{"id":12355,"date":"2026-04-24T05:03:30","date_gmt":"2026-04-24T05:03:30","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/04\/24\/fbi-extracts-deleted-signal-messages-from-iphone-notification-database-html\/"},"modified":"2026-04-24T05:03:30","modified_gmt":"2026-04-24T05:03:30","slug":"fbi-extracts-deleted-signal-messages-from-iphone-notification-database-html","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/04\/24\/fbi-extracts-deleted-signal-messages-from-iphone-notification-database-html\/","title":{"rendered":"FBI Extracts Deleted Signal Messages from iPhone Notification Database"},"content":{"rendered":"\n<div>FBI Extracts Deleted Signal Messages from iPhone Notification Database<\/div>\n<p> \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>404 Media <a href=\"https:\/\/www.404media.co\/fbi-extracts-suspects-deleted-signal-messages-saved-in-iphone-notification-database-2\/\">reports<\/a> (alternate <a href=\"https:\/\/archive.ph\/bSQhD\">site<\/a>):<\/p>\n<blockquote>\n<p>The FBI was able to forensically extract copies of incoming Signal messages from a defendant\u2019s iPhone, even after the app was deleted, because copies of the content were saved in the device\u2019s push notification database\u2026.<\/p>\n<p>The news shows how forensic extraction\u2014\u00adwhen someone has physical access to a device and is able to run specialized software on it\u2014\u00adcan yield sensitive data derived from secure messaging apps in unexpected places. Signal already has a setting that blocks message content from displaying in push notifications; the case highlights why such a feature might be important for some users to turn on.<\/p>\n<p>\u201cWe learned that specifically on iPhones, if one\u2019s settings in the Signal app allow for message notifications and previews to show up on the lock screen, [then] the iPhone will internally store those notifications\/message previews in the internal memory of the device,\u201d a supporter of the defendants who was taking notes during the trial told 404 Media.<\/p>\n<\/blockquote>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Bruce Schneier<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/www.schneier.com\/blog\/archives\/2026\/04\/fbi-extracts-deleted-signal-messages-from-iphone-notification-database.html\">Go to bruce schneier<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>FBI Extracts Deleted Signal Messages from iPhone Notification Database 404 Media reports (alternate site): The FBI was able to forensically extract copies of incoming Signal messages from a defendant\u2019s iPhone, even after the app was deleted, because copies of the content were saved in the device\u2019s push notification database\u2026. The news shows how forensic extraction\u2014\u00adwhen [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57,2442,573,98,1051,2443,1],"tags":[87],"class_list":["post-12355","post","type-post","status-publish","format-standard","hentry","category-bruce-schneier","category-databases","category-fbi","category-iphone","category-signal","category-terrorism","category-uncategorized","tag-bruce-schneier"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12355"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=12355"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/12355\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=12355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=12355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=12355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}