• Ulrich@feddit.org
    link
    fedilink
    English
    arrow-up
    29
    arrow-down
    1
    ·
    edit-2
    16 hours ago

    I’m not sure if this guy is just dumb or it’s a honeypot.

    1. As mentioned elsewhere, they don’t use device ID

    2. Android is the only platform that supports alternative push methods

    3. Apple knows everyone who downloads this app, which is subject to subpoena

    4. The gov has been collecting push notification data from both Apple and Google for a long time. It would be as simple as knowing when notifications went out and then comparing timestamps to figure out who is using the app.

    5. The app is closed-source

    It would take significantly more mental energy on the part of the user but it would be far safer (which is extremely important in this specific case, as the dev agrees) to distribute through F-Droid and then use some other UnifiedPush implementation, as many Android apps already do. Anyone using this app is painting a huge target on their backs for the current authoritarian state.