5 ms·

You might want to use the term "single-purpose number" or something similar. Burner phone is colloquially used as a term for non-registered/anonymous phones, wh

by kchr 9y ago

You might want to use the term "single-purpose number" or something similar. Burner phone is colloquially used as a term for non-registered/anonymous phones, which this isn't. Sure it sounds cool but people might assume that's what they are buying...

bdcravens 9y ago
True, but it's mostly anonymous (but not subpoena-proof). There are multiple mobile apps that refer to themselves as "burners" (burn the number) but the same caveat applies.
- daxorid 9y ago
  >mostly anonymous >(but not subpoena-proof) Then it's not anonymous, "mostly" or otherwise. Any entity that is either subject to CALEA, or behaves as if it's subject to CALEA, is not your friend. Note that Twilio, although not subject to CALEA, still behaves as if it is, bending over backward to honor any and all "lawful requests" for customer information, and requiring PII on account signup: https://www.twilio.com/legal/law-enforcement-guidelines https://www.twilio.com/legal/law-enforcement-guidelines
  - bdcravens 9y ago
    I meant in the general use case, where I talk/text a random person and then "burn" the number.
    - ceejayoz 9y ago
      I don't think that's what most people think when they hear "burner phone".
  - justin66 9y ago
    A valid search warrant issued under the procedures described in the Federal Rules of Criminal Procedure or equivalent state warrant procedures upon a showing of probable cause is required to compel Twilio to provide the contents of communications sent or received through Twilio’s products or services. How utterly unreasonable. Yeah, the man is totally trying to keep you down through Twilio.
    - madeofpalk 9y ago
      No, that wasn't the point. The claim was that Twilio was "mostly anonymous", which isn't true.
      - justinjlynn 9y ago
        If you're not a member operating under the criminal or civil justice system in the United States, it might be anonymous enough. Anonymous "enough" is all you'll usually get anyway. If you want to get technical, there's no such thing as true anonymity. Of course, whether or not "enough is enough" is, as always, going to depend on your threat model.
      - justin66 9y ago
        > The claim was that Twilio was "mostly anonymous", which isn't true. If you accept that anonymity isn't a purely true/false proposition, which you are doing by using the word "mostly," having your identity only available to law enforcement after a court order has been issued seems like a textbook instance of "mostly anonymous."
        deleted 9y ago
        [deleted]
        dahauns 9y ago
        >having your identity only available to law enforcement after a court order or after a security breach...or after access by a third party without a court order (however unlawful it might be)...
        emodendroket 9y ago
        Aren't we comparing this to a cell phone and service I could buy from CVS with cash and no ID?
        justin66 9y ago
        Possibly? In this sort of continuum of anonymity we're talking about, that's probably a lot more anonymous (but it isn't fully anonymous unless you're paying someone else to buy the phone for you in a different city, and they don't know who you are, and probably some other things I'm not paranoid enough to think of). It's still fine to say Twilio is "mostly anonymous," and objecting to that - that Twilio is "mostly anonymous" - on the basis that law enforcement can find out who you are with a court order is very silly. As if a service that requires due process of law to uncover any information about you is morally or practically equivalent to having your name and address in the white pages.
- throwaway91111 9y ago
  Well, the subpoenas tend to be the downfall of phone use. This is certainly a good deal less anonymous than buying a sim and minutes with cash.
  - cptskippy 9y ago
    It's not anonymous at all. Twilio requires PII to register an account and they log all communications. I've never used their voice services so I don't know if those are recorded but everything else is. It's fantastic for debugging and horrifying to think of what might happen if someone compromised an account.
wheelerwj 9y ago
i was going to call you out for being overly precise, but given that this is literally hosted by essentially a Telecom company its a pretty valid point. That being said, burner doesn't mean anonymous. Burner means disposable. Obviously you're not going to dispose of your account, application, and server every time you're done with the number. It's also not even a phone. I guess its a phone application in the most minimal sense of the word..
- deleted 9y ago
  [deleted]
- cottsak 9y ago
  So here's by detailed response https://www.twilio.com/blog/2017/07/building-a-fully-featured-burner-phone-with-kotlin.html#comment-3423920873 https://www.twilio.com/blog/2017/07/building-a-fully-feature... But I agree with kchr in principle. "Burner" may not mean anonymous but it's more often than not associated with anonymous and anonymity. It's the go-to perception or association if you will. So I think kchr and I are saying the same thing: the article is using the burner/anonymity context as a little click-bait IMO and it's not a big deal but it's a valid point.

by kchr 9y ago

bdcravens 9y ago

True, but it's mostly anonymous (but not subpoena-proof). There are multiple mobile apps that refer to themselves as "burners" (burn the number) but the same caveat applies.

daxorid 9y ago
>mostly anonymous >(but not subpoena-proof) Then it's not anonymous, "mostly" or otherwise. Any entity that is either subject to CALEA, or behaves as if it's subject to CALEA, is not your friend. Note that Twilio, although not subject to CALEA, still behaves as if it is, bending over backward to honor any and all "lawful requests" for customer information, and requiring PII on account signup: https://www.twilio.com/legal/law-enforcement-guidelines https://www.twilio.com/legal/law-enforcement-guidelines
- bdcravens 9y ago
  I meant in the general use case, where I talk/text a random person and then "burn" the number.
  - ceejayoz 9y ago
    I don't think that's what most people think when they hear "burner phone".
- justin66 9y ago
  A valid search warrant issued under the procedures described in the Federal Rules of Criminal Procedure or equivalent state warrant procedures upon a showing of probable cause is required to compel Twilio to provide the contents of communications sent or received through Twilio’s products or services. How utterly unreasonable. Yeah, the man is totally trying to keep you down through Twilio.
  - madeofpalk 9y ago
    No, that wasn't the point. The claim was that Twilio was "mostly anonymous", which isn't true.
    - justinjlynn 9y ago
      If you're not a member operating under the criminal or civil justice system in the United States, it might be anonymous enough. Anonymous "enough" is all you'll usually get anyway. If you want to get technical, there's no such thing as true anonymity. Of course, whether or not "enough is enough" is, as always, going to depend on your threat model.
    - justin66 9y ago
      > The claim was that Twilio was "mostly anonymous", which isn't true. If you accept that anonymity isn't a purely true/false proposition, which you are doing by using the word "mostly," having your identity only available to law enforcement after a court order has been issued seems like a textbook instance of "mostly anonymous."
      - deleted 9y ago
        [deleted]
      - dahauns 9y ago
        >having your identity only available to law enforcement after a court order or after a security breach...or after access by a third party without a court order (however unlawful it might be)...
      - emodendroket 9y ago
        Aren't we comparing this to a cell phone and service I could buy from CVS with cash and no ID?
        justin66 9y ago
        Possibly? In this sort of continuum of anonymity we're talking about, that's probably a lot more anonymous (but it isn't fully anonymous unless you're paying someone else to buy the phone for you in a different city, and they don't know who you are, and probably some other things I'm not paranoid enough to think of). It's still fine to say Twilio is "mostly anonymous," and objecting to that - that Twilio is "mostly anonymous" - on the basis that law enforcement can find out who you are with a court order is very silly. As if a service that requires due process of law to uncover any information about you is morally or practically equivalent to having your name and address in the white pages.
throwaway91111 9y ago
Well, the subpoenas tend to be the downfall of phone use. This is certainly a good deal less anonymous than buying a sim and minutes with cash.
- cptskippy 9y ago
  It's not anonymous at all. Twilio requires PII to register an account and they log all communications. I've never used their voice services so I don't know if those are recorded but everything else is. It's fantastic for debugging and horrifying to think of what might happen if someone compromised an account.

wheelerwj 9y ago

i was going to call you out for being overly precise, but given that this is literally hosted by essentially a Telecom company its a pretty valid point. That being said, burner doesn't mean anonymous. Burner means disposable. Obviously you're not going to dispose of your account, application, and server every time you're done with the number. It's also not even a phone. I guess its a phone application in the most minimal sense of the word..

deleted 9y ago
[deleted]
cottsak 9y ago
So here's by detailed response https://www.twilio.com/blog/2017/07/building-a-fully-featured-burner-phone-with-kotlin.html#comment-3423920873 https://www.twilio.com/blog/2017/07/building-a-fully-feature... But I agree with kchr in principle. "Burner" may not mean anonymous but it's more often than not associated with anonymous and anonymity. It's the go-to perception or association if you will. So I think kchr and I are saying the same thing: the article is using the burner/anonymity context as a little click-bait IMO and it's not a big deal but it's a valid point.