News for hackers. Stuff that matters.
Re:Safari is now probably the influential wild card browser ... by Google234 on Saturday March 20, 2021 @01:45AM (#26521036)
I don’t want websites to be able to send notifications to my phone. Sites abuses this and are always asking on my computer and it’s too easy to accidentally say accept.
Re:Safari is now probably the influential wild card browser ... by onion2k on Saturday March 20, 2021 @02:24AM (#26521201)
The default setting for notifications in Chrome is "Sites can ask to send notifications", but you can set that to false in "Preferences > Privacy and security > Site settings > Notifications" and you'll never see the browser popup again.

This is a feature that Chrome has had for about 6 years. The fact you haven't discovered it shows Chrome's UX could be better, but the fact you haven't searched for it might alsp show that the popups aren't quite such a problem for you after all.

Re:Safari is now probably the influential wild card browser ... by melq on Saturday March 20, 2021 @06:18AM (#26521996)
You don't seem to understand what "I don’t want websites to be able to send notifications to my phone." means.
Re:Safari is now probably the influential wild card browser ... by danShumway on Saturday March 20, 2021 @01:12PM (#26524480)
You'd rather install the website as a native app so that it has even more device access and then allow it to send notifications to your phone?

Is that really a cleaner, less intrusive UX for you then it would be to have an easily ignorable button next to a website's address bar that would allow you to turn notifications on or off for each website with maybe three or four clicks at max?

Re:Safari is now probably the influential wild card browser ... by oji0hub on Saturday March 20, 2021 @05:46PM (#26526301)
> You'd rather install the website as a native app so that it has even more device access and then allow it to send notifications to your phone?

I can always chose not to install an app.

> Is that really a cleaner, less intrusive UX for...

Imho it's a security question. I don't care if it's clean or less intrusive, the browser should be a sandbox.

Re:Safari is now probably the influential wild card browser ... by danShumway on Saturday March 20, 2021 @07:56PM (#26526999)
> I can always chose not to install an app.

Sure, but I can also choose not to use a website or service. If a set of features is only available in a specific medium (whether that's a website or an app) your choice is the same -- you either use it in that medium or you don't.

> the browser should be a sandbox.

This is an interesting point, because I do get where you're coming from, but I almost draw the opposite conclusion from the same data. The browser is a sandbox, so I want to put things in it. I refuse to install a native app to check my bank balance or post on social media, I don't trust those companies with that level of access to my phone.

The browser is a better sandbox than my native device, and notifications don't really break the browser sandbox in any significant way. So if (as heavyset_go suggests) notifications are the difference between having an app built in the sandbox or out of it, then I want notifications, because I want the app to be built in the sandbox.

If having notifications could make it feasible to use Twitter without installing an app, then great, we should do that. Or if notifications are enough that I don't need to have an email app or Matrix client installed... it's a pretty substantial win for security if I can get rid of those apps on my phone and use them as mobile progressive websites instead. Having email notifications on my phone is mandatory for me, I can't drop that feature. But is that alone a good reason to install a completely separate application that's requesting filesystem access or contact access?

Re:Safari is now probably the influential wild card browser ... by onion2k on Saturday March 20, 2021 @09:24AM (#26523063)
If you block a website sending you Chrome notifications it blocks notifications for all your Chrome installations, including your phone.

If you turn notifications off for Chrome everywhere you won't see Chrome web notifications anywhere.

If you're talking about some other way websites can send notifications to your phone then I don't think that has anything to do with Chrome. And I can't think of what mechanism you're talking about.

Re:Safari is now probably the influential wild card browser ... by melq on Saturday March 20, 2021 @10:05AM (#26523315)
My point is that the person said "I don't want websites to be able to send notifications to my phone", and then you responded by explaining how one can prevent such notifications via configuration.

That is true, but not really relevant to what he said. He didn't say "I wish there was a way to configure my browser to not send notifications to my phone".

You then followed up with a snarky line telling them the thing that bothers them doesn't actually bother them, and that wasn't great either.

Re:Safari is now probably the influential wild card browser ... by ralusek on Saturday March 20, 2021 @01:18PM (#26524522)
If I said "I don't want bears to be able to maul me in my sleep," and someone said "here's an option you can check which prevents that from ever happening," please explain to me how that failed to solve my problem.
Re:Safari is now probably the influential wild card browser ... by melq on Saturday March 20, 2021 @02:06PM (#26524819)
OP didn't say "I want to prevent chrome from sending notifications". If he did, then sure, having an option toggle would solve his problem. But that's not what he said.

He said he doesn't want chrome to be able to push notifications to his phone. Having an option to disable that feature means it is has to be possible in the first place.

Maybe I am being overly pedantic, but to me the distinction matters.

Re:Safari is now probably the influential wild card browser ... by egeozcan on Saturday March 20, 2021 @03:36PM (#26525540)
Then it should be said "I don't want Chrome pushing notifications on anyone's phone, ever".

If you want it for yourself, you can make it happen. If you change a setting that disables ALL notifications for Chrome in your Android phone, your condition is satisfied. Chrome is not able to send notifications, unless the developers find a workaround :)

I want selected websites to be pushing notifications to me through Firefox. For example ebay-kleinanzeigen. Why should I install an app for that purpose?

Re:Safari is now probably the influential wild card browser ... by melq on Saturday March 20, 2021 @03:57PM (#26525679)
I hope I'm not coming off as contentious, and I know I'm sort of beating a dead horse here, but I really feel like this distinction matters, so bear with me:

>Chrome is not able to send notifications, unless the developers find a workaround :)

Yes, it is able to send notifications. It won't (or shouldn't, at least) but it is still capable of sending notifications.

If I put my manual transmission car in first gear, it's never going to shift to second, but it still able shift to second.

Lets say I told you your showerhead has the capability to live stream your showers on youtube, but that feature has been toggled off. I'm sure you would understand if some people didn't want that to be possible in the first place, whether or not you agree with them.

> Why should I install an app for that purpose?

I'm not saying you should! I'm not arguing the merits of the original opinion, I'm simply saying there is a difference between whether an application can do something, and whether it will do something.

Re:Safari is now probably the influential wild card browser ... by egeozcan on Saturday March 20, 2021 @04:50PM (#26525983)
If you turn off notifications for Chrome, it can't send notifications. If you rip off your transmission, your car can't switch to first gear.
Re:Safari is now probably the influential wild card browser ... by oji0hub on Saturday March 20, 2021 @05:48PM (#26526308)
That's not the same thing..........
Re:Safari is now probably the influential wild card browser ... by TheAdamAndChe on Saturday March 20, 2021 @08:55AM (#26522873)
The point is that you don't represent everybody, yet the browser gives you a choice instead of forcing you to do something.
Re:Safari is now probably the influential wild card browser ... by prepend on Saturday March 20, 2021 @09:08AM (#26522951)
The point is that few want this and Chrome make a default behavior that inconveniences lots of users.

Chrome should default not to prompt. Safari estimates that no one wants this, and I suspect they’re right.

Re:Safari is now probably the influential wild card browser ... by onion2k on Saturday March 20, 2021 @12:09PM (#26524067)
Chrome should default not to prompt.

It absolutely should. Making the default "never prompt" would lead to websites prompting users to modify their preferences and change security settings. We do not want to normalize that behaviour. It would be a security nightmare. The defaults might be a little annoying for users (who can switch it to never prompt if they want to) but keeping average users who do want email or chat notifications safe online should take priority.

Re:Safari is now probably the influential wild card browser ... by prepend on Sunday March 21, 2021 @07:15AM (#26529609)
I don’t think average users want email or chat notifications.

And I don’t think web sites would prompt this as they don’t on Safari and that works out ok.

I think Chrome defaults stuff that Google thinks makes advertisers more money and Google more money. Safari defaults stuff that Apple thinks users want.

Re:Safari is now probably the influential wild card browser ... by visarga on Saturday March 20, 2021 @03:41AM (#26521476)
Yeah, it's an old "feature" that makes me immediately close the site and never come back. The culprit is usually a random newspaper.
Re:Safari is now probably the influential wild card browser ... by heavyset_go on Saturday March 20, 2021 @02:06AM (#26521135)
> I don’t want websites to be able to send notifications to my phone.

You might not, but our users requested desktop and mobile notifications. The notifications let sick patients know when their prescriptions are ready, facilitate care-provider check ups, etc.

Re:Safari is now probably the influential wild card browser ... by watermelon0 on Saturday March 20, 2021 @02:47AM (#26521298)
PWA cab be 'installed' to the device, similarly to 'Add to home screen' option.

It would be reasonable to allow notifications only to installed PWA, and not just any website you visit.

Re:Safari is now probably the influential wild card browser ... by mrtksn on Saturday March 20, 2021 @04:59AM (#26521734)
It seems like the that’s the obvious solution at first but if you think about it, this will make every site ever to greet you with “add to home screen” popup. Just like aggressively trying to make you install their app from the appstore. The number will increase since there won’t be a barrier of entry.

Then there would be people who are trying to make you "install" their PWA at any cost, then sell their install base and the buyers will simply rename the app/website to anything they want.

It can actually be another golden age for the web while making users hate their phones.

Re:Safari is now probably the influential wild card browser ... by danShumway on Saturday March 20, 2021 @01:10PM (#26524468)
Right now, if you go to any website on mobile, you get a big popup telling you to install a native app.

What would be different?

Getting asked to enable a browser feature is not more annoying than getting asked to exit the app and install a brand new native app with worse sandboxing and privacy. It's at most the same level of annoying.

Re:Safari is now probably the influential wild card browser ... by mrtksn on Saturday March 20, 2021 @02:35PM (#26525033)
There's some barrier of entry(buy an account and create documents describing your app) to have a mobile app, with PWA it will be removed and you will have every single website trying to make you "install" their web app, just like every single website is trying to take your e-mail address or make you create an account.

The app experience is almost always better because you always have more screen real estate, higher performance, better persistence and the developer has more opportunities to monetise you which eases the need to shove all the adds technologically possible into your face before you leave and never come back.

Visiting a new website in 2021 has the following installation process:

0) click a link

1) download the website. Websites are bloated these days, things jump around until you download and execute a few MB of JS, CSS, HTML and so on.

2) accept/deny tracking(usually designed to trick you into accepting)

3) accept/deny subscribing to newsletters(usually the skip button is obscured)

4) try to figure out what is this all about, trying to distinguish site element from ads

5) if you still want to continue you probably will need to create an account for anything that's beyond an article. Many times, you will need to create an account even for an article

6) after all that jazz you can actually try out the app/website or consume the article

7) if you like what you see, you need to bookmark/add to home screen

An app experiance is something like this:

0) click a link

1) see screenshots and explanation of what this app is all about, accompanied with reviews and ratings

3) if you like what you se, tap install, make a fingerprint scan or a face scan to download and open the app

4) try out the app. if you like it, it will be on your homescreen to use again. if you don't like it, you can delete it from the same place.

For both cases, any use hardware or system API you will get about the same popup asking you to give access to location/microphone/camera/bluetooth. For the mobile app the experience of managing it will be easier since it will have standardised settings in the device settings and you know the permissions are revoked when you delete the app.

For web apps you don't have an uninstall process. You need to dive into browser settings to remove history, cookies etc.

Re:Safari is now probably the influential wild card browser ... by danShumway on Saturday March 20, 2021 @02:55PM (#26525195)
What barrier of entry? We've already had notifications on the web for 6 years, and the experience isn't what you describe. It's far more common for me to run into a website asking me to install a native app than it is for me to see websites asking to display notifications. Nobody wants to be forced to install a native app to order a pizza or check their bank balance. It's better if we can do those things on a website without installing an entire application.

> The app experience is almost always better

Strong disagree. Even on iOS native apps are more invasive and have fewer privacy controls than a website does. That's why all of these websites want you to install apps. Facebook isn't asking you to install their app because it'll be a better experience for you, they're asking you to install their app because then they can request contact permissions.

> 0) [...] 1) [...] 2) [...] etc...

This is just nonsense. You're arguing that configuring a browser to default-deny permission prompts is a worse experience than getting badgered to install a completely separate application every single time you visit Reddit.

And to your point on advertising, this is a good reason to have an app environment that supports competent adblocking. Neither Safari nor iOS provides APIs to do that for websites or for native apps.

This all kind of boils down to, you have an environment with less sandboxing, less privacy, less granular permissions, and a longer install process (visit a site, switch apps, download and install a new app, switch apps again, then uninstall and clean up when you're done); but it's OK because the process of building an app is so cumbersome that a lot of businesses won't bother? This may not be the persuasive argument you think it is.

I mean, you can tell me all you want that notification prompts are worse than the current system of websites constantly asking to exit the website and install a new thing that gives them native file access to my phone, but... I browse the mobile web. I know what the mobile web is like from day-to-day experience, notification prompts are not the reason that the mobile Reddit website is annoying to use.

Re:Safari is now probably the influential wild card browser ... by hakfoo on Sunday March 21, 2021 @05:30PM (#26534274)
It's interesting that the sites that you'd expect to use notifications tend to not be the ones actually offering them. Webmail? Reddit? HN? Obvious notification cases. Legitimate ecommerce? I could see prompting for "let us send order update notifications after purchase." Don't see it there though.

Instead, I see a lot of "enable notifications to prove you're not a robot" scam fake-CAPTCHAs and a lot of newspaper/TV/media sites asking for it. Just because I want to read one article doesn't mean I'm naturally after an update every time you post anything else.

Re:Safari is now probably the influential wild card browser ... by tehbeard on Saturday March 20, 2021 @03:33AM (#26521448)
This is what I've wanted safari/iOS to do.

They'd get to claim privacy/user safety (no drive by permissions grab)

But, this eats into their walled garden money pit, so yeah it's not going to happen..

Re:Safari is now probably the influential wild card browser ... by Google234 on Saturday March 20, 2021 @02:34AM (#26521244)
Have those users download some simple app if this is so important to them. Or let them enter their phone number to get more reliable text notifications. Just because you have a good use doesn’t outweigh the all the bad abuse.
Re:Safari is now probably the influential wild card browser ... by cforrester on Saturday March 20, 2021 @02:53AM (#26521317)
> Just because you have a good use doesn’t outweigh the all the bad abuse.

Personally, this is how I feel about downloading apps to my phone for every individual service and product. I see no need to download a separate app for each individual service I'm interested in, as the potential for abuse is higher than getting the occasional notification from my browser app and visiting their website.

However, it sounds to me like the focus should be on minimizing the potential for any avenue of information delivery to be abused, not to remove or decline to add features for fear that they will be. From the user side, I'm not interested in being told by a developer, "download my app if it's so important to you." I'd probably never discover how useful a service can be if I would have to download another app to try it. From the developer side, I'm not interested in telling potential users, "you actually don't want that feature."

Re:Safari is now probably the influential wild card browser ... by Google234 on Saturday March 20, 2021 @03:03AM (#26521358)
99% of apps you download aren’t spam unlike the 99% of web notification requests that are spanmy
Re:Safari is now probably the influential wild card browser ... by cforrester on Saturday March 20, 2021 @03:19AM (#26521402)
I don't find that very convincing at all. 99% of apps I've ever used add no value beyond what a web interface could do, and most of those send me spammy notifications trying to draw me back into the app. App notification spam is a much greater problem for me and everyone I know than web notification spam, and apps pose a greater privacy and security threat.
Re:Safari is now probably the influential wild card browser ... by pmontra on Saturday March 20, 2021 @03:41AM (#26521475)
I agree, because I've become picky about what I install. I tend to use only open source apps, especially from F-Droid.

However I routinely deny notification requests in Firefox so this is not a problem. I also routinely deny the permission to use canvas image data. Firefox warns it can be used to fingerprint browsers https://support.mozilla.org/en-US/kb/firefox-protection-agai...

Sadly Apple does its best to make more money. If they allow other browser engines they'd end up selling less apps. IMHO they'll care about privacy only until it positively correlates with making money. If it will ever cost them more than it gains, they'll find a way to weaken privacy without losing face.

An example, Apple ruthlessly enforcing in app payments for small companies but bowing to Netflix, Amazon and the like. They know they would sell less phones if those apps won't run on iOS.

And that's expected. Why would a company care about you and me in this age? No more than what you and me would care about ants.

Re:Safari is now probably the influential wild card browser ... by kyriakos on Saturday March 20, 2021 @05:12AM (#26521768)
Then 99% of the websites you visit are spammers, that's a different problem.

Removing this feature from all users though is not a good solution either. Chrome allows you to block notifications from all sites so you don't have to dismiss requests anymore which seems like it would suit your needs and at the same time allow others to use this feature.

Re:Safari is now probably the influential wild card browser ... by zambal on Saturday March 20, 2021 @04:04AM (#26521554)
In my experience the usage of notifications in native apps is hardly less spammy than web notifications.
Re:Safari is now probably the influential wild card browser ... by kyriakos on Saturday March 20, 2021 @05:14AM (#26521771)
Instagram, Facebook, Twitter are the biggest offenders here. Its worse cause for these apps if you allow them the send notifications permissions you are automatically opting-in for everything and you need to use their UI to granularly remove the ones you don't want.
Re:Safari is now probably the influential wild card browser ... by endless1234 on Saturday March 20, 2021 @03:24AM (#26521417)
>Have those users download some simple app

The whole discussion is about it being unnecessary resource use to develop said "simple app" due to Apple's restrictions on mobile Safari..

Re:Safari is now probably the influential wild card browser ... by fragile_frogs on Saturday March 20, 2021 @06:48AM (#26522128)
And not everyone has the resources to build a "simple app" just for iOS.
Re:Safari is now probably the influential wild card browser ... by heavyset_go on Saturday March 20, 2021 @02:12PM (#26524866)
This is, unfortunately, the route we're going, and was addressed in the OP:

> Despite the web app working perfectly on Android and across Windows, Linux and macOS without native integration, we now must dedicate time and resources to develop an additional iOS app just so iOS users, which over half of Americans are, aren't left out.

> This is an expensive endeavor time-wise and money-wise, during a pandemic where time is of the essence and resources are stretched thin. It shouldn't be this way, but it is.

The end result is that, right now, some sick patients are punished for their wrong choice of phone or tablet because the native app doesn't exist yet, while others don't have a problem.

Re:Safari is now probably the influential wild card browser ... by kyriakos on Saturday March 20, 2021 @05:09AM (#26521765)
How is this abused when you have to opt in to get the notifications? If you opt out once the site cannot request it again.
Re:Safari is now probably the influential wild card browser ... by rsj_hn on Saturday March 20, 2021 @04:13AM (#26521591)
Can you send them an SMS? One would think that notifying someone with a phone is a solved problem that doesn't require deep phone-browser integration.
Re:Safari is now probably the influential wild card browser ... by kyriakos on Saturday March 20, 2021 @05:08AM (#26521762)
You can always disable all notifications from browser for your use case.

Personally on Android I have enabled notifications from a total of 2 sites and I find the experience quite good. I actually think its better than having to install an app for something that you rarely use just for that one time you will need to receive a notification from it.

Re:Safari is now probably the influential wild card browser ... by yunohn on Saturday March 20, 2021 @02:36AM (#26521250)
>> I don’t want

Who are you? And why does only your absolute opinion matter, when others are asking for a choice?

Re:Safari is now probably the influential wild card browser ... by Google234 on Saturday March 20, 2021 @02:44AM (#26521276)
I’m the same as the the users of Firefox who deny 99% of notifications https://blog.mozilla.org/futurereleases/2019/11/04/restricti...

We are the the 99%

Re:Safari is now probably the influential wild card browser ... by onion2k on Saturday March 20, 2021 @02:59AM (#26521342)
99% of notification requests being blocked is not the same as 99% of users blocking notifications. If every user visits 100 sites and accepts notifications from one of them, then 100% of users actually want notifications despite 99% of requests being denied.

I'm not defending stupid notification popups from some website you'll only ever visit once. Those are annoying. I'm saying you can't tell what users want unless you specifically measure exactly that. Maybe you're right and 99% of users don't want notifications, but that's not what your cited numbers show. You're drawing a conclusion from the data that isn't there.

Re:Safari is now probably the influential wild card browser ... by Google234 on Saturday March 20, 2021 @03:16AM (#26521397)
I would imagine that 99% of people wouldn’t be happy with a service that is 99% spam.
Re:Safari is now probably the influential wild card browser ... by onion2k on Saturday March 20, 2021 @03:26AM (#26521421)
Again though you're making assumptions that the data can't back up. If a site asks to send me notifications and I say no that doesn't make the notifications spam. That just means I don't want to see them for some reason.

And besides, for something to be spam you need to actually see it. In the case of notifications if you deny the permission on a site you don't see the notifications. That's the perfect spam filter. Imagine a world where people could only send you email if you explicitly said you accepted it from them. Or if robocallers could only call you if you agreed first. Spam would be over. There would be no spam. That sounds fantastic.

Re:Safari is now probably the influential wild card browser ... by rpdillon on Saturday March 20, 2021 @01:29PM (#26524598)
Email _is_ 99% spam. That doesn't mean that email isn't useful, though.
Re:Safari is now probably the influential wild card browser ... by Google234 on Sunday March 21, 2021 @10:08AM (#26530562)
Somehow, by the time it reaches any of my multiple inboxes it’s not 99% spam
Re:Safari is now probably the influential wild card browser ... by rpdillon on Sunday March 21, 2021 @08:19PM (#26535401)
TL;DR: I'd like to see web notifications improved rather than abandoned because I think they are part of a suite of features that could provide important competition for native apps on mobile devices.

> Somehow, by the time it reaches any of my multiple inboxes it’s not 99% spam

Right. Email providers didn't fix spam by throwing away the ability to send unsolicited messages, they fixed it by looking at the behavior of bad actors and blocking it, and evolving the UX of email services to adapt ("Report Spam" buttons and the like). My comment above was intended to suggest that rather than demanding the industry throw out the feature that would allow a website to send notifications at all, they can instead invest in making the experience more streamlined for the user (fewer notifications, less intrusive request flow). They could even use some of the same techniques used in fighting spam, like allowing users to report sites that are abusive in how they ask for permission.

The subtext here is that I think progressive web apps have the potential to foster a more open online culture than can be achieved through app stores alone, and they also give the user more control over the experience, since they leverage the browser, which is a "user agent" in a way that that apps rarely (if ever) achieve. Adopting a stance that solidifies the current inadequacies of web apps pushes more users and developers to "app store apps", which tilt the balance of power towards app store owners and away from users and developers. I think that trend has already caused problems (Spotify, Fortnite, Librem Tunnel[0], etc.), and I don't see any reason the problems will lessen in the future.

[0]: https://puri.sm/posts/why-librem-tunnel-is-leaving-ios/

Re:Safari is now probably the influential wild card browser ... by GekkePrutser on Saturday March 20, 2021 @01:10PM (#26524470)
For me on Android Firefox website push notifications don't even work. I thought this was by design. Am I doing something wrong? There's a couple of sites where I really do want this.