4 ms·
I'm at my mom's place, I had never thought of turning them all off. I think I should outright disable Chrome on Android notifications, as I now can't think of a
by nevi-me 4y ago
I'm at my mom's place, I had never thought of turning them all off. I think I should outright disable Chrome on Android notifications, as I now can't think of a reason why she should get notifications.
She's been spammed by all sorts of nonsense from tabloids and scams.
> In the same way that e-mail spam filtering works, so should browser push notification spam filtering. If you don’t implement this, you are complicit in the continued abuse of your users.
I can't remember as I haven't worked on notifications in years, are the notifications not meant to be encrypted? Such that the browser vendor can't see the contents?
With e-mail I understand and accept the message processing needed to identify if it's spam, but I'm wondering whether browser vendors (or more specifically, push servers) would today be able to intercept messages.
Numerous services will allow messages to be sent via push notifications, wouldn't it cause issues if your browser vendor is now "reading your messages"?
> If needing to filter browser push notifications for spam seems like a lot of work, then questions need answering about the value of the feature in the first place. Seriously, what is the value of this feature?
I understood the feature as part of making PWAs able to replace the need for native apps. When browsers started supporting push notifications, I used the service to send public transit alerts to users who opted into them.
> Were you pressured into it by ad companies? Why is the feature so open to abuse?
Native apps can be removed from stores, and Google/Apple would (I assume) drive the lion share of notifications thorugh their servers, and can probably detect abusive behaviour more readily.
With browsers, I'd again assume that it's harder, as one can use any service they'd like.
Then what about Chromium where all the tracking stuff has been stripped out? Who would police that?
Two possible solutions:
1. A blocklist is maintained, similarly to malicious websites. Don't know if flagging a website abusing notification marks it as malicious overall, but at least with malicious websites the user wouldn't even see the website.
2. If a user dismisses notifications and never opens them, perhaps the browser can take initiative and block them permanently.
----
I'm responding mainly with experience of spam on family's phones, I fortunately don't have elderly family who use PCs.
- lloydatkinson 4y ago> are the notifications not meant to be encrypted? Such that the browser vendor can't see the contents? No, the Windows API's for showing the notification (or for any OS) are going to need to know the text to render and the image to display, which is information the browser will have to tell those API's. > send public transit alerts Probably the only legitimate use case I've heard but I've personally used apps from the transit companies for this.
- pjc50 4y ago> wouldn't it cause issues if your browser vendor is now "reading your messages"? This doesn't make sense. The browser sees everything that passes through the browser, by definition.
- dpkirchner 4y agoTo filter out spam notifications, the browser would need to forward notification contents to the vendor. The filtering can't be done on-device because that gives spammers direct access to the models.
- hedora 4y agoThis has been a solved problem for twenty years. Check out Thunderbird's spam filter.
- nevi-me 4y agoI'm distinguishing between displaying contents of some payload vs actively tokenising and interpreting such content. If you set up an extension that blocks notifications with the word "vanilla", what the extension would be doing to act on that notification is what I regard as "reading your messages".
- scarface74 4y agoApple’s content blocking framework doesn’t allow the extension maker to know what you browse. It sends a json file to Safari with regex expressions for Safari to block.