Sen. Wyden to the DOJ: Govs Gathering Push Notification Data from Google, Apple
techdirt.com
techdirt.com
1) Requiring businesses to record certain pieces of information, but keep it as business data, but not send it in realtime to the gov.
2) It declares that business data is not protected personal papers, and can collect it without a warrant.
I believe both of these concepts were codified in the patriot act.
https://verdict.justia.com/2020/06/17/the-third-party-doctri...
Behold the utter schizoid nature of your legal system citizen, and gasp!
Similarly how far can USG go in putting the screws to a provider? If you don’t comply with our desire for visibility into your network, for whatever lawful purpose where that visibility facilitates it, we are going to use contract and regulatory decision making to damage your ability to compete. CALEA doesn’t go that far but if you’re following what I’m asking here this seems to be a boot strapping attempt.
You send the notifications to Apple/Google and they send the messages out to the app users.
If you think that you are one end and the app is the other end, you likely misunderstand the system.
Some notifications aren’t encrypted and they’re obviously more exploitable.
But in this case, just the use of the unencrypted metadata is enough to narrow down people of interest. So even if you don’t know what it contains, you can still get valuable information like general location and usage patterns by effectively just observing that the notification happened and how it was handled.