Live data from Hacker News

FBI used iPhone notification data to retrieve deleted Signal messages

9to5mac.com

61–70 of 322 posts

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#61
post #7

First, a critical setting for Signal users: "Signal’s settings include an option that prevents the actual message content from being previewed in notifications. However, it appears the defendant did not have that setting enabled, which, in turn, seemingly allowed the system to store the content in the database." Second, how can I see this notification history?

On android its quite easy. There is a page of a protocol address that has all notifications show. I used to have a shortcut to it. It has been years since I was on android. But it was really useful each time I did not see a notification in time. Edit: typo

> I used to have a seizure to it.

Hopefully, you meant to write "shortcut"...

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#62

Earlier quoted context omitted.

Just to clarify, this is within the Signal app settings—not the OS (iOS or Android) system settings. Critical distinction, as merely changing OS notification settings will simply prevent notification content from being displayed on-screen.

Signal should switch the default to being less verbose.

users should switch to simpleX

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#63
post #7

First, a critical setting for Signal users: "Signal’s settings include an option that prevents the actual message content from being previewed in notifications. However, it appears the defendant did not have that setting enabled, which, in turn, seemingly allowed the system to store the content in the database." Second, how can I see this notification history?

On a Pixel, I can see some history by going to Android > Settings > Notifications > Manage > Notification History

Yes, mine (the history option) is turned off. Nice opt in implementation.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#64

Earlier quoted context omitted.

Prove it.

> very bad user experience "To use the Signal desktop app, Signal must first be installed on your phone."

thank god whatsapp doesn't do that either. or telegram. or allo back in the day, or every single mobile first messaging app

The only one I can think of that doesn't require a mobile login is iMessage, because it's not a chat app, it's lock in and data theft disguised as software

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#65

I wonder why Apple doesn't 'just' delete the notification data associated with the app from the internal database when the user deletes the app? It seems like asking for problems to just keep old notification content around forever.

If it never hits flash that might work, but if it's in flash storage then the block may not be erased by the time its dumped.

I'm not sure precisely how the NAND controller responds to requests for raw data from blocks with "deleted" data. And if this would require decapping the flash.

Some flash will happily let you see the data and delay erasing it.

Generally flash is non deterministic about when blocks even those with entirely stale data are erased . It might be years before the block is reused due to wear leveling algorithms and it might retain data that entire time.

Here's hoping the controller for phones which hold sensitive data are more active

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#66

Settings > Notifications > Notification Content > Show: "Name Only" or "No Name or Content" I've had this enabled to prevent sensitive messages from appearing in full whilst showing someone something on my phone, but I guess this is an added benefit as well.

Disable Apple Intelligence summaries for sensitive app notifications too.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#67
post #4
post #2

Aren’t notifications supposed to be encrypted for Signal?

iOS stores the previously displayed notifications in an internal database, which was used to access the data. It’s outside of Signal’s control, they recommend disabling showing notification content in their settings to prevent this attack vector

They do control the content on the notification. It's a bit odd to put the sensitive text in the notification only to recommend disabling it at the system level.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#68
As an aside, I decrypted an encrypted iPhone backup using a tool from GitHub because I wanted easy access to my Voice Memo recordings.

Photos I had long deleted were still in the backup! It's quite surprising just how much is being stored by the phone.

Re: FBI used iPhone notification data to retrieve deleted Signal messages

#69
post #66

Settings > Notifications > Notification Content > Show: "Name Only" or "No Name or Content" I've had this enabled to prevent sensitive messages from appearing in full whilst showing someone something on my phone, but I guess this is an added benefit as well.

Disable Apple Intelligence summaries for sensitive app notifications too.

Given the quality of the summaries, you might want to keep them just for plausible deniability
Post reply on HN