Technology
Wednesday, December 6th, 2023 3:42 pm EDT
Key Points
- Foreign Government Spying Concerns: U.S. Senator Ron Wyden has raised an alarm about foreign governments spying on smartphone users by compelling Apple and Google to provide push notification records. Wyden’s letter to Attorney General Merrick Garland details an investigation into allegations that government agencies have been demanding these records from the tech giants. Push notifications, including news alerts and emails, pass through Apple and Google servers, potentially providing unique insights into individual app usage.
- Government Authority to Compel Records: According to Wyden, governments can force Apple and Google to hand over push notification records, similar to other user information. However, he highlights a lack of transparency, stating that, unlike other government demands for data, information about push notification records cannot be released to the public in the U.S. Wyden urges that both companies be permitted to be transparent about legal demands they receive, particularly from foreign governments.
- Push Notification Records Details and Company Responses: Push notification records can reveal information such as which app received a notification, the time it was received, the corresponding phone, and the Apple or Google account that received the notification. In some cases, unencrypted text displayed in the notification can also be accessed. While Wyden did not specify which governments requested these records, a source confirmed that foreign and U.S. government agencies have approached both Google and Apple for information from push notifications. Apple and Google spokespersons responded, with Apple stating that the federal government previously prohibited information sharing, and now they are updating transparency reporting. Google expressed commitment to informing people about push notification record requests but did not clarify where it publishes such requests or if there are restrictions. The Department of Justice has not responded to requests for comment.
U.S. Senator Ron Wyden has raised concerns about foreign governments spying on smartphone users by compelling tech giants Apple and Google to provide push notification records. In a letter to Attorney General Merrick Garland, Wyden revealed that his office investigated a tip from last year, indicating that government agencies have been demanding push notification records from both companies. Push notifications, including news alerts, emails, and social media alerts, pass through Apple and Google servers, potentially offering insights into individual app usage patterns.
Wyden emphasized that governments have the authority to force Apple and Google to hand over these records, similar to other user information. However, he noted that, in the U.S., information about push notification records cannot be publicly disclosed. The senator urged transparency, stating that Apple and Google should be allowed to inform users about the legal demands they receive, particularly from foreign governments.
Push notification records can divulge details such as which app received a notification, the time it was received, the corresponding phone, and the Apple or Google account that received the notification. In some cases, the unencrypted text displayed in the notification can also be accessed through these records.
While Wyden did not specify which governments requested push notification records, a source confirmed that both foreign and U.S. government agencies have approached Apple and Google for information from push notifications. The requests include metadata that can potentially link anonymous users on messaging apps to specific Apple and Google accounts.
In response to the concerns raised by Wyden, an Apple spokesperson mentioned that the federal government previously prohibited the company from sharing any information, but now that the method has become public, Apple is updating its transparency reporting to include details about these kinds of requests. Google, in a statement, expressed its commitment to keeping people informed about requests for push notification records and highlighted its role as the first major company to publish a public transparency report sharing the number and types of government requests for user data.
The Department of Justice has not provided an immediate response to requests for comment on the matter. The revelations underscore the intersection of privacy concerns, government surveillance, and the responsibilities of tech companies in safeguarding user data.
For the full original article on CNBC, please click here: https://www.cnbc.com/2023/12/06/apple-and-google-phone-users-spied-on-through-phone-push-notifications.html
