Apple officially warns of ‘push notification spying’ by governments

In a statement to media Wednesday, following U.S Senator Ron Wyden’s revelation that governments are spying on Apple and Google users via push notifications, Apple said:
Apple is committed to transparency and we have long been a supporter of efforts to ensure that providers are able to disclose as much information as possible to their users. In this case, the federal government prohibited us from sharing any information and now that this method has become public we are updating our transparency reporting to detail these kinds of requests. – Apple Inc.
The company has now added language to its “Legal Process Guidelines” document addressing this issue.
“Legal Process Guidelines” via Apple Inc.:
‎

When users allow an application they have installed to receive push notifications, an Apple Push Notification Service (APNs) token is generated and registered to that developer and device. Some apps may have multiple APNs tokens for one account on one device to differentiate between messages and multi-media.
The Apple ID associated with a registered APNs token may be obtained with a subpoena or greater legal process.

‎
MacDailyNews Take: Assume that anything that can be used to identify a user, directly or indirectly, will be abused by unscrupulous government entities, advertising networks, stalkers, etc.
While the extent of U.S. government surveillance on push notifications remains unclear, one thing is certain: they have blocked Apple and Google from informing Americans about foreign government surveillance.
Two critical questions: Why is the U.S. aiding other governments in spying on its own citizens? Does this action by the government represent an attempt to circumvent the Fourth Amendment’s protection against unreasonable searches and seizures for American citizens?
By the way, the U.S. federal government today is several orders of magnitude bigger than the Founders ever intended. That it’s ballooned so wildly, and so relatively quickly, is a failure of the Founders for not installing proper guard rails and stops.
I could end the deficit in five minutes. You just pass a law that says that anytime there is a deficit of more than 3% of GDP, all sitting members of Congress are ineligible for reelection. Now you’ve got the incentives in the right place, right? So it’s capable of being done… A more effective threat would be just to say, if you guys can’t get it done, we’ll get some other guys to get it done. – Warren Buffet
But, we digress. And, still, we can’t get this song lyric out of our heads:
Livin’ in the new world
With an old soul
These rich men north of Richmond
Lord knows they all just wanna have total control
Wanna know what you think, wanna know what you do
And they don’t think you know, but I know that you do…
— Oliver Anthony, “Rich Men North of Richmond”
The December 6, 2023 letter from Oregon Senator Ron Wyden asking the Department of Justice to lift any existing restrictions around discussions of push notification surveillance, verbatim:
December 6, 2023
The Honorable Merrick B. Garland
Attorney General
U.S. Department of Justice
950 Pennsylvania Avenue, NW
Washington, DC 20530-0001
Dear Attorney General Garland:
I write to urge the Department of Justice (DOJ) to permit Apple and Google to inform their customers and the general public about demands for smartphone app notification records.
In the spring of 2022, my office received a tip that government agencies in foreign countries were demanding smartphone “push” notification records from Google and Apple. My staff have been investigating this tip for the past year, which included contacting Apple and Google. In response to that query, the companies told my staff that information about this practice is restricted from public release by the government.
Push notifications are the instant alerts delivered to smartphone users by apps, such as a notification about a new text message or a news update. They aren’t sent directly from the app provider to users’ smartphones. Instead, they pass through a kind of digital post office run by the phone’s operating system provider. For iPhones, this service is provided by Apple’s Push Notification Service; for Android phones, it’s Google’s Firebase Cloud Messaging. These services ensure timely and efficient delivery of notifications, but this also means that Apple and Google serve as intermediaries in the transmission process.
As with all of the other information these companies store for or about their users, because Apple and Google deliver push notification data, they can be secretly compelled by governments to hand over this information. Importantly, app developers don’t have many options; if they want their apps to reliably deliver push notifications on these platforms, they must use the service provided by Apple or Google, respectively. Consequently, Apple and Google are in a unique position to facilitate government surveillance of how users are using particular apps. The data these two companies receive includes metadata, detailing which app received a notification and when, as well as the phone and associated Apple or Google account to which that notification was intended to be delivered. In certain instances, they also might also receive unencrypted content, which could range from backend directives for the app to the actual text displayed to a user in an app notification.
Apple and Google should be permitted to be transparent about the legal demands they receive, particularly from foreign governments, just as the companies regularly notify users about other types of government demands for data. These companies should be permitted to generally reveal whether they have been compelled to facilitate this surveillance practice, to publish aggregate statistics about the number of demands they receive, and unless temporarily gagged by a court, to notify specific customers about demands for their data. I would ask that the DOJ repeal or modify any policies that impede this transparency.
Thank you for your attention to this pressing matter. If you have any questions or require clarification, please contact Chris Soghoian in my office.
Sincerely,
Ron Wyden
United States Senator
The post Apple officially warns of ‘push notification spying’ by governments appeared first on MacDailyNews.