Comment by danShumway | Hacker News Reader

Comment by danShumway | Hacker News Reader

Parent Full thread

I don't want to derail the overall conversation too much.

I was with Verizon from my first phone until I first got a smartphone. I switched over to Fi specifically because I didn't want to deal with Verizon's billing, and because I didn't like the company in general.

The low-data approach is really attractive to me -- atm I use less than 500mb a month (sometimes as low as 200-300mb). At that level of usage your prices are very competitive with Fi. My concerns are that I'm starting to migrate away from native services where possible because of the security implications -- more of my texting is happening over Signal rather than SMS, and with the Libre phone theoretically some voice is going to start getting routed over Matrix.

I have no idea what that's going to do to my data usage, I honestly just have to experiment and find out.

Additionally, I'm starting to get more serious about using a VPN everywhere, even on mobile data, since I assume that behind Google, whatever network I'm on is absolutely selling any data that hits their towers. That may drive my data usage up, or it might drive it down because I might feel more comfortable connecting to random wifi networks if I know 100% all of my traffic is going through that VPN.

I'm in an urban area, so this is unrelated to me, but the fact that you're selling dumb phones on your plan is also pretty cool, and I can think of people who would be interested in that if Sprint's rural coverage was better.

We'd love to experiment with you on Librem. If you go through crazy spikes of data usage, we could comp them if you helped us characterize and understand the behavior-- and especially the value you hope you procure by way of privacy.

Do you operate your own VPN? Or if not, how do you truly evaluate whether you are solving your problem? What questions would you ask post-Librem and post-VPN adoption whose answers would tell you how close you are to solving your problem?

I consider my IP address to be sensitive information, so I wouldn't host a VPN on my home network, and there are advantages in numbers to using a popular service, since you can blend in at least a tiny bit.

I use a 3rd-party VPN (PIA). This is obviously not perfect privacy, since they could be lying about what data they store. That being said, I'm not trying to hide from a government, I'm trying to hide from advertisers, stalkers, and criminals. So even if I can't personally validate that PIA isn't storing any of my data, having my data accessible to a warrant is still better than having it accessible to hundreds of different sites and companies that I 100% already know I don't trust.

I validate actual implementation security by regularly checking what information shows up in requests when I visit sites. There are a couple of tools that help with that online.

Being strict about what data goes where is part of the reason why my data usage is low. It turns out that if you block network access for most apps on a phone by default, data usage just goes down a lot. Apps like Uber and Lyft make a lot of requests, because they are constantly tracking you, so blocking their network access if you have them installed is just a strict all-around win. Even apps that should be good about this like Google Music will sometimes just randomly decide to download things.

Obviously the librem phone is still kind of up in the air, but my game plan assuming it's not a complete disaster is to migrate over to that and fill in any gaps of functionality by just programming whatever features I need. I dunno how voice calls will work. The idea of switching to something more secure than the existing phone system is attractive, but I mentioned above, I'm not sure what it would do to data usage -- I just don't have any basis to make an educated guess.

In general I want my phone to be a very specialized device -- not a dumb phone, but a phone that only ever does what I tell it to.

So a successful migration for me would look like a company:

- with good coverage

- without any horrible terms like arbitration agreements or stealth charges

- that does not sell data, and that is supportive of low data-usage

- that is at least not actively unethical :)

on a device that:

- gives me root access

- makes calls, texts, and browses the web in a secure way

- that is highly geared towards offline availability and low data-usage

- and that doesn't run extra software or do things behind my back

Librem is my hope for the second part, I guess if it crashes and burns I'll look into custom Android roms. I haven't made a list of carriers yet, but from what you say, it sounds like Community Phone should be high up on that list?

Reply on news.ycombinator.com