Yarn.social Online Meetup 25th May (See: #fcghsma for details)
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

I’m (just) old enough to have experienced the German Democratic Republic first hand and if they had had any of these capabilities … 🙈🙈🙈

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

@movq@www.uninformativ.de People just don’t ask these questions. It’s really a serious privacy issue, and I don’t see it brought up very often. Not even in privacy-minded circles. If you’re using a proprietary operating system on any Internet-connected device, you need to assume that the vendor can see everything you do on it and maybe even what you do on other devices as well..

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

@mckinley Thanks for the info. 🤔

This is quite bizarre. Why are we accepting this? 🤔 I guess it just doesn’t matter to people when they use Google for everything anyway (mail, Google Drive, …) … 😒 Bah.

It’s extra “funny” in my case, because I run that Matrix server myself, so I assumed that data is only sent between that server and the clients. But no, of course not, lots of things still get shoved through Google and Apple. 😂😭 How silly.

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

Actually, it looks like notifications using Google’s service can be encrypted end-to-end. I don’t know if this is used much in practice or if you can tell if the notifications on your device are encrypted. There seems to be some conflicting information out there.

Even if the content is encrypted, though, you’re still giving quite a bit of metadata to Google by using their notification service.

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

It looks like ntfy.sh can work either through the OS’s notification service or by maintaining its own connection to the server in the background. For privacy, you definitely want to use “Instant Delivery” and self-host the server.

https://docs.ntfy.sh/faq/#how-much-battery-does-the-android-app-use
https://docs.ntfy.sh/faq/#what-is-instant-delivery

⤋ Read More
In-reply-to » Another thing that doesn’t work anymore after blocking network traffic from my Android phone: Some push notifications.

@movq@www.uninformativ.de I haven’t done any app development, but I know notifications on phones are indeed dependent on cloud services run by the OS vendor which talk to servers run by the app vendor on your behalf. This is supposedly better on battery life, but it conveniently lets your OS vendor read all your notifications.

Mobile XMPP clients usually implement notifications using XEP-0537 and it goes like this:

Your XMPP server -> Client vendor's notification server -> Client OS notification server -> User's device

It’s not end-to-end encrypted so servers will usually just send a dummy message through (You received a message from juliet@capulet.lit!) so you have to open the app to see the (hopefully) encrypted message.
It’s a similar flow on both iOS and Android and I assume Matrix clients work the same way.

⤋ Read More
In-reply-to » Okay, I've built full search capabilities for yarnd 😅 Let's see how many bugs I've created 🤣

Sorry folks, it was a total disaster 🤣 Had to disable the new feature 😢

  • ran out of disk space
  • blew up the db on this pod (corrupted)
  • lots of missing features and. broken shit™

⤋ Read More