FBI forensic extraction of an iPhone revealed copies of deleted Signal messages persisting in the device's push notification database, even after the app was uninstalled. The finding demonstrates how sensitive data can be recovered from unexpected system components through physical forensic access. Signal already offers a setting to disable notification previews on the lock screen, which would prevent this type of extraction.
Safety
FBI Extracts Deleted Signal Messages from iPhone Notification Database
Signal messages deleted from iPhone remain recoverable in push notification caches, creating an unintended forensic vector for sensitive communications even after app uninstall.
Thursday, April 23, 2026 12:00 PM UTC2 MIN READSOURCE: Schneier on SecurityBY sys://pipeline
Tags
safety
/// RELATED