Remix.run Logo
▲ devsda 19 hours ago

Lumping consumer devices with the need for secure business devices and often offloading that to personal devices is the problem.

I wish they stop finding ways to lock down the device in the name of security and/or release different SKUs for the more secure use cases, provided by the organizations themselves if they deem it necessary.

▲tclancy 18 hours ago | parent [-]

Calling a phone a simple “consumer device” is a lot of hand waving. It’s my bank account, my access to a number of services, an identity provider, etc. I don’t trust myself to secure an open phone and I do this kind of thing for a living. It’s the asymmetric problem: I need to be right 24/7 forever, a bad actor only needs me to slip up once.

▲devsda 7 hours ago | parent | next [-]

The need for you to do banking, and employees do MFA on a phone and thinking that doing requires a secure and closed phone is again a spillover of offloading costs to users.

We did have hardware tokens for corporate logins and banking needs.

There is no real reason why an open phone cannot be secure for sensitive applications.

▲lrvick 16 hours ago | parent | prev [-]

I do not even own a cell phone and have not for approaching a decade. I live a modern life as a founder and tech worker.

I have a house full of servers and self host virtually my entire digital life and even my own usage of AI, but when I leave home I typically carry no electronics at all.

We convince ourselves we need phones, but I promise you, they are optional. Being offline a few hours a day is also good for your brain.

▲throw0101a 9 hours ago | parent | next [-]

> We convince ourselves we need phones, but I promise you, they are optional.

Many people's employer's use of MFA (including my own) says otherwise.

For many people ensuring their spouse and/or their children's school be able to reach them for emergencies and sudden matters says otherwise. Or an elderly parent (e.g., location tracking).

▲lrvick 7 hours ago | parent [-]

> Many people's employer's use of MFA (including my own) says otherwise

yubikey/nitrokey. Much more secure by a mile and works when your phone battery is dead. I switched multiple past employers from apps to these, joining as an SWE.

> tracking elderly parent (e.g., location tracking)

meshtastic asset tracking tag which will work even in emergencies when cell towers are down.

> children's school be able to reach them for emergencies

call-to-one-way-pager bridge, or voip-to-meshtastic bridge. Cheap to free solutions that will also work when cell towers are down.

Hit me with more perceived blockers if you are actually interested. Give me your gotchas. I have probably heard it all and am passionate about engaging people on this topic.

My wife and I have lived without a cell phone subscription for going on a decade and live a modern life as silicon valley tech workers.

Most have the choice to enjoy mostly the same lifestyle they have today, without Apple or Google or proprietary software or cell phones or even debit cards. There are reliable solutions for everything outside of the US surveillance capitalism bubble for those that actually want them.

Exiting surveillance capitalism is possible without major lifestyle changes.

Read Digital Vegan by Andy Farnell.

▲jen20 6 hours ago | parent [-]

> Exiting surveillance capitalism is possible without major lifestyle changes.

It really isn't - credit rating agencies are the most egregious examples by far, and next to impossible to opt out of.

▲tclancy 10 hours ago | parent | prev [-]

Not everyone’s life is your life. Not everyone living not your life is doing it wrong.

▲devsda 7 hours ago | parent [-]

> I don’t trust myself to secure an open phone and I do this kind of thing for a living

> Not everyone’s life is your life. Not everyone living not your life is doing it wrong.

The irony.