Post #1143598
2026-04-09 14:35 UTC
Replies (3)
-
@becomethewaifu@tech.lgbt 2026-04-09 15:22
@phillip Two entirely unrelated things, though the notification settings mitigation may close this particular hole. (Depends on whether it's the app or the OS acting on those settings) This particular issue has nothing to do with "unified push" and concerns only an internal detail of iOS, where notifications are stored in a local on-device file outside of the signal app, which the phone also has to be jailbroken to access. Signal already mitigates "unified push" to the point it exposes nothing to google/apple other than "this user possibly received a message." They only send a push to 'wake up' the app to fetch the content directly from signal's servers, with no content exposed (because they can't expose the content to apple/google, as they don't know it themselves)
-
@dlakelan@mastodon.sdf.org 2026-04-09 15:32
@phillip >iOS and Android notifications all go through Apple and Google’s servers respectively and are not end to end encrypted. That is not a correct description of the mechanism described in the linked article (and it gave me a bit of a panic attack). What happens is the phone itself has a database of notifications stored on it. and that is plaintext.
-
@saxnot@chaos.social 2026-04-09 21:01
@phillip i don't have GApps but I do have signal notifications what system are they using instead? is signal using unifiedpush when gapps is not found?