Live data from Hacker News

Did you know you can put a whole game inside of a push notification

twitter.com

41–50 of 90 posts

Re: Did you know you can put a whole game inside of a push notification

#41
post #39
post #32

Earlier quoted context omitted.

> Since they broke VoIP background notifications, developers have no way to reliably perform silent delivery of information to device. Surely you mean fixed , not broken, as absolutely no one should be delivering information silently to a device they don't own.

I’m with you. Story time: Years ago the Signal app would silently wake up in the background, upload 20MB+ of my contacts’ photos, and then shutdown and do it all over again every time I received a silent notification. Due to my membership in a few large groups this was very often. The result was gigabytes of cellar data usage in a week. Fortunately my experience was rare because I both had a lot of contacts with phot…

Fun fact: Apple still allows signal, telegram, WhatsApp and few other high profile developers to use VoIP notifications without mandatory calling up VoiceKit. Because they can't work as smooth as users are used to they work with these new rules for notifications.

So, no, nothing 'improved' in your Signal experience. At least, not yet.

All developers are equal, but some are more equal than others.

Re: Did you know you can put a whole game inside of a push notification

#42

Earlier quoted context omitted.

> as absolutely no one should be delivering information silently to a device they don't own. That's a very very very shallow thinking. You are advocating to break the internet. You are destroying every internet protocol that ever existed. They all silently deliver information to devices you likely don't own. Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for a…

> Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for apps. Like, you know, proper computers had for maybe 60 years. It's worth noting, however, that desktop and laptop PCs have a surplus of energy relative to mobile phones, so it's no big deal if there's a bunch of processes running in the background doing their thing… usually , anyway, because on PCs it's als…

I agree. User should decide, how he will use his battery power. If an app requires background running, it should be allowed to, with full control over data and battery used. That's all users need.

Re: Did you know you can put a whole game inside of a push notification

#43

Earlier quoted context omitted.

> as absolutely no one should be delivering information silently to a device they don't own. That's a very very very shallow thinking. You are advocating to break the internet. You are destroying every internet protocol that ever existed. They all silently deliver information to devices you likely don't own. Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for a…

> Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for apps. Like, you know, proper computers had for maybe 60 years. It's worth noting, however, that desktop and laptop PCs have a surplus of energy relative to mobile phones, so it's no big deal if there's a bunch of processes running in the background doing their thing… usually , anyway, because on PCs it's als…

Or, give people easy to use task manager that shows background processes, with big buttons labeled "kill", and "kill and keep down".

Android doesn't have anything like it either. It's my number 1 complaint about smartphone experience ever since I bought my first one: the phone actively refuses to give user insight and control over what's running on their device.

Re: Did you know you can put a whole game inside of a push notification

#44
post #22

Earlier quoted context omitted.

These are not delivered along with the notification-- they're provided (client-side) by the application that the notification was sent for. So, while a notification could display dynamic content here depending on the content of the notification (for example, this is the same mechanism as used by Mail on iOS for mail previews) and the preview code should take the untrusted nature of the content into account if it does…

A web browser displayed dynamic content all the time and is considered safe.

No. Nowadays you should still disable JavaScript as well as video playback in your browser if you want to be safe.

There was a brief period some years ago where browsers looked "pretty safe", but we have quickly backtracked by stuffing JS and browsers full of new APIs that are creating new vulnerabilities.

Edit: Yes. Downvoting will surely reduce the amount of CVEs.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=chrome+v8

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=chrome+sand...

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=firefox

There were also Chrome RCEs & sandbox escapes discovered in the wild as recently as November:

https://twitter.com/benhawkes/status/1323374326150701057

https://googleprojectzero.github.io/0days-in-the-wild/0day-R...

And for Firefox:

https://googleprojectzero.github.io/0days-in-the-wild//0day-...

Re: Did you know you can put a whole game inside of a push notification

#45

Earlier quoted context omitted.

> Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for apps. Like, you know, proper computers had for maybe 60 years. It's worth noting, however, that desktop and laptop PCs have a surplus of energy relative to mobile phones, so it's no big deal if there's a bunch of processes running in the background doing their thing… usually , anyway, because on PCs it's als…

Or, give people easy to use task manager that shows background processes, with big buttons labeled "kill", and "kill and keep down". Android doesn't have anything like it either. It's my number 1 complaint about smartphone experience ever since I bought my first one: the phone actively refuses to give user insight and control over what's running on their device.

> Android doesn't have anything like it either.

Uh, it sure does through the applications section. You can see running services, which ones are taking battery, and stop/disable those as well.

Re: Did you know you can put a whole game inside of a push notification

#46
post #45

Earlier quoted context omitted.

Or, give people easy to use task manager that shows background processes, with big buttons labeled "kill", and "kill and keep down". Android doesn't have anything like it either. It's my number 1 complaint about smartphone experience ever since I bought my first one: the phone actively refuses to give user insight and control over what's running on their device.

> Android doesn't have anything like it either. Uh, it sure does through the applications section. You can see running services, which ones are taking battery, and stop/disable those as well.

Recently, yes. Wasn't really the case for most of the lifetime of Android project, at least if my memory serves. Also even today, the application section is barely usable as it is.

Contrast that with e.g. the task manager on Windows. It's not a pinnacle of UI, but it's easy to use, communicates necessary information, and gets the job done.

Re: Did you know you can put a whole game inside of a push notification

#47
post #22

Earlier quoted context omitted.

A web browser displayed dynamic content all the time and is considered safe.

No. Nowadays you should still disable JavaScript as well as video playback in your browser if you want to be safe. There was a brief period some years ago where browsers looked "pretty safe", but we have quickly backtracked by stuffing JS and browsers full of new APIs that are creating new vulnerabilities. Edit: Yes. Downvoting will surely reduce the amount of CVEs. https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ch…

You'll be safe because you can't effectively use the modern internet :)

Re: Did you know you can put a whole game inside of a push notification

#48
post #32

Earlier quoted context omitted.

> Since they broke VoIP background notifications, developers have no way to reliably perform silent delivery of information to device. Surely you mean fixed , not broken, as absolutely no one should be delivering information silently to a device they don't own.

The Apple philosophy is “give users zero agency” – and from that stance, yes, this is a fix. But I remember the days when a computer program was either a game, an extension of the user's will or the BIOS; by that philosophy, this should absolutely be possible. (But computers have been artificially complexified to the point that this isn't viable.)

> an extension of the user’s will

I quite like this particular viewpoint. I’m stealing this philosophy for the next time I am designing a CLI.

Re: Did you know you can put a whole game inside of a push notification

#49

Earlier quoted context omitted.

> as absolutely no one should be delivering information silently to a device they don't own. That's a very very very shallow thinking. You are advocating to break the internet. You are destroying every internet protocol that ever existed. They all silently deliver information to devices you likely don't own. Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for a…

> Actually, we wouldn't need these dirty perversions with notifications if we had a proper background mode for apps. Like, you know, proper computers had for maybe 60 years. It's worth noting, however, that desktop and laptop PCs have a surplus of energy relative to mobile phones, so it's no big deal if there's a bunch of processes running in the background doing their thing… usually , anyway, because on PCs it's als…

Can we stop making phones that are so thin that they struggle to be powered for a full day under moderate use?

Re: Did you know you can put a whole game inside of a push notification

#50
post #45

Earlier quoted context omitted.

> Android doesn't have anything like it either. Uh, it sure does through the applications section. You can see running services, which ones are taking battery, and stop/disable those as well.

Recently, yes. Wasn't really the case for most of the lifetime of Android project, at least if my memory serves. Also even today, the application section is barely usable as it is. Contrast that with e.g. the task manager on Windows. It's not a pinnacle of UI, but it's easy to use, communicates necessary information, and gets the job done.

In early android we had more insight and control over processes, but unfortunately we lost that supposedly due to abuse by apps (which seems highly likely)
Post reply on HN