News for hackers. Stuff that matters.
Re:UnifiedPush: A decentralized, open-source push notificati... by EGreg on Thursday December 22, 2022 @12:12PM (#34095703)
If you deliver notifications, you are always leaking metadata around timing.

A police unit parked outside a guy’s house and confirmed it was him in the real time chatroom, by cutting his internet and seeing him drop off.

If you want real anonymity on the Internet, never use push notifications. Always “pick up your mail” periodically from random endpoints on the Web.

Re:UnifiedPush: A decentralized, open-source push notificati... by michaelmior on Thursday December 22, 2022 @02:08PM (#34097155)
In theory, if you were worried about this, I think you could get around that problem by just constantly send fixed sized encrypted messages large enough to hold any potential notifications. When a notification needs to get sent, you add it to the next outgoing encrypted message. Of course, now the delay for notifications is now coupled to the rate of these messages being sent.
Re:UnifiedPush: A decentralized, open-source push notificati... by EGreg on Thursday December 22, 2022 @02:49PM (#34097690)
The messages can still be traced to the client picking them up. Cut their networking and the client doesn’t receive the messages anymore… this shows up as a bounced message.

You can accumulate encrypted messages at random urls instead

Re:UnifiedPush: A decentralized, open-source push notificati... by michaelmior on Thursday December 22, 2022 @03:15PM (#34098045)
I guess I initially misunderstood what you meant by timing, but that makes sense.
Re:UnifiedPush: A decentralized, open-source push notificati... by skybrian on Thursday December 22, 2022 @08:21PM (#34101234)
If nobody in the chat room can know that you lost connectivity, that means you can't do real time chat and might as well use email instead.

Note that a similar thing happens with any two-way conversation; if an immediate reply is expected and there's no reply, it's not a conversation anymore. (For more possible reasons, though.)

Disappearances can't have good error messages if you want plausible deniability. This will make any UI much less user-friendly.

Re:UnifiedPush: A decentralized, open-source push notificati... by dismalpedigree on Thursday December 22, 2022 @03:23PM (#34098149)
This would be an interesting protocol. Almost like spread spectrum or frequency hopping in the radio space.

Have many servers who just accumulate encrypted packets and then only the host knows how to reassemble them in order and decrypt.

Could probably be somewhat realtime if executed correctly.

Re:UnifiedPush: A decentralized, open-source push notificati... by POPOSYS on Friday December 23, 2022 @03:28AM (#34103514)
Simply use free Usenet Servers via Tor and post your anonymous* PGP messages to the Usenet group alt.anonymous.messages.

*You send PGP encrypted messages via Mixmaster Remailers (via Tor) and preferably use a hashed subject (hsub) so that the intended receiver(s) can filter out their messages.

https://lists.gnupg.org/pipermail/gnupg-users/2019-March/061...

Re:UnifiedPush: A decentralized, open-source push notificati... by deroanth on Friday December 23, 2022 @10:13AM (#34106666)
> A police unit parked outside a guy’s house and confirmed it was him in the real time chatroom, by cutting his internet and seeing him drop off.

I guess I'm going off of too few details probably, but this doesn't seem like a very sound strategy to me. It's certainly not impossible that the real criminal lost internet around the same time as some suspect's was cut by the police. I know I've shown up as online to other people for up to several minutes after losing internet in real-time situations (e.g. games). I suppose police just need "reasonably likely" to take action though, not definite reasons.

Re:UnifiedPush: A decentralized, open-source push notificati... by naasking on Friday December 23, 2022 @03:53PM (#34110492)
More than that, the criminal could have been a neighbour piggybacking on his WiFi.