this post was submitted on 07 Dec 2023
125 points (97.0% liked)

Selfhosted

60426 readers
208 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
125
Apple Confirms Governments Using Push Notifications to Surveil Users (www.macrumors.com)
submitted 2 years ago by CrimeDad@lemmy.crimedad.work to c/selfhosted@lemmy.world
29 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.crimedad.work/post/39255

Is self-hosted enough to avoid push notifications going through Apple and Google servers?

you are viewing a single comment's thread
view the rest of the comments
[–] Rootiest@lemmy.world 1 points 2 years ago* (last edited 2 years ago) (1 children)

That's cool, but also doesn't sound all that useful.

A fairly significant number of apps depends on Firebase and the like and don't even have the option to pull notifications otherwise. And virtually every app at least use them.

When's the last time you've seen a chat app that didn't require push notifications to function? Even Signal uses them. (Though they do so in a way that doesn't expose any private data)

You just can't disable push without severely crippling the experience.

Further I'm not even sure disabling them on-device will change anything at all about governments being able to surveil them server-side. Afaik you are only stopping your phone from receiving them, they would still be sent to the Firebase server from the app's cloud servers.

I don't think this issue is avoidable other than app developers not using (or using in a secure manner) Firebase or GCM (or ACM) etc

[–] uzay@infosec.pub 2 points 2 years ago (1 children)

Signal notifications work fine without GCM, and even Whatsapp does to an extent

[–] Rootiest@lemmy.world 1 points 2 years ago* (last edited 2 years ago)

That's true, signal is pretty good about that.

I wasn't saying Signal required them necessarily, just that even it uses them. But now reading back through my comment I can see how that could be easily misinterpreted. My bad