Live data from Hacker News

FBI used iPhone notification data to retrieve deleted Signal messages

9to5mac.com

111–120 of 322 posts

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#111
post #37

> testimony in a recent trial Court cases are the real way to audit security. Larping about security and complaining about companies responding to court orders only gets you so far. Its way more useful to look at what actually happens in reality.

I know it’s not germane to the Signal issue, but this caught my eye, “who previously pleaded guilty to providing material support to terrorists”.

The case comes with a long statement about the Antifa “organization”. Just your weekly reminder we are living under an Orwellian administration. https://www.justice.gov/opa/pr/antifa-cell-members-convicted...

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#112
post #106

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking? Not implying anything evil but it feels a bit weird esp after this.

> why does it keep asking?

Why does any software keep asking you to do things you explicitly told them you don't want to do? Because it's in the software developer's best interest to get you to do them, not yours. We've gotten way past the point in software where we no longer expect the software to serve the user's interest and solve the user's problems. Now, the expectation is that the user gets nagged and coerced into serving the software's interest and solving the developers' problems.

EDIT: Looks like a developer confirmed this in a sibling comment already: It nags you because that solves their support problem.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#113
post #106

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking? Not implying anything evil but it feels a bit weird esp after this.

Messaging platforms where people receive and promptly respond to messages are more successful in the long run. That's why SMS overtook email. If you own a messaging platform there isn't anything inherently nefarious about pushing people to enable notifications.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#114
post #96
post #86

Earlier quoted context omitted.

Wait... why does Signal need to send notification content to Firebase to trigger a push notification on device? I would instead expect that Signal would send a push to my Android saying nothing more than "wake up, you've got a message in convo XYZ", then the app would take over and handle the rest of it locally. I also didn't realize that Android stores message history even after I've replied or swiped them away. Tha…

Signal does NOT send notification content througth APN/Firebase, their push notification is literaly a ping as you expected. Source: https://mastodon.world@Mer__edith/111563866152334347 (Meredith Whittaker is the current CEO of Signal) I can't link you rigth now to the actual code on their repo but it is verifiable.

Btw I clicked your mastodon link and it didnt work

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#115
post #86

Earlier quoted context omitted.

Wait... why does Signal need to send notification content to Firebase to trigger a push notification on device? I would instead expect that Signal would send a push to my Android saying nothing more than "wake up, you've got a message in convo XYZ", then the app would take over and handle the rest of it locally. I also didn't realize that Android stores message history even after I've replied or swiped them away. Tha…

If your app needs to send a notification while it's not currently a running process, it must go through Firebase on Google's side and APNS on Apple's side. There is no way for a non running app to send a notification entirely locally, this is by design of both companies.

Signal developer here. Not entirely sure what you're saying. I'm only an Android guy, but FCM messages are certainly one trigger that can allow an app process to run, but it's not the only trigger. You can schedule system alarms, jobs, etc. And the notification does not need to be provided by the FCM message. In our case, the server just sends empty FCM messages to wake up the app, we fetch the messages ourselves from the server, decrypt them, and build the notification ourselves. No data, encrypted or otherwise, is ever put into the FCM payloads.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#116
post #106

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking? Not implying anything evil but it feels a bit weird esp after this.

Messaging platforms where people receive and promptly respond to messages are more successful in the long run. That's why SMS overtook email. If you own a messaging platform there isn't anything inherently nefarious about pushing people to enable notifications.

There is if they have repeatedly said no

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#117
post #106

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking? Not implying anything evil but it feels a bit weird esp after this.

Signal developer here. It's just because notification reliability is always a top support complaint, and a lot of people turn off notifications and don't realize they've done so. Admittedly, once a month is likely too aggressive.

Is there some "no means no" additional setting that could be added where someone has to go into settings that would prevent that?

I fear that with the notifications pop up asking me this I might hit the wrong button and woops turn it on.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#119
post #106

Just curious, how come at least once a month signal bugs me to turn on notifications? I said no for a reason, every single time - why does it keep asking? Not implying anything evil but it feels a bit weird esp after this.

> why does it keep asking? Why does any software keep asking you to do things you explicitly told them you don't want to do? Because it's in the software developer's best interest to get you to do them, not yours. We've gotten way past the point in software where we no longer expect the software to serve the user's interest and solve the user's problems. Now, the expectation is that the user gets nagged and coerced i…

The Proton Drive app keeps asking me to turn on backups of photos and video. There is no option to say "don't ask again."

I guess they /want/ more storage to be used? Or is there a support issue they are trying to deal with?

Post reply on HN