Remix.run Logo
▲ throw0101a a day ago

> The fact so many technical people believe that security and freedom are mutually exclusive, and pay for that lie, is proof the Apple propaganda is working exactly as intended.

My Aunt Millie's iPhone is secure against herself because she can't install random garbage off the Internet and is in a walled garden.

As someone who works in IT: users are often their (and their organization's) own worst enemy. We've tried training and blacklisting (with anti-virus) for decades, and it appears that whitelisting and locking things down is what actually works.

I'd be happy with a 'compromise' where there's a factory reset where you can install your own code but it blows an e-fuse to indicate that device is no longer 'OEM certified secure' state.

▲lrvick 16 hours ago | parent | next [-]

Chromebooks had a screw you could remove on the motheboard to fully unlock them to do whatever you want. Something no one would do by accident. This was a reasonable solution from the less-evil Google days.

▲a022311 a day ago | parent | prev | next [-]

> I'd be happy with a 'compromise' where there's a factory reset where you can install your own code but it blows an e-fuse to indicate that device is no longer 'OEM certified secure' state.

You just described what Samsung does with their phones. You can unlock them, but even if you later switch back to the normal OS, some features are permanently disabled by that fuse.

▲devsda 19 hours ago | parent [-]

IIRC, Samsung OneUI updates for the past one year have been removing the unlock option even from the devices that supported it.

▲wildzzz 17 hours ago | parent | prev | next [-]

I've seen malware popups that give detailed steps on how to install the app on Android. You can put up all the scary warnings you want but if someone really wants to install some scam app, they will click past everything.

I really wish we could have a simple "don't bother me, I know what I'm doing" switch on these phones but I can certainly understand the reasons why Apple and Google are putting in as many roadblocks as possible to protect users from themselves.

▲999900000999 17 hours ago | parent [-]

Which is why Google is getting ready to lock down Android.

I wouldn’t mind phones having “Adult” mode that intentionally fails secure net and is completely split off from the standard user space. In adult mode I install what I want.

▲illiac786 8 hours ago | parent | prev | next [-]

Maybe we should be specific when we mean “secure”. What you mean is like “secure MDM”, when the adversary is the user. The parent meant “secure against external adversaries”.

▲devsda 19 hours ago | parent | prev | next [-]

Lumping consumer devices with the need for secure business devices and often offloading that to personal devices is the problem.

I wish they stop finding ways to lock down the device in the name of security and/or release different SKUs for the more secure use cases, provided by the organizations themselves if they deem it necessary.

▲tclancy 18 hours ago | parent [-]

Calling a phone a simple “consumer device” is a lot of hand waving. It’s my bank account, my access to a number of services, an identity provider, etc. I don’t trust myself to secure an open phone and I do this kind of thing for a living. It’s the asymmetric problem: I need to be right 24/7 forever, a bad actor only needs me to slip up once.

▲devsda 7 hours ago | parent | next [-]

The need for you to do banking, and employees do MFA on a phone and thinking that doing requires a secure and closed phone is again a spillover of offloading costs to users.

We did have hardware tokens for corporate logins and banking needs.

There is no real reason why an open phone cannot be secure for sensitive applications.

▲lrvick 16 hours ago | parent | prev [-]

I do not even own a cell phone and have not for approaching a decade. I live a modern life as a founder and tech worker.

I have a house full of servers and self host virtually my entire digital life and even my own usage of AI, but when I leave home I typically carry no electronics at all.

We convince ourselves we need phones, but I promise you, they are optional. Being offline a few hours a day is also good for your brain.

▲throw0101a 9 hours ago | parent | next [-]

> We convince ourselves we need phones, but I promise you, they are optional.

Many people's employer's use of MFA (including my own) says otherwise.

For many people ensuring their spouse and/or their children's school be able to reach them for emergencies and sudden matters says otherwise. Or an elderly parent (e.g., location tracking).

▲lrvick 7 hours ago | parent [-]

> Many people's employer's use of MFA (including my own) says otherwise

yubikey/nitrokey. Much more secure by a mile and works when your phone battery is dead. I switched multiple past employers from apps to these, joining as an SWE.

> tracking elderly parent (e.g., location tracking)

meshtastic asset tracking tag which will work even in emergencies when cell towers are down.

> children's school be able to reach them for emergencies

call-to-one-way-pager bridge, or voip-to-meshtastic bridge. Cheap to free solutions that will also work when cell towers are down.

Hit me with more perceived blockers if you are actually interested. Give me your gotchas. I have probably heard it all and am passionate about engaging people on this topic.

My wife and I have lived without a cell phone subscription for going on a decade and live a modern life as silicon valley tech workers.

Most have the choice to enjoy mostly the same lifestyle they have today, without Apple or Google or proprietary software or cell phones or even debit cards. There are reliable solutions for everything outside of the US surveillance capitalism bubble for those that actually want them.

Exiting surveillance capitalism is possible without major lifestyle changes.

Read Digital Vegan by Andy Farnell.

▲jen20 6 hours ago | parent [-]

> Exiting surveillance capitalism is possible without major lifestyle changes.

It really isn't - credit rating agencies are the most egregious examples by far, and next to impossible to opt out of.

▲tclancy 10 hours ago | parent | prev [-]

Not everyone’s life is your life. Not everyone living not your life is doing it wrong.

▲devsda 7 hours ago | parent [-]

> I don’t trust myself to secure an open phone and I do this kind of thing for a living

> Not everyone’s life is your life. Not everyone living not your life is doing it wrong.

The irony.

▲jeroenhd 18 hours ago | parent | prev [-]

It's true! The EU forced Apple to make it so you can install apps from third parties and every day iPhones are found haunted by malware! That's why root exploits only exist in Europe!

Well, except that one-click PDF persistent root exploit American researchers found, and there not being any sort of iOS malware wave in the EU.