Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Do you manage your family's digital safety?

news.ycombinator.com

Post reply on HN
Print view View original

41–50 of 132 posts

Re: Ask HN: Do you manage your family's digital safety?

#41

Post by warent »

rsync wrote: post #37

The number one thing that we do is use an assumed name and address (and phone number) for all online interactions. If it's not a government agency, it doesn't get any real info. So, for instance, Amazon has a made-up name and our PO BOX and our "junk" number from Twilio. As I have mentioned here many, many times: This is possible because VISA/MC do not verify cardholder name. They make it seem like they do and mercha…

Maybe you're a very high profile individual that this matters beyond paranoia? I've always used my name for signups, and I have a very unique name, probably the only one on the whole planet. It has affected my life in no meaningful / noticeably negative way.

Re: Ask HN: Do you manage your family's digital safety?

#43

Post by dervjd »

Entire family is Apple devices, and I actually set up MDM to manage them (ManageEngine's free tier lets you manage 25 devices). WiFi settings, enforced updates, FileVault encryption, etc all managed via MDM policies. Using Cloudflare Gateway (free) for DNS. Sophos XG Home firewall for router/VPN/etc.

I also put a basic 2-bay Synology NAS in the basement, and everyone's laptops are set to back up via Time Machine automatically.

Re: Ask HN: Do you manage your family's digital safety?

#44

Post by dervjd »

lifeisstillgood wrote: post #23

I was literally looking for a MDM family solution - I have looked at Jamf pro etc but frankly it's a lot for family use (it's like 140 per person per year.) There seems like a good OSS project - a bit of WMI a bit of bash - so I am interested if anyone has a idea.

Have a look at ManageEngine MDM. Their free tier is good for up to 25 devices. The interface is a bit weird/confusing at first, but I've been using it for a few years and it seems to work well.

Re: Ask HN: Do you manage your family's digital safety?

#45

Post by dhimes »

orev wrote: post #25
nopcode wrote: post #6

I preconfigure all windows machines in my family, and take away their local admin rights. No crapware installs, no disabling of updates or defender. No microsoft accounts. They get firefox browser with adblocker preinstalled. I manage their important passwords (eg fastmail) and trained them to rely on firefox sync for the recoverable accounts. I use MeshCentral for remote administration (amt)… its amazing for the pri…

You may be surprised to learn that removing admin rights is no longer (and never really did) protect against app installs. Many developers have figured out they can just install into the user’s profile. Only apps that truly need admin rights (that install services, etc.) would be blocked. Everything else is wide open. The admin rights restriction on app installs was almost just a convention that people followed. Now…

Not OP, but I'm surprised. So thank you.

Re: Ask HN: Do you manage your family's digital safety?

#47

Post by beckman466 »

warent wrote: post #41
rsync wrote: post #37

The number one thing that we do is use an assumed name and address (and phone number) for all online interactions. If it's not a government agency, it doesn't get any real info. So, for instance, Amazon has a made-up name and our PO BOX and our "junk" number from Twilio. As I have mentioned here many, many times: This is possible because VISA/MC do not verify cardholder name. They make it seem like they do and mercha…

Maybe you're a very high profile individual that this matters beyond paranoia? I've always used my name for signups, and I have a very unique name, probably the only one on the whole planet. It has affected my life in no meaningful / noticeably negative way.

same.

Re: Ask HN: Do you manage your family's digital safety?

#48

Post by c22 »

vorpalhex wrote: post #26

+ Family 1Password so everyone can securely manage passwords and share logins + Network is covered by pihole (and in exchange, plex/jellyfin/etc access works nicely) + Smart home stuff is managed by me. Everyone has admin rights but shared terminals (eg kitchen panel) are unpriviledged users. + Everyone has a home directory on the homelab they can back up to with as much space as they want (4tb+). I help them set it…

I have a similar setup at my house. The kids are on devices I do exert more control over (customized per child) but it is known that if they want to acquire their own devices they can set them up however they like at which point they will be responsible for their own security (on which I am happy to consult). My oldest is saving up to buy her own tablet, but I have an outstanding offer on the table to purchase any parts or components for any of them that want to attempt building their own device.

Re: Ask HN: Do you manage your family's digital safety?

#49

Post by inetknght »

warent wrote: post #41
rsync wrote: post #37

The number one thing that we do is use an assumed name and address (and phone number) for all online interactions. If it's not a government agency, it doesn't get any real info. So, for instance, Amazon has a made-up name and our PO BOX and our "junk" number from Twilio. As I have mentioned here many, many times: This is possible because VISA/MC do not verify cardholder name. They make it seem like they do and mercha…

Maybe you're a very high profile individual that this matters beyond paranoia? I've always used my name for signups, and I have a very unique name, probably the only one on the whole planet. It has affected my life in no meaningful / noticeably negative way.

> Maybe you're a very high profile individual that this matters beyond paranoia?

You can call it paranoia. I'd call it a healthy value of privacy.

Nothing stops a company from taking your name from your credit card and using it to build/sell shadow profiles except their word. Companies' words aren't worth shit.

Re: Ask HN: Do you manage your family's digital safety?

#50

Post by stedaniels »

orev wrote: post #25
nopcode wrote: post #6

I preconfigure all windows machines in my family, and take away their local admin rights. No crapware installs, no disabling of updates or defender. No microsoft accounts. They get firefox browser with adblocker preinstalled. I manage their important passwords (eg fastmail) and trained them to rely on firefox sync for the recoverable accounts. I use MeshCentral for remote administration (amt)… its amazing for the pri…

You may be surprised to learn that removing admin rights is no longer (and never really did) protect against app installs. Many developers have figured out they can just install into the user’s profile. Only apps that truly need admin rights (that install services, etc.) would be blocked. Everything else is wide open. The admin rights restriction on app installs was almost just a convention that people followed. Now…

Note however this is only partially true for single user devices, where lack of admin rights does prevent some attacker persistence, and is not at all true for multi user devices e.g. the shared family PC.
Post reply on HN