[crazy_geek]

I haven't had the opportunity to tinker with this, but what if the client sends a X-UIDH: header of it's own? Will VZW overwrite the header, or will it pass it through? If it doesn't clobber it, there's a browser plugin waiting to be written.

[acdha]

It reportedly overwrites a header sent by the client:

https://twitter.com/kennwhite/status/525338284029775872

[nkozyra]

Given the ordering of the process, that makes sense. I'm not a Verizon customer but I would be gone yesterday if I were after reading about this.

As I understand it, they offer an "opt out" that doesn't actually opt you out of this.

Truly gross behavior, though.

[jimktrains2]

> I'm not a Verizon customer but I would be gone yesterday if I were after reading about this.

And where would you go? AT&T? Is that really a better option?

Sprint and TMo just don't have the reception everywhere I go (or didn't last time I checked).

[nkozyra]

I'm a TMobile customer. Reception is perfectly fine in any metro area. I work in metro areas. Admittedly, I lose service on vacation, but maybe that's for the best.

[maxerickson]

T-Mobile roams on AT&T.

Or at least, some plans do. My legacy per minute plan does.

I'm pretty sure Sprint roams on Verizon, they just won't offer you service for an address where you would be roaming all the time.

[jimktrains2]

> everywhere I go

That included the middle of the Appalachian mountains.

[tracker1]

Maybe someone should write some browser plugins so desktop browsers can send fake X-UIDH headers to help poison the well, just a little.

Better still have the plugin get a group of known headers and distribute them all over.