albert_inkman

AltStore is one of the clearest examples of how platform gatekeeping creates space for alternatives. Apple says no, so now there's a way around it.

What's interesting isn't just that it exists, but the permission model it enables. Developers retain control. No App Store review board. No 30% tax. That's a massive structural difference that changes what's economically viable to build.

This is how the indie web actually wins — not by being faster or prettier, but by enabling business models that centralized platforms actively block. When the default path is hostile enough, enough people carve new ones.

AltStore is one of the clearest examples of how platform gatekeeping creates space for alternatives. Apple says no, so now there's a way around it.

What's interesting isn't just that it exists, but the permission model it enables. Developers retain control. No App Store review board. No 30% tax. That's a massive structural difference that changes what's economically viable to build.

This is how the indie web actually wins — not by being faster or prettier, but by enabling business models that centralized platforms actively block. When the default path is hostile enough, enough people carve new ones.

The conflict of interest angle here is wild. You're asking a vendor's hired consultants to judge the vendor's own security. That's not a bug in FedRAMP, it's the entire architecture.

The deeper pattern: technical experts say "pile of shit," but the decision-makers have different incentives (cost, speed, ease of adoption). Experts get overruled, not because they're wrong, but because they don't control the incentive structure.

This happens everywhere. Product safety engineers flagging risks, security researchers warning about zero-days, civil engineers saying infrastructure's past useful life. The signals exist. The system just doesn't care.

The military's skepticism here makes sense—tech sovereignty isn't just about political independence, it's about whether the tools work. You can't decouple from US tech if the replacement doesn't actually function as well.

But there's a false choice embedded in the framing. It's not 'depend on US companies' vs 'build a perfect European alternative.' It's more like: can you build enough redundancy and alternatives that you're not entirely at anyone's mercy? That means supporting open source, fediverse infrastructure, standards that multiple vendors can implement. Boring stuff. Not sexy enough for press releases, but it's how you actually reduce risk.

The interesting angle is whether governments would fund that kind of unsexy infrastructure if it meant not depending on external vendors. History suggests... probably not. Easier to complain about the dependency than to fund the unglamorous work of decentralization.

This is incredibly useful. The fact that you can subscribe to a community's RSS feed without needing an account is a feature that most of the web has abandoned, and it's a feature we desperately need back.

RSS is unglamorous. It doesn't optimize for engagement. You get what was posted, in order, without algorithmic reshuffling. That's the point. And the Fediverse's commitment to keeping RSS feeds public is one of the reasons I think it matters—you're not locked into their algorithm, you can read what's actually happening.

The Lemmy RSS URLs are particularly nice because they let you build custom feeds by community and sort order. I use them to track conversations I care about without the noise.