Live data from Hacker News

Governments spying on Apple, Google users through push notifications

reuters.com

1–10 of 649 posts

Re: Governments spying on Apple, Google users through push notifications

#5
post #3

Both Apple and Google have root access in the devices. They do not necessarily need to do this.

From the companies not needing this, it does not follow that various governments don't need this.

My first thought is that this is looking like an especially fun (for the rest of us) popcorn session where someone in one government is shocked to discover that other governments pull the same stunts that they think should be reserved for "our people"… but then I looked up Senator Ron Wyden's Wikipedia page and he seems to be genuinely opposed to such shenanigans from everyone including the US.

So, good for him.

Re: Governments spying on Apple, Google users through push notifications

#8
Some issues could be prevented if push messages added end-to-end encryption by default, something that shouldn’t be particularly hard to use if it was built into the dev tooling. Instead, developer recommendations like this one [0] suggest that you should put content into your push messages and optionally use a separate library to encrypt them. Clearly developers aren’t doing this, hence the opportunity for surveillance.

[0] https://android-developers.googleblog.com/2018/09/notifying-...

Re: Governments spying on Apple, Google users through push notifications

#9

[flagged]

I see that there is a lot of signal coming over my push notifications ... how would using this signal make spies incompetent?

> I see that there is a lot of signal

What signals are you talking about? Someone tends to respond to Tinder's notifications at 6 PM on weekends, and such useless data?

Re: Governments spying on Apple, Google users through push notifications

#10
post #6

Do push notifications still get sent and just ignored if they are disabled on the device?

I’m no expert but in my experience developing mobile applications & push notifications, I’ve only registered a device for notifications (and subsequently sent notifications) if the user opted in. Based on my own experience, I would say if you didn’t enable notifications for a particular service or app, they don’t get sent.
Post reply on HN