Apple reveals 'push notification spying' by foreign governments

[jerm]

How Secure Messaging Apps Leak Sensitive Data to Push Notification Services

https://arxiv.org/pdf/2407.10589 Like most modern software, secure messaging apps rely on thirdparty components to implement important app functionality. Although this practice reduces engineering costs, it also introduces the risk of inadvertent privacy breaches due to misconfiguration errors or incomplete documentation. Our research investigated secure messaging apps’ usage of Google’s Firebase Cloud Messaging (FCM) service to send push notifications to Android devices. We analyzed 21 popula…