Live data from Hacker News

Show HN: DoNotNotify – Log and intelligently block notifications on Android

donotnotify.com

61–70 of 171 posts

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#61
post #57
post #53

Earlier quoted context omitted.

>I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. The app lacks the INTERNET permission so it can't really exfiltrate data even if it wanted to.

Is that actually required? I thought that was implicit

Yes. Without the permission all network requests will just fail.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#62
post #56
post #53

Earlier quoted context omitted.

>I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. The app lacks the INTERNET permission so it can't really exfiltrate data even if it wanted to.

This is correct, but it is still a slippery slope. At some point the dev ends up adding internet permission (might be for legit reasons too), and lo and behold you are sharing your data. For something as sensitive as notifications, I really can't trust anything but open-source app which is vetted by a few seasoned people and hosted on F-droid.

Related, GrapheneOS has a handy feature to disable network access for individual apps.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#63
post #57
post #53

Earlier quoted context omitted.

>I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. The app lacks the INTERNET permission so it can't really exfiltrate data even if it wanted to.

Is that actually required? I thought that was implicit

It's automatically granted but the app needs to declare it in order to access internet. Because of that it's not enough that the app _currently_ doesn't request internet permissions, because if it ever starts, it would be mostly transparent to a user

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#64
post #50

I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. I would donate/pay for this if it was open source on F-Droid. Kudos to you for building it. I put off building this exact same application so many times it's not even funny. Too bad I'm too lazy to maint…

It's something i've also vaguely thought about building myself, because god damn uber, how many times do you need to send me an advert for uber one? just tell me when my car is here.

so congrats to the author of this. I do agree that I'd prefer it open sourced too, it feels a bit risky it having access to all your notifications.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#66
post #29

Earlier quoted context omitted.

(3rd world) problem: most people think calling is pressing the phone button inside Whatsapp.

At least on iOS, internet call is treated basically the same as cellular, showing a splash caller screen and ringing if not on silent. This means that it's trivial to setup phone in such a way that no notification gets through but calls do, even with sound.

This is also true on Android.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#67
post #60

I guess I'm surprised that Android would allow one app to read/manage/block notifications from all other apps. I mean, I'm happy to have that kind of control over my phone, but it also seems like it could be viewed as a giant security hole? (Which would be a bit ironic given that Google is actively stamping out the ability for users to install apps that come from outside their walled garden.)

The app requires a very specific permission for this, which it asks for on first launch. It's not even just a popup on which you can tap "Ok" - Android will take you to a special screen from where you need to manually switch on the notifications access for it to work.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#68
post #54
post #50

I would love to use this, but I don't want to allow a third party app with closed source to read all my notifications. This can read OTP passwords, full messages, etc. so it must be open source for me to consider it. I would donate/pay for this if it was open source on F-Droid. Kudos to you for building it. I put off building this exact same application so many times it's not even funny. Too bad I'm too lazy to maint…

Fair enough, you only have my word on it (that it doesn't send any data to the Internet). But you do have my word :) Another person requested that the app be open-sourced as well. I will look into that.

I'm going to join the list of voices requesting open source here. If you're not planning to charge money for this, there are several benefits starting with increased trust.

Mobile apps are a cesspool of user-hostile behavior, and I have a strong preference for not giving closed source apps access to sensitive data.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#69
post #29

Earlier quoted context omitted.

(3rd world) problem: most people think calling is pressing the phone button inside Whatsapp.

At least on iOS, internet call is treated basically the same as cellular, showing a splash caller screen and ringing if not on silent. This means that it's trivial to setup phone in such a way that no notification gets through but calls do, even with sound.

The point being made above is that if data is turned off, you can no longer receive calls made over WhatsApp.

Re: Show HN: DoNotNotify – Log and intelligently block notifications on Android

#70
post #57

Earlier quoted context omitted.

Is that actually required? I thought that was implicit

Yes. Without the permission all network requests will just fail.

You can silently add the permission in an update though. It's safe if you don't auto-update it I guess.
Post reply on HN