3 ms·

Could you point to the white paper that would apply to notifications privacy? I can’t seem to find anything claiming notifications are encrypted, often the oppo

by dagmx 1y ago

Could you point to the white paper that would apply to notifications privacy? I can’t seem to find anything claiming notifications are encrypted, often the opposite.

bigyabai 1y ago
You're putting words in my mouth. I never said they were encrypted. I said that Apple deliberately misled developers about the surveillance functionality by pushing whitepapers that do not accurately describe how these systems work. This prevents developers from protecting their users and creates confusion around how Apple services operate. Even if it was E2EE - trusting Apple with proprietary crypto is like trusting Microsoft to not backdoor Bitlocker. It requires a specifically-qualified moron who doesn't respond to technical arguments and only understands marketing language.
- dagmx 1y ago
  Your literal words are > All they'll do is give us whitepapers on how things should work, which we know has been fabricated at least once in the case of Push Notification backdoors I’m asking for evidence of your own claim. Apple do not claim that everything is encrypted, they specifically call out various aspects as being unencrypted.
  - bigyabai 1y ago
    [flagged]
    - dagmx 1y ago
      Okay so you literally can’t point to the fabrication and can’t make a cognizant argument without denigrating the other persons questions or argument. Have a nice day raging into the wind.
- Spooky23 1y ago
  Respectfully, I think you’re drawing an incorrect inference. They don’t exhaustively list all risks and perils, but that risk was known to me personally and documented by Apple at least circa 2020 — I worked with some third party developers to provide options to keep potentially high risk data out of APNS messages. Similar risks exist for Google’s platform. I’m not some genius with access to arcane knowledge, but if you’re doing your job it’s part of your risk assessment. Judging by your very technical closing comment, this has no weight on your opinion, but I appreciate your taking time away from auditing Veracrypt or LUKS to read this.
  - kalleboo 1y ago
    Yeah I'm just a lowly indie iOS app developer but I remember way back in iOS 10 when Push Notification Service Extensions were introduced and one of the examples used (indeed, in the current documentation as well) was to be able to have the contents of push notifications be encrypted over apns and decrypted on-device.

by dagmx 1y ago

Could you point to the white paper that would apply to notifications privacy? I can’t seem to find anything claiming notifications are encrypted, often the opposite.

bigyabai 1y ago

You're putting words in my mouth. I never said they were encrypted. I said that Apple deliberately misled developers about the surveillance functionality by pushing whitepapers that do not accurately describe how these systems work. This prevents developers from protecting their users and creates confusion around how Apple services operate. Even if it was E2EE - trusting Apple with proprietary crypto is like trusting Microsoft to not backdoor Bitlocker. It requires a specifically-qualified moron who doesn't respond to technical arguments and only understands marketing language.

dagmx 1y ago
Your literal words are > All they'll do is give us whitepapers on how things should work, which we know has been fabricated at least once in the case of Push Notification backdoors I’m asking for evidence of your own claim. Apple do not claim that everything is encrypted, they specifically call out various aspects as being unencrypted.
- bigyabai 1y ago
  [flagged]
  - dagmx 1y ago
    Okay so you literally can’t point to the fabrication and can’t make a cognizant argument without denigrating the other persons questions or argument. Have a nice day raging into the wind.
Spooky23 1y ago
Respectfully, I think you’re drawing an incorrect inference. They don’t exhaustively list all risks and perils, but that risk was known to me personally and documented by Apple at least circa 2020 — I worked with some third party developers to provide options to keep potentially high risk data out of APNS messages. Similar risks exist for Google’s platform. I’m not some genius with access to arcane knowledge, but if you’re doing your job it’s part of your risk assessment. Judging by your very technical closing comment, this has no weight on your opinion, but I appreciate your taking time away from auditing Veracrypt or LUKS to read this.
- kalleboo 1y ago
  Yeah I'm just a lowly indie iOS app developer but I remember way back in iOS 10 when Push Notification Service Extensions were introduced and one of the examples used (indeed, in the current documentation as well) was to be able to have the contents of push notifications be encrypted over apns and decrypted on-device.