Apple launched a software program replace on Wednesday for iPhones and iPads fixing a bug that allowed legislation enforcement to extract messages that had been deleted or disappeared robotically from messaging apps. This was as a result of notifications that displayed the messages’ content material had been additionally cached on the system for as much as a month.
In a security discover on its web site, Apple stated that the bug meant “notifications marked for deletion could possibly be unexpectedly retained on the system.”
This can be a clear reference to a problem revealed by 404 Media earlier this month. The unbiased information outlet reported that the FBI had been capable of extract deleted Sign messages from somebody’s iPhone utilizing forensic instruments, because of the truth that the content material of the messages had been displayed in a notification after which saved inside a telephone’s database — even after the messages had been deleted inside Sign.
After the information, Sign president Meredith Whittaker stated the messaging app maker requested Apple to deal with the problem. “Notifications for deleted messages shouldn’t stay in any OS notification database,” Whittaker wrote in a put up on Bluesky.
Contact Us
Do you may have extra details about how authorities are utilizing forensic instruments on iPhones or Android units? From a non-work system, you may contact Lorenzo Franceschi-Bicchierai securely on Sign at +1 917 257 1382, or through Telegram and Keybase @lorenzofb, or e-mail.
It’s unclear why the notifications’ content material was logged to start with, however right now’s repair suggests it was a bug.
Apple didn’t instantly reply to a request for remark asking why the notifications had been being retained. The corporate additionally backported the repair to iPhone and iPad house owners working the older iOS 18 software program.
Privateness activists expressed alarm after they discovered that the FBI had discovered a approach round a security function that’s used each day by at-risk customers. Sign, like different messaging apps resembling WhatsApp, permits customers to arrange a timer that instructs the app to robotically delete messages after a set period of time. This function will be useful for anybody who desires to maintain their conversations secret within the occasion that authorities seize their units.
Techcrunch occasion
San Francisco, CA
|
October 13-15, 2026
While you buy by means of hyperlinks in our articles, we could earn a small fee. This doesn’t have an effect on our editorial independence.
