4 ms·
That is not true. It's (1) a remotely exploitable rootkit and (2) a tracking system that's (3) operated by a multi-billion dollar company whose entire business
by Sir_Cmpwn 10y ago
That is not true. It's (1) a remotely exploitable rootkit and (2) a tracking system that's (3) operated by a multi-billion dollar company whose entire business model is invading your privacy.
Google Play Services is not the standard Android platform. AOSP is the standard Android platform.
- dublinben 10y agoYou're conflating GCM and the wider Google Play Services that is installed on most Android devices. As someone who actually uses AOSP without Google, it weakens your argument when you conflate the two.
- Sir_Cmpwn 10y agoGCM depends on Play Services, so I'm really not.
- dublinben 10y agoGCM is merely one minor component. The existence of the microg project proves that you can implement one without the other.
- Sir_Cmpwn 10y agoMicroG does not implement GCM.
- floatboth 10y agoMicroG does implement the GCM client! I've been getting push notifications through that thing for several months.
- Sir_Cmpwn 10y agoThrough Google, yes, but you can't bring along your own push notification delivery service.
- tptacek 10y agoYour argument has become circular, because the what Signal uses push notifications for isn't security-relevant: the messages are empty and used only as a wakeup.
- Sir_Cmpwn 10y agoThey still contain information, though. They say when you're talking on Signal. Matched with someone else's messages at about the right frequency to indicate a conversation, they give a pretty decent idea of who you're talking to.
- kuschku 10y agoNo, it implements one half of it. Signal still has to be linked with a proprietary binary, which contains lots of tracking code.