71
Apple Confirms Governments Using Push Notifications to Surveil Users
(www.macrumors.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 07 Dec 2023
71 points (98.6% liked)
Self Hosted - Self-hosting your services.
11190 readers
1 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules
- No harassment
- crossposts from c/Open Source & c/docker & related may be allowed, depending on context
- Video Promoting is allowed if is within the topic.
- No spamming.
- Stay friendly.
- Follow the lemmy.ml instance rules.
- Tag your post. (Read under)
Important
Beginning of January 1st 2024 this rule WILL be enforced. Posts that are not tagged will be warned and if not fixed within 24h then removed!
- Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate.
Cross-posting
- !everything_git@lemmy.ml is allowed!
- !docker@lemmy.ml is allowed!
- !portainer@lemmy.ml is allowed!
- !fediverse@lemmy.ml is allowed if topic has to do with selfhosting.
- !selfhosted@lemmy.ml is allowed!
If you see a rule-breaker please DM the mods!
founded 3 years ago
MODERATORS
Apps on android register push notifications with the Google Play Services daemon on your phone, which in turn registers them on Google Cloud Messaging. Google Play Services is the non-open source part of Android that makes Android a proprietary operating system.
MicroG is an open-source reimplementation of Google Play Services, used on Android variants like CalyxOS and Lineage OS. MicroG currently only supports registering push notifications on Google Cloud Messaging, but I would love to have an option for self-hosted push notifications.
Right now looking at my MicroG, I have 77 apps registered to use Google Cloud Messaging.
One benefit of using MicroG at least, is that Google doesn't know who owns the phone getting the push notifications. There is no Google acount or any other identifying data, the IMEI, serial number, etc is randomized and fake.
Yes, the local client part is clear. But for the server part to be self hosted, the vendor would need to know how to reach you / your device.
Currently, they only go "hey, I have a message for user "Justin "! Google, can you make sure they get it?". And Google takes that message, figures out which backend server your phone is currently connected to, routes to that server, the server hands it to your phone, and then you get a nice ad about CandyCrush or whatever.
If you were to host your own server, there would be an additional layer of figuring out which backend this message needs to be routed to. And for that, every vendor would need to maintain a list of backend and which users / devices are using which. Or, a third party (Google?) would need to offer a service that does this part for the vendor.
This would technically be possible, but as far as I know is not a part of the current "standards" for push notifications.
Ah, OK. I thought it was the Google side that held a connection to the app server. If the app server is sending reqs to Google Cloud then that's not really possible, yeah.