam /wo-mic setup with one of my parents old phones that were so old that online classes couldn't work or were just too slow) but spending money on a decent personal computer is genuinely one of the best investments personally.

One thing my cousins did which I am sorta grateful in retrospect is they didn't buy me a gpu so my computer was really nice/smooth in everything but gaming, I still ran some games like portal series , inscryption and many other games like valorant and it was playing valorant when I started realizing its chinese company roots and kernel level access meaning that there was no proper way to guarantee to have piece of mind unless I reinstall it

So I felt like if I was reinstalling, I was watching some the linux experiments video anyway and was fascinated by linux, so I just decided to choose myself to use nobara-linux for the first time which was another one of the best decisions that I made as it opened me up to the terminal.

> grateful in retrospect is they didn't buy me a gpu

Great sentence! I will apply this to my kids as well, I guess.

I always tell them already: "In the future, you can game as much as you want, IF you learn a good programming language [which will be defined by me]" - let me see how this will work out in 1-2 years :-D

That's not new.

I read a UI book in the early 2000s that cited research showing that most users didn't understand filesystems. They would seem to, but then the idea that the same filename in two places was two unrelated files would just lead to a mental block. Those who got it, didn't find it hard. It's just that some people can't get it.

The disconnect is not between some developers, and the younger folks. It is between some developers, and most of the world.

not even the older generations. My parents save files on the Whatsapp chat, and my father is one who bought the first IBM PC when it came out, so someone who has touched these things for decades (tho very superficially).

I think that the software industry, especially operating systems, have completely failed to provide a balanced product between the overly bloated and messed up (Windows), the overly complicated (Linux) and the overly simplified (Android/iOS).

Maybe some Linux distros are now at the right spot, I was positively surprised by PopOS to give an example, but it's too late. With AI this is only going to get worse.

> My parents save files on the Whatsapp chat

That's becoming dangerously true of my wife and I as well, to be honest.

The friction is just so much lower than Google Drive or whatever. As long as I handle it right away. It's just finding something from more than an hour ago that's intolerable.

I met a business partner who is doing some work for SME retail investors last week for lunch:

He showed me his WhatsApp: People are sending _ALL_ type of critical documents by WhatsApp to him. Everything.
(and bank statements are among the class of "less critical" documents in his case)

My theory here is: "If you have any function in your product, people will use it for anything appropriate to them in a given minute"

I witnessed a cop attempting to manipulate some files I provided to him on a thumb drive. It was a slow laborious process of dragging files one at a time from the Windows image viewer to shared folder. I would have liked to just do a Ctrl-A, Ctrl-C, Ctrl-V, but that was way above his level of thinking and he didn't seem like the type who wanted an education. So I just sat there through the long, painful process--and then at the end he completely screwed up the report. Idiot.

No. There is a disconnect between domain insiders and those that are not. This is not specific to any one domain. It's also not about age.

Some insiders know about this disconnect and fewer still can bridge it easily.

Those that cannot even sense this disconnect, they're a bit of a pain in certain situations. You know, like talking to project stakeholders or customers.

Except pretty much the entire millennial generation knows about computer folders and files, as that was necessary information for graduating school.

This hit the nail on the head.

I find much of the HN community insightful and interesting, but in terms of consumer feedback (especially in a B2C environment) I wouldn't touch feedback here with a 10-foot pole.

I don't mean that to be an insult, quite the opposite. Most people here are power users. But that is a galaxy away from how the average user interacts with the internet.

> that is a galaxy away from how the average user interacts with the internet

Exactly! Esp if you just move away "one tile" from tech/IT or business-power-users, most people are more or less clueless what they are doing/have to do with a computer.

Yes, we are in a bubble here - as with every niche/special interest topic: It would be same for me if I would join a "car tuning event" or similar - Im just a car user, and I do not know of all these details and nuts & bolts

> Exactly! Esp if you just move away "one tile" from tech/IT or business-power-users, most people are more or less clueless what they are doing/have to do with a computer.

I don't think so. A majority don't want to. But they are forced by geeks/nerds. Geeks/nerds often show off especially in family/friends parties with older/common folk - telling - I can do this/that. Then average CEO or parent is forced to get a smartphone.

Next the geek/nerd - has no time to maintain the computer/laptop of the parent. Or loses patience explaining updates/double-click/avoid scammer installing software. Then - boom - geek son/daughter - if smart gets a decent pixel/iphone - otherwise gets a shitty Android device - installs everything there. Moves on.

And finally remember it is the young same geek/nerd that will eventually do programming for FAANG/palantir etc. which forces people to install apps, degrade privacy, worsen webapp/websites - all for money.

Wait, you mean typical consumers _don’t_ want to build my terminal-based TUI app from source?

> Most people here are power users.

As an actual power user, I take exception to this comment.

Most people here are NOT power users. I've lost count of how many arguments I've seen for example where someone Just Can't Believe anyone would have a good reason to have more than 5-10 browser tabs open at a time. Meanwhile I've got a list of thousands and growing.

Or look at the dogged adherence to Windows even to this day after decades of Microsoft abuse, and long spiels about the difficulty and complexity of the Linux command line. Especially when it comes to systemd for example, where one of the most common complaints against sysv is "eww, shell scripts? yuck!"

I don't call these people power users, or recognize them as peers in the realm of technology. The difference between them and me is like the difference between them and the commoner who knows nothing at all about tech.

Maybe we need a geek ranking system or something.

Honest question do you really use all of those tabs? As a small handful of tabs user I use the bookmark feature to hold things I want to keep for later. ctrl-d and it is in the list. Even then 99% of the time I open it again and go 'why did I keep this'. I get it that it is your workflow. Just sort of curious why you would consider that a 'power user' thing? Would not saving them to the bookmark list be more of 'power user' sort of thing to do?

> But today, the very first touchpoint with "the internet" for younger folks is a smartphone display. The even do homework on this small screens!

I saw a tweet recently that perfectly encapsulates this: for most people over 30, certain things are "big screen tasks". I use my phone for a lot, but for some things I put the phone down and use my computer instead. I am most comfortable using a large screen and a keyboard for anything that requires writing more than a few words or using any interface for more than a few clicks.

For example, I read your comment on my phone and went to my computer to type this reply.

I personally find the idea of doing homework on my phone horrifying but I suppose kids today are either used to it and comfortable with it, or they've simply never used a computer and don't know what they're missing. Though I'd wager they probably aren't comfortable typing on a keyboard.

Honestly I think Apple perfectly captured it with their "what's a computer?" ad for the iPad. I seem to remember them getting some flak online for it but I think they were right on the money with regards to the younger generations.

> For example, I read your comment on my phone and went to my computer to type this reply.

Thanks for the honor! :)

Sometimes I even copy links from here and send them by mail to myself so I can reply later - maybe Im getting tooo old? :-D
(on the iPhone I would store it in a simple textnote)

I was somewhat shocked a while back when a coworker told me that they offered their kid a laptop for school work and the kid apparently said : Thanks but I’ll stick with my phone.

> What most people dont get ...

The OP Blog post is comparing web versions vs applications. Both on the phone. And arguing that browser representation is often better than app functionality. Using desktop vs small screen phone is a different matter.

>> The even do homework on this small screens!

My big gorilla hands just shed a tear.

The site that irks me the most here is New York Times. Opening an article in the mobile browser often has a toast over the bottom third of the article to open it in their app for "a better experience". I struggle to think how nytimes isn't a perfect fit for a site over an app. The only frustrating experience I have with the web version that would be better in the app is not seeing that that pop-up.
Also they only have dark mode in the app, even though the app is (or was) clearly not native anyway.
NYT occasionally uses fancy interactive articles. They have games, and other things that are better on the app. The NYT app is actually very good
Every time I end up trying an app for things like this, I end up missing tabs.
There is no reason they can’t have a native tab navigator. It kills me that Google maps app doesn’t have tabs.
I'm a huge supporter of the open web. However this issue was decided 16 year ago. If you recall the first push on smartphones were "web apps". Those sucked. The bottom line is that native apps provide a better user experience and that is why they became prevalent 16 years ago.