Live data from Hacker News

Ntfy.sh – Send push notifications to your phone via PUT/POST

ntfy.sh

101–110 of 306 posts

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#101
post #93

Earlier quoted context omitted.

> I personally wouldn't even run a public service for others without E2E encryption. So don't? seems like everyone got what they wanted.

Well, thinking logically: if everyone really got what they wanted, that question wouldn't be in the FAQ, would it?

Especially with things like notifications, even e2e encryption can't generally provide complete privacy because metadata is data too ;)

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#102

Earlier quoted context omitted.

Neat project. Where does the funding come from?

It's quite cheap to run. It's just one small EC2 instance, and it's usually idling around a load average of 0.1 (though right now it's at 1, hehe). It costs me about $24/month. The Apple developer license costs $100 per year, so it's ~$400/year. As of recently, that's entirely covered by donations. I am incredibly humbled by the sponsorships. I would have never thought ntfy would take off like that. I love open sourc…

You can probably cut down server cost by half. Have you tried with lower resources or have figured out a minimum requirement for the server? As an experiment I suggest - https://tinykvm.com/ - with FreeBSD or OpenBSD (Linux doesn't really do well with small amount of RAM).

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#105
post #58
post #44

From the FAQ[1]: > Will you know what topics exist, can you spy on me? > If you don't trust me or your messages are sensitive, run your own server. This is the way. No pinky promises in whitepaper format[2] that leave out the most important bits, no meticulously constructed but entirely meaningless marketing statements[3][4], but unassuming and deferential logic with a mitigation path. 1: https://ntfy.sh/docs/faq/#wi…

Why couldn't the entire system be E2E encrypted by default, though? In 2022, that's my standard expectation from any service. Even such things as Pocket / Instapaper / Raindrop should come with E2E encryption by default. It's better for the service provider, too: no issues with GDPR, or in case of a database hack.

The pitch is that you can go `curl -d "My message" ntfy.sh/my_topic` and it just works. That's impossible if you want E2EE.

Fortunately, it's open-source, so if you really want, you can fork the app to add a decryption layer and then use `curl -d "$(echo "My Message" | openssl enc -aes-256-cbc -pbkdf2 -e -k "My Password")" ntfy.sh/my_topic` and that'll be E2E encrypted.

Or, you know, host your own ntfy server and trust in SSL.

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#106

Earlier quoted context omitted.

It's quite cheap to run. It's just one small EC2 instance, and it's usually idling around a load average of 0.1 (though right now it's at 1, hehe). It costs me about $24/month. The Apple developer license costs $100 per year, so it's ~$400/year. As of recently, that's entirely covered by donations. I am incredibly humbled by the sponsorships. I would have never thought ntfy would take off like that. I love open sourc…

If you would like to lower the cost more, I think switching to a cheaper cloud service like Linode or Hetzner would be the way to go.

I'm not sure if it's worth going any lower than $24/month

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#107
post #29

cool. e2e encryption would be great..

End to end encryption is already fully designed and partially implemented. I just had a baby and have no time to do it recently: https://github.com/binwiederhier/ntfy/issues/69

If I run ntfy behind NGINX reverse proxy which is on https, isn't that E2E encrypted due to https?

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#108

Earlier quoted context omitted.

https://pushover.net/ Has existed for several years. It works great for me.

I've used pushover for years as well. I wish they would charge me $5/y instead of a $5/lifetime. I've asked them to do that. I want this service to last. I set up Tasker on my phone such that when a specific low-priority (no visible/audible alert) message from pushover, containing only a hash key, is received it picks it up and does an HTTPS request to my self-hosted server to retrieve the actual notification text. I…

Pushover requires a monthly subscription for teams. I guess that’s what most of their revenue comes from anyway.

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#109
post #58
post #44

From the FAQ[1]: > Will you know what topics exist, can you spy on me? > If you don't trust me or your messages are sensitive, run your own server. This is the way. No pinky promises in whitepaper format[2] that leave out the most important bits, no meticulously constructed but entirely meaningless marketing statements[3][4], but unassuming and deferential logic with a mitigation path. 1: https://ntfy.sh/docs/faq/#wi…

Why couldn't the entire system be E2E encrypted by default, though? In 2022, that's my standard expectation from any service. Even such things as Pocket / Instapaper / Raindrop should come with E2E encryption by default. It's better for the service provider, too: no issues with GDPR, or in case of a database hack.

The answer is simply because that is not how the dev implemented it.

Why couldn't you write a patch to do that, and submit it? Or clone the code and release e2entfy.sh?

Re: Ntfy.sh – Send push notifications to your phone via PUT/POST

#110
post #71

Another good open-source self-hosted alternative is Gotify. https://gotify.net

I was adding a new application (i.e. a topic) to on my own instance today. Gotify is Go binary to run with very little configuration. It has an Android app to get somewhat realtime notifications on the phone. Probably an iOS one too. It also has a pretty extensive REST API to manage the instance and a management web app.

https://gotify.net/

Post reply on HN