Yarn.social Online Meetup 25th May (See: #fcghsma for details)
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

Actually, it looks like notifications using Google’s service can be encrypted end-to-end. I don’t know if this is used much in practice or if you can tell if the notifications on your device are encrypted. There seems to be some conflicting information out there.

Even if the content is encrypted, though, you’re still giving quite a bit of metadata to Google by using their notification service.

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

It looks like ntfy.sh can work either through the OS’s notification service or by maintaining its own connection to the server in the background. For privacy, you definitely want to use “Instant Delivery” and self-host the server.

https://docs.ntfy.sh/faq/#how-much-battery-does-the-android-app-use
https://docs.ntfy.sh/faq/#what-is-instant-delivery

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

@movq@www.uninformativ.de I haven’t done any app development, but I know notifications on phones are indeed dependent on cloud services run by the OS vendor which talk to servers run by the app vendor on your behalf. This is supposedly better on battery life, but it conveniently lets your OS vendor read all your notifications.

Mobile XMPP clients usually implement notifications using XEP-0537 and it goes like this:

Your XMPP server -> Client vendor's notification server -> Client OS notification server -> User's device

It’s not end-to-end encrypted so servers will usually just send a dummy message through (You received a message from juliet@capulet.lit!) so you have to open the app to see the (hopefully) encrypted message.
It’s a similar flow on both iOS and Android and I assume Matrix clients work the same way.

⤋ Read More
In-reply-to » Okay, I've built full search capabilities for yarnd 😅 Let's see how many bugs I've created 🤣

Sorry folks, it was a total disaster 🤣 Had to disable the new feature 😢

  • ran out of disk space
  • blew up the db on this pod (corrupted)
  • lots of missing features and. broken shit™

⤋ Read More
In-reply-to » Okay, I've built full search capabilities for yarnd 😅 Let's see how many bugs I've created 🤣

@xuu@txt.sour.is You got any time/energy to help me test this? 🤔 There’s a process for indexing an existing archive too…

⤋ Read More
In-reply-to » I was able to take a photo of the large sunspots that made the news these days:

@movq@www.uninformativ.de Yeah I’ll see if I can get back into this, everytime I see you post stuff like this it makes me want to go out again 🤣 Bit hard for a blind guy to do it all, but still I try 😅

⤋ Read More
In-reply-to » Hey @bmallred 👋 Can you see this? 🤔

The weird this is I still see your profile as

bmallred may not follow you

I assume you share your followings publicly, I see them on your feed, so I assume so. I was going to debug this on my side too today to see if.I goofed something up but my pod is rather busy so I hadn’t done that yet 😅 (actually working again finally on search)

⤋ Read More
In-reply-to » @prologic Regarding the static URL: The hostname at least is a CNAME record and resolves to something at cloudfront. What I meant was that I, as a user, cannot configure this URL anywhere in the Android UI. 🤔

Oh so it really does hit some stupid arbitrary endpoint at AWS 😱

⤋ Read More

I will be deleting 14 inactive and unused accounts (for >3 years) on my Gitea instance git.mills.io at some point over the next few days. One of those accounts is yours @adi – If you’d like to keep it, I suggest you sign-in 😅

⤋ Read More
In-reply-to » One thing I’ve learned from locking down my Android phone (see #pknsrda):

I can’t imagine it’s a static URL either, it surely has to be a unicast address of some sort. Relying on a static URL sounds like an utter disaster to me 🤔 I’d have to read the open spec on this…

⤋ Read More
In-reply-to » One thing I’ve learned from locking down my Android phone (see #pknsrda):

@movq@www.uninformativ.de Surely it isn’t as bad as this though right? 🤔 I mean reading the Wikipedia page on A-GPS, it sounds to me like it sends enough data to the nearest tower to give you enough data to warm-up the GPS receivership, presumably with GPS coordinates of the tower itself? I can imagine this data payload would include the Date/Time, IEMI and possibly your SIM details and Phone number (why not). It could be worse 🤣

⤋ Read More