ICEBlock climbs to the top of the App Store charts after officials slam it (www.engadget.com)
from technocrit@lemmy.dbzer0.com to technology@lemmy.world on 03 Jul 17:06
https://lemmy.dbzer0.com/post/48220789

#technology

threaded - newest

tfowinder@lemmy.ml on 03 Jul 17:24 next collapse

Expected this after recent news articles criticizing it for hurting ICE officers.

thedruid@lemmy.world on 03 Jul 17:38 next collapse

Good. I hope they’re terrified. The same as their victims

[deleted] on 03 Jul 18:36 collapse

.

Carmakazi@lemmy.world on 03 Jul 18:51 next collapse

Your wife is going to be grabbed out of your home and thrown into an unmarked SUV and you will never see her again. And you’ll let it happen because you would rather be a slave to a regime than confront the fact that you’re wrong.

BetaBlake@lemmy.world on 03 Jul 18:53 next collapse

Obvious troll is obvious

leckiesock@lemmy.world on 03 Jul 20:40 next collapse

My dog does a better job and keeping criminals out than you leftist nutters. If controlling people’s opinions are part of your philosophy of a better society , then I’d rather live in the USA for the rest of my life.

Funny that the people who hide their face call us the cowards. Heh…

TachyonTele@piefed.social on 03 Jul 21:44 collapse

I agree. ICE are complete cowards for hiding thier faces.

gandalf_der_12te@discuss.tchncs.de on 04 Jul 07:37 collapse

I don’t think everybody who makes a bad claim is a troll. A lot of people just are that stupid.

Ulrich@feddit.org on 03 Jul 18:59 collapse

Have you not seen all the people whose legal latina wives have been abducted off the street, shoved into packed prisons and then shipped off to some random country?

TropicalDingdong@lemmy.world on 03 Jul 17:53 next collapse

We need a federated equivalent. Anything centralized can be stopped.

rottingleaf@lemmy.world on 03 Jul 18:14 next collapse

Federated application for a map with markers and notes?

It seems for me that this would be too narrow a purpose.

Maybe a general-purpose public notification map. With some functionality allowing to separate markers by their authors and by tags. Or it can be spammed with bogus markers. By tags - well, for it to be general-purpose. By authors - because moderation can’t be left to instance admins.

And, of course, I’m personally for separation of moderation, instance ownership, identities and hosting, but my own toy attempt showed me that the logic of checking the chain of privilege delegation is kinda PITA. That is, separating identities from instances is not that hard. And communities. What’s hard is the community owner delegating rights to other identities, and in general authorized actions. It’s a task of determining which privileges does an identity currently possess, and how does it affect its own actions on the community, and in which order should those be processed … Everything is harder than it seems. Sad.

So federation is fine LOL.

douglasg14b@lemmy.world on 04 Jul 00:56 collapse

Why too narrow of a use case?

Imagine federation with text linked to other text, that’d be crazy, right?

Wait, it’s actually more complicated than that 🤔


But FR using existing federated protocols to build something like this is EXACTLY what the protocols are for. You don’t need to implement the federation yourself, you can use an existing network

Max_P@lemmy.max-p.me on 03 Jul 19:21 next collapse

At the very least I hope it’s hosted by someone outside the US so it’s out of reach to the authorities.

Corkyskog@sh.itjust.works on 03 Jul 19:43 collapse

For all we know the app might just be a honeypot itself

andrewrgross@slrpnk.net on 03 Jul 20:19 collapse

This is a genuine concern that we should recognize.

I’m about 99% confident it isn’t, but considering it is the kind of caution we should all be exercising these days.

TachyonTele@piefed.social on 03 Jul 21:46 next collapse

How would we learn either way if it was or wasn't?

douglasg14b@lemmy.world on 04 Jul 00:55 next collapse

When the feds come for you for using it

jawa22@lemmy.blahaj.zone on 04 Jul 12:48 collapse

Someone knowledgeable enough would be able to figure out where every upload is going, I’d wager. But that would take Someone that is knowledgeable enough, as well as willing to expose an app like that given the potential consequences.

douglasg14b@lemmy.world on 04 Jul 00:54 collapse

  • Is it open source? (No)
  • Is it’s publishing and build pipeline open? (No)
  • Can anyone audit it? (No)
  • Does the author make unreliable claims of privacy? (Yes)
  • Does the author detail how data privacy and security is implemented? (No)

It’s probably not a honeypot. But it’s also likely to be negligent enough in implementation that it might as well be.

echodot@feddit.uk on 04 Jul 15:08 collapse

Federation is an overly complicated solution it’s not required. It also wouldn’t actually help, they can still take it off the app store there’d be another one but they would just play whack-a-mole and you can achieve the same thing with open source.

The best bet would be to have the database hosted outside the US and just have apps that pull the data from an API. There’s no need for the app itself to store the data in fact that’s a really stupid way to do it. You could federate it if you wanted but honestly that’s probably unnecessary

pineapplelover@lemmy.dbzer0.com on 04 Jul 15:44 next collapse

Honestly yeah, if we can just torrent the database and have it stored outside the U.S then it’s good

Enkimaru@lemmy.world on 05 Jul 00:19 collapse

Facepalm. If the App does not store the data in a 5 mile radius … how do you at least see the latest status when the power and internet is down?

echodot@feddit.uk on 05 Jul 06:01 collapse

I can’t tell if you’re serious or not.

If the internet is down then I don’t have access to the app store. Also if the internet’s down then the data is going to be out of date almost immediately anyway so any cached version would be useless.

floofloof@lemmy.ca on 03 Jul 17:56 next collapse

She said that there’s been a 500 percent increase against ICE agents who are just “trying to do their jobs and remove public safety threats from… communities.”

Exactly what the Nazis who ran extermination camps claimed.

RobotZap10000@feddit.nl on 03 Jul 19:55 next collapse

“Just following orders…”

griff@lemmings.world on 03 Jul 23:01 collapse

Unjust, following orders

natecox@programming.dev on 03 Jul 21:15 next collapse

I loathe and despise using percentages like this.

500% sounds super scary, but is meaningless without providing the baseline. If there was only one instance before and now there’s 5 it isn’t a significant increase but 500% sure sounds scary.

tabular@lemmy.world on 03 Jul 23:11 collapse

Worse still it’s not even clear what is being discussed. It implied “violence” but that is a wide range from just pushing to serious shooting.

% can also be misleading when a scale is arbitrary. A temperature increase measured in Fahrenheit will be a rather different % when converted to Kelvin.

Bronzebeard@lemmy.zip on 04 Jul 15:38 next collapse

ICE also keep getting caught on camera lying about being threatened before they start beating some innocent

floofloof@lemmy.ca on 04 Jul 16:58 next collapse

We all know that cops will try to charge you with assaulting them if you so much as shrug while being arrested. And they’ll contrive situations just so they can do that. I’d say that makes their statistics meaningless without specific details and proof.

Mamdani_Da_Savior@lemmy.world on 04 Jul 23:37 collapse

Sadly I haven’t heard of any ICE officers getting shot in the line of duty.

cupcakezealot@piefed.blahaj.zone on 03 Jul 23:12 next collapse

someone on bsky did the match and found out that 700% increase is still only like 70 incidents (i forget who it was that posted it)

drmoose@lemmy.world on 04 Jul 03:00 next collapse

It’s so blatant as if theyre using an instruction manual or something 🤔

Mamdani_Da_Savior@lemmy.world on 04 Jul 23:37 collapse

Stephen Miller is basically a Nazi

KingPorkChop@lemmy.ca on 04 Jul 23:57 next collapse

Stephen Miller is basically a Nazi

He’s a fucking JEWISH Nazi - which is the worst kind of self loathing Nazi.

He’d be the first in the showers when the real Nazis come to town.

He’s a pathetic loser.

MrSelatcia@lemmy.world on 05 Jul 00:15 collapse

Stephen Miller is exactly a Nazi

frenchfryenjoyer@lemmings.world on 04 Jul 23:58 next collapse

Exactly. Basically "wahhhh this is making it harder for the kidnappers to kidnap people!! stop using the app they’re just trying to do their jobs pls feel sorry for them 😭 "

Pendorilan@lemmy.world on 05 Jul 02:06 collapse

Well, when you kidnap people in the street assaults against you can happen.

Rentlar@lemmy.ca on 03 Jul 18:10 next collapse

Clearly it’s just safety minded individuals acquiring it. This app helps keep communities safe from unmarked armored vehicles filled with masked criminal cop impersonators.

Exeous@lemmy.world on 03 Jul 18:22 next collapse

stopice.net

Ulrich@feddit.org on 03 Jul 19:06 next collapse

Send & Receive alerts about ICE raids and activity in your area. Stop ICE Alerts Network works with technology already built into your phone without the need to download an app.

This is the way.

Zron@lemmy.world on 03 Jul 21:15 collapse

You’ve still got to connect to their servers and they can monitor who connects to what.

I wouldn’t trust it without a non-US based VPN. We should assume anything in the US is compromised by the fed, and that they are watching.

Ulrich@feddit.org on 03 Jul 21:17 collapse

they can monitor who connects to what.

They can also not do that.

We should assume anything in the US is compromised by the fed

International VPNs are not immune from US subpoena.

Zron@lemmy.world on 04 Jul 12:26 collapse

international VPNs are not immune from US subpoena

And condoms are only 98% effective.

A condom and VPN work on the same principle: a layer of protection. No protection is ever 100% effective, but you can at least try.

Remember, they’re already building the camps. It’s only a matter of time before “helping illegals” is a crime that gets you sent to the camps. I’d rather make the fascists work for it at least.

Ulrich@feddit.org on 04 Jul 17:15 collapse

And condoms are only 98% effective.

Your analogy doesn’t make sense. It would be more apt to say “condoms from Walmart can be compromised!” but it makes no sense because they can be compromised anywhere. If you think shopping somewhere else means they won’t be compromised, that’s not logical.

It’s not to say that you shouldn’t use them, it’s to say that you shouldn’t judge them based on the geographical location they’re acquired.

dubyakay@lemmy.ca on 03 Jul 22:10 collapse

Stop lice!

JoMiran@lemmy.ml on 03 Jul 19:11 next collapse

<img alt="" src="https://lemmy.ml/pictrs/image/39cf27fe-4feb-42e4-a3a2-14bf8996d845.jpeg">

three_trains_in_a_trenchcoat@piefed.social on 03 Jul 19:18 next collapse

"He's giving a message to criminals where our federal officers are," Bondi said. "...we are looking at it, we are looking at him, and he better watch out, because that's not a protected speech. That is threatening the lives of our law enforcement officers throughout this country."'

Actually, I believe it is protected speech. There are apps that let people know where speed traps are. You mean it's not constitutionally protected to say to someone "hey, did you see the cop down on the corner?" Ridiculous. Of course, what she means to say is that the constitution doesn't matter and laws are made up now, and they're just going to do whatever the fuck they want. They're just not quuuuuite ready to go through the trouble of literally setting the constitution on fire yet.

Enkimaru@lemmy.world on 05 Jul 00:17 collapse

It is definitely not constitutional protected free speech. Because constitution has nothing to say in this matter. On the other hand there is no law restricting such speech either. Making a law against it, that is valid under the constitution, would be tricky however.

aramova@infosec.pub on 05 Jul 02:23 collapse

Making a law against it, that is valid under the constitution…

The part that says…

Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assem- ble, and to petition the Government for a re- dress of grievances.

Make a law against the part that says not to make a law against it?

I mean, it’s idiotic and on message for Trump.

ScrambledEggs@lazysoci.al on 03 Jul 20:57 next collapse

Is there an android version?

[deleted] on 03 Jul 21:13 next collapse

.

dataprolet@lemmy.dbzer0.com on 03 Jul 21:22 next collapse

This is not true. bsky.app/profile/grapheneos.org/…/3lt2prfb2vk2r

Arcane2077@sh.itjust.works on 03 Jul 21:27 next collapse

Which part? Are you saying they have made an android version?

dubyakay@lemmy.ca on 03 Jul 22:06 next collapse

No, they are saying that Android and Apple both have a privacy issue on the same level.

Ulrich@feddit.org on 04 Jul 01:46 collapse

It’s not on the same level. Android at least provides the option of using an alternative notification system, and also supports downloading apps from anywhere. Including places that don’t require an account.

Zak@lemmy.world on 03 Jul 22:08 collapse

The link in the comment you’re replying to says which part is not true, but since you seem more willing to comment than to click a link and read, I’ll summarize:

The part about the Apple Push Notification service requiring less information that can identify an individual user than Google’s Firebase Cloud Messaging is not true. Both use a similar token system. Furthermore, it is possible to build android apps with notifications that do not use FCM.

cupcakezealot@piefed.blahaj.zone on 03 Jul 23:10 collapse

they probably want to also make it as easy as possible for those who aren't technologically savvy or whose native language isn't english, though

Zak@lemmy.world on 03 Jul 23:41 next collapse

Maybe they want that, but the statement on their website is not wrong on a technicality because it’s oversimplified; it’s wrong because it asserts a privacy difference between the two operating systems that does not exist.

NotMyOldRedditName@lemmy.world on 04 Jul 07:20 collapse

It’s actually not possible to build a push service like FCM or APNS on Android and have it function at the same level as FCM. FCM has special permissions to bypass certain device states on the device to ensure message delivery that nothing else can match.

The best you can do is approximate it with an always active websocket and a foreground service always running with battery optimizations disabled, but good luck not having that foreground service shut down on occasion as well. Devices are hostile to them for battery saving purposes. You’d have the best luck with a Pixel device though for something like that. You could also do some sort of scheduled background polling, but the device can be hostile to that as well, and it would eat more battery.

bent@feddit.dk on 04 Jul 13:17 next collapse

Yes, I used web sockets for Signal for a while. It drained 30% of my battery when the phone sat idle for a day. Absolutely bonkers. Made the phone almost unusable so had to revert to FCM or disable notifications.

NotMyOldRedditName@lemmy.world on 04 Jul 19:17 collapse

Ya, it can be brutal on battery.

I worked on an app once where delivery was critical, so we gave them the option of the active service+websocket, but for them the trade off was acceptable.

Pushes can be pretty flakey given all the shenanigans OEMs do on the device, even when marked as high priority correctly.

And the even worse part is when OEMs reset battery saving flags the user had set to help pushes get through and they stop working one day because of it.

Zak@lemmy.world on 04 Jul 20:59 collapse

It’s true that FCM will result in more reliability and a better UX than other ways to implement notifications. Doing something else is still the right choice for certain use cases, such as those where privacy or keeping the entire codebase open source are top priorities.

NotMyOldRedditName@lemmy.world on 04 Jul 23:29 collapse

Ya, for sure. My beef was just with people saying you can roll your own, but glossing over the reduced user experience and reliability if you do.

With those trade offs it’s absolutely doable and makes sense for certain situations.

Ulrich@feddit.org on 04 Jul 01:45 collapse

Then don’t claim the reasoning is anonymity.

Enkimaru@lemmy.world on 05 Jul 00:33 collapse

Well, who knows what is true and what not. I never knew that Push Notifications go via Apple, and not via the network operator. Definitely wrong is GraphenOS’s claim that Android does not allow access to the device id. Of course it does. For what reason would the ID exist if it does not? No idea if you need it for a FB message/notification though.

Ulrich@feddit.org on 05 Jul 00:56 collapse

who knows what is true and what not.

Lots of people do.

Definitely wrong is GraphenOS’s claim that Android does not allow access to the device id.

That’s not what it says.

No idea if you need it for a FB message/notification though.

There has to be a way for Google/Apple to know which device to send the notif to.

Empricorn@feddit.nl on 04 Jul 01:30 collapse

Incompetence is not a “privacy implication”. You think Apple servers are beyond reach of US warrants?

swelter_spark@reddthat.com on 04 Jul 23:25 collapse

Fire works on Android and is meant to do basically the same thing. I saw someone post it in another thread, but haven’t explored it in depth.

dataprolet@lemmy.dbzer0.com on 03 Jul 21:22 next collapse

The devs don’t really seem to have a clue about smartphone.
bsky.app/profile/grapheneos.org/…/3lt2prfb2vk2r

douglasg14b@lemmy.world on 04 Jul 00:49 next collapse

Lol, called it.

Incompetence and false bravado is all but guaranteed with development teams. Especially when it’s closed source, not audited, and has minimal room for feedback loops.

NotMyOldRedditName@lemmy.world on 04 Jul 07:12 collapse

You don’t even need to audit a closed source app to know that Apple knows which devices its sending pushes to. It works because they know.

Enkimaru@lemmy.world on 05 Jul 00:14 collapse

And how would they know that? That would mean push notifications would go via an Apple Server. Wich a) makes no sense b) can be masquerade so that the server does not know who talks to whom c) the meta information and the notification can be deleted timely

On the other hand, I guess most Android “low level” peer to peer apps go via FireBase?

NotMyOldRedditName@lemmy.world on 05 Jul 00:41 collapse

All push notifications go through APNS on apple. That’s Apple Push Notifications Service.

APNS requires the device to authenticate with it and can uniquely identify the device by an id. Its how it sends messages to devices.

Firebase cloud messaging acts the same way for true push notifications.

You don’t need to audit a device using APNS or FCM on Android to know that it is not anonymous.

Empricorn@feddit.nl on 04 Jul 01:28 next collapse

Glad others have pointed this out. Their “reasons” for not supporting 70% of worldwide smartphones via Android seemed very suspect.

[deleted] on 04 Jul 04:00 next collapse

.

InFerNo@lemmy.ml on 04 Jul 06:29 next collapse

Because visitors to the US don’t tend to be from the US, that’s only logical

Empricorn@feddit.nl on 04 Jul 12:39 collapse

Think about that for a second. Immigration and Customs Enforcement by definition involves at least one border and 2 countries. Even if they only went after American citizens (which they’re trying to do), they’d be deporting you somewhere else.

As it is, I suspect a significant number of at-risk people in the US and their advocates use Android.

NotMyOldRedditName@lemmy.world on 04 Jul 07:10 collapse

I think he thinks HE had to store the information, and if he isn’t the one storing it, it’s anonymous.

Except, on Android, you can also do it where only google stores the information and he doesn’t have to store any. And there are no user name or passwords or accounts involved to listen to specific channels like he claims.

You can collect this information, and you’d be able to write a more custom push service, but it isn’t needed at all, but Google and Apple will always know who is getting the messages.

DahGangalang@infosec.pub on 04 Jul 15:23 next collapse

Thanks for the heads up.

Saw it wasn’t on F-Droid and was going to ask for source page (to get through Obtanium), but looks like they’re allergic to android and derivates. Appreciate you pointing to references.

brucethemoose@lemmy.world on 04 Jul 15:48 collapse

…iOS forces uses Apple services including getting apps through Apple…

Can’t speak to the rest of the claims, but Android practically does too. If one has to sideload an app, you’ve lost 99% of users, if not more.

It makes me suspect they’re not talking about the stock systems OEMs ship.

Relevant XKCD: xkcd.com/2501/

Zak@lemmy.world on 04 Jul 22:17 collapse

It makes me suspect they’re not talking about the stock systems OEMs ship.

The developers of GrapheneOS, an independent, security-oriented Android distribution are probably not only talking about stock OEM Android. What they’re saying is true about stock OEM android though.

That’s a separate issue from whether users are forced to get all their software from a specific source, which is also separate from whether users will actually use other sources when given the option.

On Android, developers can offer users a way to install an app that isn’t easily traced to their identity and on iOS they can’t. Furthermore, an Android app can be both on the Play store and available from other sources; there’s no exclusivity.

Enkimaru@lemmy.world on 05 Jul 00:09 collapse

You got that “tracked to their identity” opposite around. The reason why there is no Android App is, if the phone gets “found” the data about the user/owner is an open book.

Zak@lemmy.world on 05 Jul 00:20 collapse

This is not one of the claims made by the ICEBlock developers; their claims are only to do with notifications.

If you want to claim that a locked Android device is substantially easier for law enforcement to break in to than a locked iPhone, please cite up-to-date (from 2025) sources.

vollkorntomate@infosec.pub on 04 Jul 04:44 next collapse

Is it only available in the US App Store? I can imagine that some people who could make good use of it don’t have a US Apple ID.

[deleted] on 04 Jul 15:46 next collapse

.

HertzDentalBar@lemmy.blahaj.zone on 05 Jul 01:19 next collapse

Only good Nazi is a dead Nazi.

dastanktal@lemmy.ml on 05 Jul 01:34 next collapse

Did anyone else notice that you couldn’t use this on an Android device because it it may put the people who use it at risk?

For shame Android

Developer may not actually understand how phones work

lemmy.ml/comment/19647328

muusemuuse@sh.itjust.works on 05 Jul 06:48 next collapse

These dumb fuckers STILL haven’t figured out the Streisand effect.

plyth@feddit.org on 05 Jul 07:49 collapse

Who owns the app that gets the location data of every illegal immigrant? Maye they do know the Streisand effect.

muusemuuse@sh.itjust.works on 05 Jul 08:01 next collapse

There are easier ways to get that data without having to trick people into downloading an app. Trump has palantir and Israel in his pocket. He already knows where they all are. The app just lets us all know where they are.

Trump doesn’t like playing a fair game because he can’t win those.

mriswith@lemmy.world on 05 Jul 13:54 collapse

While you’re right to be skeptical, if they just wanted to collect data they would have an Android version. And their stated reason for not supporting it, is that push notifications on Android would require them to at store device-IDs, which they want to avoid for privacy reasons and being vulnerable to subpoenas.

OceanSoap@lemmy.world on 05 Jul 07:12 collapse

Yeah, but I think it’s also because Republicans are downloading it and using it to spread fake ice raid claims, to confuse. So, I don’t think the numbers are necessarily because people hate ice or whatever.

Guess we’ll see.