Technology

70199 readers

4250 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

733

Signal and Threema want nothing to do with WhatsApp (www.androidpolice.com)

submitted 1 year ago by [email protected] to c/[email protected]

207 comments fedilink hide all child comments

(page 3) 50 comments

sorted by: hot top controversial new old

[–] [email protected] 6 points 1 year ago* (last edited 1 year ago) (7 children)

With Signal's default settings, Google reads your Signal messages when they come in through push notifications.

Correct me if I'm wrong.

Edit: For those in doubt, last year, I started seeing content-aware auto-reply options in my Signal message notifications; that is not a function of Signal, but a function of Google's Android. One could escape it by using a de-Googled Android like Lineage or Graphene, or by hiding the message content (which is not the Signal default) and would surely hurt Signal's adoption, when you have to unlock the app to read each message.

https://www.reuters.com/technology/cybersecurity/governments-spying-apple-google-users-through-push-notifications-us-senator-2023-12-06/

[–] [email protected] 5 points 1 year ago* (last edited 1 year ago)

that's not how push works. usually, google would only know you received a notification, but not it's contents. that "dummy" notification wakes the app up, which decrypts and shows the real notification.
content aware stuff runs entirely locally on your phone, so no data is sent to google (unless you have telemetry enabled, in which case the reply or action you used will be sent to google together with the next telemetry data upload)

yes, some apps actually push the content directly through the push system, but that's not how this is handled in most apps that handle private data in notifications.

[–] [email protected] 4 points 1 year ago (1 children)

Or... And hear me out, Molly FOSS with Unified Push notifications. Problem solved!

[–] [email protected] 3 points 1 year ago* (last edited 1 year ago)

I'm looking in to this, thank you!

Edit: Molly (UnifiedPush) isn't something I can reasonably expect friends and family to set up.

Please note that to receive notifications, you will need to set up a server to run MollySocket, available on https://github.com/mollyim/mollysocket.

You need the right flavor of Molly to use UnifiedPush: https://github.com/mollyim/mollyim-android-unifiedpush. You can install MollySocket via: Docker/Podman: docker pull ghcr.io/mollyim/mollysocket:latest Crates.io: cargo install mollysocket (see INSTALL.md for the setup) Direct download: https://github.com/mollyim/mollysocket/releases (see INSTALL.md for the setup) A distributor app (easiest is ntfy) You can optionally install your own push server like ntfy or NextPush. For beginners, you can use a free service like ntfy.sh (do consider donating if you have the means).

load more comments (5 replies)

load more comments