Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Governments spying on Apple, Google users through push notifications

reuters.com

Post reply on HN
Print view View original

451–460 of 649 posts

Re: Governments spying on Apple, Google users through push notifications

#451

Post by withinboredom »

jjtheblunt wrote: post #431
zeppelin101 wrote: post #399

This reminds me, whatever happened to mesh networks? If you wanted to be out and about in public, you could simply carry a very anonymized device that had only more basic abilities. But among those abilities, you could certain send messages and maybe even smaller-sized files - all over a mesh network. Feds could infiltrate it, but it wouldn't be nearly as trivial as it is right now. And users could rotate their devic…

I wonder if Apple's Airtag devices use mesh networking of some sort.

I imagine they designed it the way they did specifically to prevent law enforcement from tapping them.

Re: Governments spying on Apple, Google users through push notifications

#452

Post by loughnane »

fsflover wrote: post #296
loughnane wrote: post #284

I know Pinephone isn't ready for daily use from all the threads here, but I just ordered one to get some stick time with it. Getting real tired of having to fight my phone to keep my data mine. I just want the equivalent of debian, but on mobile. I understand I'll have to give up a bunch of apps, but honestly I think its worth it. As soon as its possible I'd like off this ride.

Alternatively, consider Librem 5, which is more stable, since its software is developed by a dedicated team.

I thought about Librem 5 but the price is too high for me to casually buy. I'd def like to try it out though, so maybe I'll splurge.

Re: Governments spying on Apple, Google users through push notifications

#453

Post by anonymouskimmer »

drekk wrote: post #447
anonymouskimmer wrote: post #436

Earlier quoted context omitted.

> Want to smoke weed? The tyranny of the masses is still a tyranny. I'd personally like to move to a state where all smoking, but at least weed smoking, is illegal. I really don't like second hand smoke, especially when it smells and hangs as much as weed smoke does.

It's already not legal to smoke in public for weed and in most places for cigarettes. Frankly I don't think outright prohibition addresses that any better than the existing system. Nor do I see how having bodily autonomy is necessarily a tyranny of the masses. In all seriousness, Utah sounds like your ideal so long as you stay outside of Salt Lake City. I'm glad to no longer be a resident

> Utah sounds like your ideal

Not enough trees. Nor enough employment in my non-remoteable field.

Public smoking is a concern, but the smoke will leak even if smoked inside of a home. With edibles and inhalers I don't understand why people thought it was a good idea to legalize marijuana smoking.

> Nor do I see how having bodily autonomy is necessarily a tyranny of the masses.

Generalizing the principle of the swinging your fists near someone else's nose saying.

Re: Governments spying on Apple, Google users through push notifications

#455

Post by robbiet480 »

wkat4242 wrote: post #449
robbiet480 wrote: post #306

We at the Home Assistant Companion for iOS team have been wanting to implement end to end encryption for our push notifications for a while now but Apple has denied our request for the com.apple.developer.usernotifications.filtering [0] entitlement multiple times. Wondering if with today's news we could apply again and get it. For context, we are sending ~35 million push notifications per month on iOS and ~67 million…

Are the ones on Android encrypted i wonder? I hope so

They are not currently as we need to roll out e2ee with iOS and Android in lockstep as they both use the same mobile_app component as well as the local push stuff which bypasses Apple and Google but we would also like to encrypt.

Re: Governments spying on Apple, Google users through push notifications

#456

Post by Klonoar »

daveoc64 wrote: post #363
Klonoar wrote: post #341

Earlier quoted context omitted.

Unless I’m mistaken - and I might be or it may have changed - Signal notifications on iOS just tell the app “hey, something happened, call the service and check for updates”. I.e, the push notification itself contains little to nothing in terms of data/metadata. You can also of course decrypt a notification by shipping an extension to do so, and maybe Signal does - it’s been awhile since I poked around it. I’d just b…

What you've said is correct, but it doesn't stop the attack vector described. If the question to Apple or Google is "who received a notification from Signal at 17:15 UTC?" then even if the notification is “hey, something happened, call the service and check for updates”, you've got your answer.

I would have to imagine that a high enough level of traffic/users would obscure this sufficiently.

e.g: If the question to Apple or Google is "who received a notification from Signal at 17:15 UTC?", then that could very well be a million people.

Re: Governments spying on Apple, Google users through push notifications

#457

Post by rchaud »

eli wrote: post #253
rchaud wrote: post #248

Earlier quoted context omitted.

He may definitely want to see it passed. But elected officials should not be engaging in pushing bills that won't pass their first legal challenge.

Similar bills have already passed legal challenges https://www.lawfaremedia.org/article/eighth-circuit-upholds-... I think it's a bad law and he's making a big mistake. I'm still a fan though.

Thanks for the link. Scary to see that the state is re-drafting these laws specifically to find loopholes in the constitutional definitions of freedom of speech. Check out this other loophole:

> The act does not apply to contracts worth less than $1,000, or to companies that offer to provide the goods or services for at least 20 percent less than the lowest price quoted by a business that has complied with the certification requirement.

So, a contractor if free to boycott as long as they cost the taxpayer a little bit less.

Re: Governments spying on Apple, Google users through push notifications

#458

Post by kec »

gosub100 wrote: post #325
kec wrote: post #252

Earlier quoted context omitted.

In practice that shouldn’t matter, as the law states that any service animal can be turned away so long as the business provides accommodation to the human (which is the point of the limited questions). The fact this rarely happens is more due to people not actually knowing the law and typically wanting to avoid potential conflict.

"people not knowing the law" can be a symptom of bureaucracy though. How many pages of law do you think exist to open a bagel shop or add a room to your house in SFO?

How is that relevant to the example of enabling disabled folks to interact with society & some bad actors abusing it?

Re: Governments spying on Apple, Google users through push notifications

#459

Post by autoexec »

forward1 wrote: post #290
a_wild_dandan wrote: post #235

Earlier quoted context omitted.

https://radiolab.org/podcast/border-trilogy-part-1 Poor school kiddos. :( Anyway, if you prefer text, click the transcript. I recommend listening though, if you have time!

The format of this podcast is insufferable, like listening to two befuddled people in a retirement home exchange "witty" banter. I looked it up though. This was 30 years ago. The court issued Border Patrol an injunction and protected students from discimination. A perfect example of the legal system acting justly and prudently, which only supports my argument that unbridled searches within 100 miles of the border is…

Not to get too far off on a tangent here, but I can't agree more. This style of podcast where a simple story is endlessly drawn out with unnecessary audio being inserted, useless details, and constant repetition without getting to the point makes getting any information at all feel like pulling teeth. I've seen it imitated in other podcasts too so the poison is spreading.

Re: Governments spying on Apple, Google users through push notifications

#460

Post by buryat »

asow92 wrote: post #319
buryat wrote: post #299

Earlier quoted context omitted.

how do they guarantee that everything is protected and they don’t share data with someone?

How would you want that qualified exactly?

> Does Joust sell my data?

> No, Joust does not sell any user data.

extraordinary claims require extraordinary evidence

Post reply on HN