In December 2023, a U.S. Senate investigation revealed that governments worldwide have been demanding push notification records from Apple and Google to surveil smartphone users, including tying anonymous messaging accounts to real identities. For years, privacy engineers dismissed this attack vector as unsolvable, since mobile operating systems require routing through platform servers. MIP-05, a new specification for the Marmot Protocol, proves them wrong: by encrypting device tokens with probabilistic encryption and delivering notifications through gift-wrapped Nostr events, it makes push notifications functionally anonymous. If you care about private communication, this is the specification you need to understand. The specification is currently in draft and open for review: View article →

Replies (5)

Interesting info. It is wild how all this companies are obsessed with information. Also, I have always been curious on how they store the information. If your mobile phone is always listening you, the accumulated information over time must be insane. How do they store it? Do they burn some information? Do they just keep a piece of it? #asknostr
Where is the link to the U.S. Senate investigation? Oh, https://www.reuters.com/technology/cybersecurity/governments-spying-apple-google-users-through-push-notifications-us-senator-2023-12-06/ and I have often wondered about those calls from unknown numbers where even if I say "hello" it's a non-response. A call answered like that can give a lot more information than cell tower ping records, I guess.