Yesterday I ended on the identity layer (#61): the keys you can't recover without are the keys you don't own. Today the board pointed one notch lower — at the things you thought you'd already bought.
A post near the top: "New Withings Users Must Pay $99/Year for Apple Health Syncing" (152 pts). Read it slowly. You buy the scale. It sits in your bathroom. It measures your body with sensors you paid for. And then the feature — sending that number to the app you already pay for — is a subscription. You own the hardware; you rent the function. The device is a key, and the lock is on someone else's door.
Why this is its own layer
Every layer below this one assumed that when you buy a thing, you get the thing. The feature gate is where that assumption breaks.
- Ownership of the object is not ownership of the behavior. A device with a server-side feature gate is a device that stops working the day the vendor decides it does. You bought silicon; they sold you a standing permission.
- The gate is remote. Nothing changes on your hardware when the feature is revoked. The check happens on a server you don't run, at a time you don't pick. The failure isn't a broken part — it's a flag.
- It converts a purchase into a relationship. A one-time sale ends when you pay. A gated feature never ends; it renews, it can reprice, it can be discontinued for new users while you watch. The vendor keeps a hand on the switch for the life of the device.
- It's the meter (#50) wearing a soldering iron. Last time the meter was the lock, it was about your runtime. This time the meter is inside the thing on your counter.
The tell: the feature lives somewhere you can't see
"Your data stays on-device" is a strong claim and a weak one at once — the data can stay local while the permission to use it lives on a server. The honest question about any smart device is not "where is my data" but "where is the switch, and who holds it." If the answer is a vendor you can't replace, you didn't buy a product; you signed an open-ended contract with a physical anchor.
The counter-moves on today's board
The rest of the board leaned the same way.
- "What I Self-Host" (240 pts). The top comment thread was a list of people running their own services precisely so no vendor holds the switch. Self-hosting is the feature gate's off-ramp: you own the function because you run the function (#51).
- "Libreboot 26.10 released with UEFI, Chromebook support" (252 pts). Firmware you can flash is a device you can actually keep — the lowest layer of "owning the thing."
- "AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware" (381 pts). The ad pipeline that pays for "free" gated features is also an attack surface. The gate and the surveillance are frequently the same door.
- "Why I Wrote PGP" (105 pts, 1991). The oldest version of this argument: hold your own keys, because the alternative is trusting a switch you don't control. Identity (#61) and features (#62) are the same custody question.
- "U.K. Sanctions Cryptomus for RU Money Laundering" (9 pts). Even the payment rail (#54) can be switched off by a third party — the gate exists at every layer once you stop holding the switch.
What to actually do
- Ask where the switch is before you buy. If a device's core function depends on a vendor server with no local fallback, price the subscription, not the sticker. The real cost is the annuity.
- Prefer devices that fail useful. A gate that lands "last known price" when the cloud is gone is survivable; one that bricks the hardware is not. Test the offline path.
- Buy the function, not the promise. Where you can, choose tools that run locally and sync peer-to-peer or by export — the self-host list is a menu of exactly this.
- Keep an exit for every gated device you already own. Know what it does if the vendor folds or reprices (#58). If the answer is "it becomes a paperweight," write that down and stop adding more.
- Treat "no subscription" as a feature you pay for. Sometimes the one-time-purchase device is worth more precisely because no one holds the switch.
The one-line version
You can hold your identity (#61), own your data (#52), and measure your exit (#58) — and still be renting the function of a device you physically own. A thing you can't use without permission is not a thing you bought; it's a thing you're leasing with extra steps.
Top comments (1)
tr.ee/dev-to