mirror of
https://github.com/binwiederhier/ntfy.git
synced 2026-05-09 16:35:53 +02:00
[GH-ISSUE #1370] Getting random "goege test" notifications on iOS unexpectedly #969
Labels
No labels
ai-generated
android-app
android-app
android-app
🪲 bug
build
build
dependencies
docs
enhancement
enhancement
🔥 HOT
in-progress 🏃
ios
prio:low
prio:low
pull-request
question
🔒 security
server
server
unified-push
web-app
website
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/ntfy#969
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @plia7 on GitHub (Jun 17, 2025).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1370
🐞 Describe the bug
I'm getting sometimes unexpected notification from Ntfy with the title "goege" in bold and the body of "test", although I didn't trigger such message. This happens every few days or hours, it appears to be happening at random times but pretty consistent with the same notification header/body.
But most parts other intended notifications are pretty consistent and delivered quickly and expectedly but getting this strange notification in recent times made me concerned there might be some security compromise or something is not right. Hopefully someone could shed some light if it's a bug or some potential security concern.
💻 Components impacted
iOS Ntfy app version 1.3
ntfy_2.5.0_linux_armv7 (self hosted but using upstream-base-url: "https://ntfy.sh")
💡 Screenshots and/or logs
Thank you.
@wunter8 commented on GitHub (Jun 17, 2025):
If you're self-hosting, then it seems like someone is sending that to your self-hosted server on a topic you're subscribed to. Do you have ntfy access controls in place?
@plia7 commented on GitHub (Jun 17, 2025):
How do I check? I didn't open any router ports, so how can someone access to it?
@wunter8 commented on GitHub (Jun 17, 2025):
If everything is just running on your local network and you didn't expose your ntfy server to the Internet (e.g., using Cloudflare tunnels, Pangolin, ngrok, opening ports on your router, etc.), then this would be exceedingly weird
@plia7 commented on GitHub (Jun 17, 2025):
Is there a way to enable logs somehow to see where the notification is coming from? @wunter8 The only way to access it from an external network is through a mesh vpn called Tailscale
@wunter8 commented on GitHub (Jun 17, 2025):
Are you sure the messages are being sent to a topic on your server? Is it possible you subscribed to a topic on the public ntfy.sh instance?
@plia7 commented on GitHub (Jun 17, 2025):
It's possible, how can I check what am I subscribed too?
@wunter8 commented on GitHub (Jun 17, 2025):
If you open the ntfy app, you should see a list of topics you're subscribed to
@plia7 commented on GitHub (Jun 17, 2025):
Only the local one is showing.
Interestingly when I click on it, I don't see the mentioned notification there. I went through the last month of notifications.
So how can I get this notification outside of this topic? Could this be related to the public upstream base url that I'm using?
@wunter8 commented on GitHub (Jun 17, 2025):
upstream-base-url: https://ntfy.shis required to get instantaneous notifications from your self-hosted server using the native iOS app. However, message contents are never sent through that upstream server.If the notification isn't showing up in the list of notifications inside the app, you might have two ntfy apps installed (like the native app and the PWA)? Or maybe you subscribed to a topic on the public ntfy.sh instance and it's getting notifications through a service worker? I'm not sure. I haven't heard of anyone having a problem like this before.
The next time the notification pops up, I'd click on it and see where it takes you. (I recognize that sounds a bit dangerous. My hope is that it will open up whatever ntfy server/app/topic is sending those messages so we can get a better idea of what's going on. I'm not sure how else we can diagnose it right now)
@plia7 commented on GitHub (Jun 18, 2025):
Ok, I'm only subscribed to one topic. I only have a single app instance installed. I'm not signed to a safari web based PWA notifications. Let me see when I get it next time and click on it, see where it takes me and report back, thanks.
@plia7 commented on GitHub (Jul 1, 2025):
Hi @wunter8 - Some interesting update on this issue - I was flying the other day and my phone was in flight mode (not connected to airline wifi or any internet connection and obviously no vpn connection). Suddenly I received the same notification:
I clicked on it. It took me to the ntfy app but didn't go inside the only topic that I'm subscribed to, just the main "Subscribed topics" screen. It also didn't add this notification to the only topic that I'm subscribed to.
What do you think this could tell us? A random bug in the app? Including @binwiederhier in case he has any idea too.
Thank you.
@plia7 commented on GitHub (Jul 3, 2025):
@wunter8 @binwiederhier Ok actually I found what's causing it. It's caused by some third party tweak that does a fake notification for ntfy. I enabled it accidentally and that's where it has this title and body text confirmed. I'm disabling it and closing this ticket.
Thank you.
@wunter8 commented on GitHub (Jul 3, 2025):
I'm glad you figured it out and that it's not a problem with ntfy!
I'm curious what you mean by third party tweak, though. Are you saying there's a separate iOS app on your phone that lets you generate fake notifications that appear to be coming from another app?
I know Android can do that, but I'd be surprised if that's possible on iOS
@plia7 commented on GitHub (Jul 3, 2025):
Yes, it's possible if you jailbreak your iOS.