Deleted Signal messages can sometimes be recovered from an iPhone because iOS stores notification previews in a system-level database rather than from Signal’s encrypted storage. FBI forensic extraction of lock-screen notification fragments yielded incoming message remnants used as evidence in the Prairieland ICE Detention Facility case. #Signal #PrairielandICE
Keypoints
- Forensic tools recovered incoming Signal message fragments from iOS notification storage, not Signal’s encrypted database.
- Only incoming messages that triggered notification previews were recoverable; outgoing messages were not found this way.
- The issue stems from iOS notification handling, meaning other messaging apps that show previews may be similarly affected.
- Disabling message previews or hiding content in notification settings reduces the risk of leftover message snippets.
- Researchers recommend using tools like AuRevoir to clear cached notification data when permanent deletion is required.
Read More: https://thecyberexpress.com/not-a-signal-flaw-iphone-notifications/