Opened 6 years ago

Closed 6 years ago

#6104 closed Enhancement (wontfix)

Push Notification of new updates OR *Urgent* Message from Developers [REOPEN]

Reported by: collegeitdept Owned by: livings124
Priority: Normal Milestone: None Set
Component: Mac Client Version: 2.92
Severity: Critical Keywords: Security, malware, urgent notice, hacking
Cc:

Description

This is important & easy to implement - do not close ticket

Now that Transmission WAS hacked and LOTS of Mac users download the infected app & many are still running it - and usually do not update/ignore/not see Sparkle windows....

It should be apparent as day how important sending a PUSH NOTIFICATION out to ALL Transmission users (to the Notification Center) of an important update that all should update ASAP - OR - push notification message an Urgent Message from you the developers (that they have been hacked/malware in the wild)

Please implement

Thank you

Change History (5)

comment:1 Changed 6 years ago by collegeitdept

  • Summary changed from Push Notification of new updates [REOPEN] to Push Notification of new updates OR *Urgent* Message from Developers [REOPEN]

comment:2 Changed 6 years ago by mike.dld

  • Resolution set to wontfix
  • Status changed from new to closed

Transmission was hacked by modifying the source code. Nothing prevents the attacker from modifying it a bit more to disable notifications. I don't see any point in this if we'll have #5498 which you have also just commented on.

comment:3 Changed 6 years ago by collegeitdept

This is getting absurd. That's not the purpose of using Safari Push notifications!

The purpose is... if X event does happen.... later when the developers get control and issue a proper fix... developers can send *important* notices to *ALL* users to update immediately.

It's about *AFTERWARDS*

comment:4 Changed 6 years ago by collegeitdept

  • Resolution wontfix deleted
  • Status changed from closed to reopened

comment:5 Changed 6 years ago by mike.dld

  • Resolution set to wontfix
  • Status changed from reopened to closed

Sending push notifications is not a broadcast operation, per documentation each such notification requires device token and is thus meant for a single device (no matter if implemented in-app of via Safari). This means we'll need to manage a list of subscribed devices and then send lots of requests at once if something "important" comes up; there goes your "easy to implement".

Also, I don't think you'll be able to provide any confirmation on "usually do not update/ignore/not see Sparkle windows", will you? If users indeed are that reckless what makes you think they won't disable these push notifications as well (after all, not updating requires manual settings adjustment too)?

Note: See TracTickets for help on using tickets.