<![CDATA[New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted.]]>New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. Why? Because parts of messages were stored in the iPhone's internal notification database. Shows how secure chat data can come from unexpected places https://www.404media.co/fbi-extracts-suspects-deleted-signal-messages-saved-in-iphone-notification-database-2/

]]>https://board.circlewithadot.net/topic/d0386816-5bbd-4de0-9979-1afbffcc9112/new-from-404-media-the-fbi-was-able-to-extract-incoming-signal-messages-from-a-phone-even-though-the-app-was-deleted.RSS for NodeFri, 17 Apr 2026 08:36:31 GMTThu, 09 Apr 2026 13:31:37 GMT60<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 16:50:13 GMT]]>@SteveBellovin @josephcox Thank you kindly.

]]>https://board.circlewithadot.net/post/https://masto.hackers.town/users/drwho/statuses/116375775734473901https://board.circlewithadot.net/post/https://masto.hackers.town/users/drwho/statuses/116375775734473901Thu, 09 Apr 2026 16:50:13 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 16:39:43 GMT]]>@drwho @josephcox Sure.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/SteveBellovin/statuses/116375734398565274https://board.circlewithadot.net/post/https://infosec.exchange/users/SteveBellovin/statuses/116375734398565274Thu, 09 Apr 2026 16:39:43 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 16:38:05 GMT]]>@SteveBellovin @josephcox Can I quote you on that?

]]>https://board.circlewithadot.net/post/https://masto.hackers.town/users/drwho/statuses/116375727977843000https://board.circlewithadot.net/post/https://masto.hackers.town/users/drwho/statuses/116375727977843000Thu, 09 Apr 2026 16:38:05 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 16:10:04 GMT]]>@ujay68 I don't know, sorry.

]]>https://board.circlewithadot.net/post/https://hear-me.social/ap/users/115696907373093865/statuses/116375617815027449https://board.circlewithadot.net/post/https://hear-me.social/ap/users/115696907373093865/statuses/116375617815027449Thu, 09 Apr 2026 16:10:04 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 16:09:13 GMT]]>@Netraven I guess so. Wondering if iOS offers an API that Signal could (have) use(d) to completely clear its notifications from that db. I guess not so.

]]>https://board.circlewithadot.net/post/https://mastodon.world/users/ujay68/statuses/116375614485713979https://board.circlewithadot.net/post/https://mastodon.world/users/ujay68/statuses/116375614485713979Thu, 09 Apr 2026 16:09:13 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 15:44:28 GMT]]>@josephcox I thought it was obvious? Anyone who ever looked at iOS or Android logs knows that every single notification you ever received is stored in the system logs, which are transferred to new devices if you use migration assistant or encrypted backup.

It's a valid and big attack vector, that's why I personally have notifications enabled to just tell me which app it is and why i'm getting a notification, no other context. Especially since push notifications are handled by Google/Apple's servers so if you can MITM it, you can collect a lot of sensitive data.]]>https://board.circlewithadot.net/post/https://donotsta.re/objects/0b75eb6f-1914-4980-a449-d425b49e9f6chttps://board.circlewithadot.net/post/https://donotsta.re/objects/0b75eb6f-1914-4980-a449-d425b49e9f6cThu, 09 Apr 2026 15:44:28 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:41:23 GMT]]>@josephcox While obviously concerning, my first thought is if someone needs to securely communicate then perhaps a smartphone with an OS you can't fully control isn't the best tool.

Signal may have great encryption but if the host OS has known vulnerabilities or design flaws that allow for this, then what's the point?

I am certainly open to suggestions and discussion for better solutions.

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/peteorrall/statuses/116375269118528817https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/peteorrall/statuses/116375269118528817Thu, 09 Apr 2026 14:41:23 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:32:20 GMT]]>@lasagne @arrakeen_urbanite @josephcox Just yet another click baity headline from 404 media, nothing new.

]]>https://board.circlewithadot.net/post/https://freeradical.zone/users/jdoe/statuses/116375233532004577https://board.circlewithadot.net/post/https://freeradical.zone/users/jdoe/statuses/116375233532004577Thu, 09 Apr 2026 14:32:20 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:30:40 GMT]]>@josephcox

this is an old problem and as far as I remember, does not only affect iOS but all platforms incl. Android, Windows etc.

Therefore it's a good idea to disable 'preview' in all notifications for all Apps on all platforms - as far as I recall, these are already mass-intercepted in transit.

What's new to me is that iOS stores these, even after having deleted an App - begs the question, what about other platforms?

]]>https://board.circlewithadot.net/post/https://mastodon.online/users/pee/statuses/116375227002629911https://board.circlewithadot.net/post/https://mastodon.online/users/pee/statuses/116375227002629911Thu, 09 Apr 2026 14:30:40 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:26:41 GMT]]>@ujay68 @josephcox I just read the text and it seems pretty clear that it was saved in the notification databse. so....not the app. Does that help?

]]>https://board.circlewithadot.net/post/https://hear-me.social/ap/users/115696907373093865/statuses/116375211329084071https://board.circlewithadot.net/post/https://hear-me.social/ap/users/115696907373093865/statuses/116375211329084071Thu, 09 Apr 2026 14:26:41 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:22:31 GMT]]>@arrakeen_urbanite @josephcox

If these fucking blogs would not just repost and instead provide advice...
Like maybe testing how to clear that buffer.

]]>https://board.circlewithadot.net/post/https://chaos.social/users/lasagne/statuses/116375194921998932https://board.circlewithadot.net/post/https://chaos.social/users/lasagne/statuses/116375194921998932Thu, 09 Apr 2026 14:22:31 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:22:04 GMT]]>@josephcox Can we be more specific here? I can’t imagine technically that there’s a possibility of messages arriving *after* deleting the app being decrypted and stored in a device’s notification database? So this is probably about messages that arrived *before* deleting the app?

]]>https://board.circlewithadot.net/post/https://mastodon.world/users/ujay68/statuses/116375193179390653https://board.circlewithadot.net/post/https://mastodon.world/users/ujay68/statuses/116375193179390653Thu, 09 Apr 2026 14:22:04 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 14:06:50 GMT]]>@josephcox There has been some concern about security vulnerabilities and leaks associated with iOS notifications for a while, right?

]]>https://board.circlewithadot.net/post/https://twit.social/users/MisuseCase/statuses/116375133235508652https://board.circlewithadot.net/post/https://twit.social/users/MisuseCase/statuses/116375133235508652Thu, 09 Apr 2026 14:06:50 GMT<![CDATA[Reply to New from 404 Media: the FBI was able to extract incoming Signal messages from a phone even though the app was deleted. on Thu, 09 Apr 2026 13:37:53 GMT]]>@josephcox As I've long said, "you don't go through strong security, you go around it."

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/SteveBellovin/statuses/116375019416124913https://board.circlewithadot.net/post/https://infosec.exchange/users/SteveBellovin/statuses/116375019416124913Thu, 09 Apr 2026 13:37:53 GMT