this started as a zulip problem and turned into a deep dive on how push notifications actually work on mobile, what data google and apple get to see, and why even metadata alone is a privacy concern.
full blog post coming soon.
why even signal knocks on google & apple's door
·44 words·1 min
Related
when your privacy service leaks everything
·981 words·5 mins
found a critical vulnerability in an address-hiding service. every customer’s real address was in the html source.
the zulip saga, part 1: how a messenger sent me down a rabbit hole
·306 words·2 mins
zulip mobile app doesn’t send push notifications reliably. so i built my own notification app and discovered how broken mobile push infrastructure really is.