Live data from Hacker News

Show HN: DoNotNotify – Log and intelligently block notifications on Android

donotnotify.com

161–170 of 171 posts

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#162

Earlier quoted context omitted.

TIL! IDK if I would consider not blindly trusting an unknown third party to read all my notifications being paranoid, but if it is, then yeah, I guess I am. I've used F-droid merely due to the open source guarantee, so how fast these apps are patched isn't a deal-breaker for me, but I'll definitely look into Obtanium now. Thank you!

As a developer, the fact that F-Droid now compiles all your packages for you, using their own keys, is a non-starter for me. It means they are free to modify my code however they want or inject malware etc. (whether by mistake or not), and it's totally outside of my control, but still has my name on it.

I guess we can't win, can we? I worried more about random developers getting compromised since the surface area is much larger, but at the same time one entity compiling all packages makes them a more attractive target.

We've seen the released bundles being different to the source code before too AFAIR, so whether it's a single repository or F-Droid, both can easily screw users up if compromised.

I don't want to be paranoid but the world's not making it easy.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#163
post #53
post #50

I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. I would donate/pay for this if it was open source on F-Droid. Kudos to you for building it. I put off building this exact same application so many times it's not even funny. Too bad I'm too lazy to maint…

>I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. The app lacks the INTERNET permission so it can't really exfiltrate data even if it wanted to.

Lacking INTERNET permission today does not guarantee that the app will never have that permission. The internet permission is considered a "normal" permission by android so it will be auto granted without even a notification to the user.

Moreover an app without internet permission can still send data out using "INTENTS" for other apps in Android. This can make an app dangerous even without internet permission.

I was excited about the application and was dissapointed to see that it was closed source. I will absolutely not trust anyone that I cannot sue with this data. Big companies at least follow some standards that are enforced by multiple governments here we know nothing.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#164

Earlier quoted context omitted.

That's another pet peeve of mine: Why the hell can't we block internet access for apps in (native) Android? Everything else is a permission, but this is not, somehow.

Maybe Google doesn't want users blocking ads from getting loaded.

ADs work via play services so even if you block internet for the app the ADs will continue to work.

The reason many apps stop showing ADs when their internet is blocked is because they need to make an API call to their own servers before running the AD. That is the common behavior but not mandatory

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#165

Earlier quoted context omitted.

It's hard to rule out intentional side channels without access to source.

Do you mean a no-internet app (like this) could write data locally in a way that another internet-enabled app (in cahoots) could locally receive? Like a non-sandboxed storage area? Seems plausible.

yes that and internet permission can be added later and pushed with an update. Unless you are checking permissions after every update you will not know.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#166
post #50

I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. I would donate/pay for this if it was open source on F-Droid. Kudos to you for building it. I put off building this exact same application so many times it's not even funny. Too bad I'm too lazy to maint…

If you're feeling skeptical and just want to be sure, you can use this NetGuard https://github.com/M66B/NetGuard to block internet access for any app.

Just blocking access to internet for this one app is not enough. It can use intents or a shared local storage with some other app to send the data out.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#167
post #128

I'm kinda surprised to hear people having this problem on Android. I've found Android's notification management to be superb and, as others have said, with a one strike rule, this has been a non-issue for me. > I live in a gated society that uses an app called MyGate to allow visitors, and the app intentionally pushes ads through the same channels since you cannot block them. This strikes me as against the Play Store…

Facebook Messenger constantly tells you shit like "Hey, it's been 1 minute since someone messaged you, you better check it out!", Uber Eats is constantly telling me about meal deals even directly after I just ordered food on Uber Eats, and now it's giving me Uber ads implying the only thing stopping me from going out is that I haven't ordered an Uber, despite my history of only using it once a year when out of countr…

I only have "Your Order" notifications allowed for Uber Eats which will only send notifications about my specific order and I think reminding me to tip if I didn't already? That seems to be a subcategory at least.

Anecdotally, I've never received anything other than those notifications.

I only use Facebook Messenger for Facebook Marketplace, so I don't have much interaction with it, but I see "Reminders" as a category of notification, try turning that off.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#168
The wild part about all these notification-firewall concepts is that we keep re‑creating the same tool in closed source. Why not ship it as open source, charge for the hosted rulesets or ML models, and let people audit the code they’re literally piping every OTP and DM through? “Trust us, we don’t phone home” isn’t a strategy anymore when GrapheneOS, NetGuard, and even Pixel’s Data Saver already cover 80% of the use cases. The only reason I can see for keeping it closed is that the real business model is eventually selling the telemetry back to the very advertisers it claims to block. Am I missing an actually compelling reason not to open it up?

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#170
post #86

Does the app has any country wise template rule collections? I would love to have the feature but not willing to write rule 100 rules for 30 apps by my own.

LLM would help with this immensely, if only it was allowed (not sure how though... make the ruleset available as a single text field for export/import, maybe?)

Export/import just landed!
Post reply on HN