279
Signal messages retrieved from iOS notification, as seen in Prairieland federal trial
(media.fedia.io)
TLDR: signal content in Apple notification can be retrieved even after signal app deletion.
I saw from this reddit thread: Signal messages retrieved from iPhone after uninstalling app. : signal
Referencing this news article: Pretti Killing May Affect ICE Prairieland "Antifa Cell" Terrorism Trial
The mention of signal is in court documents here: March 10: Federal Trial Day 12 - Support the Prairieland Defendants
Signal chat evidence from Sharp’s device (Exhibit 158):
Messages were recovered from Sharp’s phone through Apple’s internal notification storage — Signal had been removed, but incoming notifications were preserved in internal memory. Only incoming messages were captured (no outgoing).
That’s my biggest issue with notifications. Notifications should just notify you that something happened and you need to open the app to find out. Carrying actual data ON the notification is a no-no.
But what do I know, I’m an old developer not one of these modern vibe kiddies.
Signal already has that setting. It’s up to the user to decide their level of convenience vs security.
Yeah. It's not just signal either that could be an issue. Sure, I want my private messages to be private, but there are financial apps, business email, and many other bits of very sensitive information that could be captured in those messages
The actual notification telling you there is a message shouldn't contain the content if its sensitive, it should only carry an ID to said message, and im certain this is what signal does. Thats like the most utter basic thing about notifications.
Once that notification arrives, the system decides what to show you after fetching the message from the ID in the background. You can opt to keep that private or show it.
In this case if you opt to show it, it leaks.
A notification doesn’t have to carry any data in its payload; Signal devs could take care of that.
Signal has supported this for many years. Users can choose full content notifications, name only, or no-content notifications.
I believe what’s in the payload is not the same as what the user chooses to see. That is, it’s sent no matter what but the user can set what’s visible on the lock screen. I could be wrong though.
That's a separate OS setting. Signal itself has its own setting for which content is actually sent in the notification.
Why do you so confidently assert things which you do not know but merely believe without checking?
Did I not qualify it by saying I could be wrong? What is so confident about that? Jesus Christ, nobody asked you.
“Signal devs could take care of that”
They did like eight years ago.
You even double qualified it, prefacing with "I believe"
What an ass
That's not the problem here. Showing a notification with content is not a big deal.
In the case stated here, the big deal is that the notification HISTORY was preserved after removal of Signal. That's because both Apple and Google do the same thing. They keep a notification history. Not on a per-app basis, ALL apps notification history is stored.
I know that on Androids, it is turned off by default and you can turn it on, so you get the impression that Android doesn't have this issue. I am going to guess as I do not own an apple anything that iOS has notification history turned on by default. This is the real problem. This is not anything Signal can control for unless they were to not support notifications which would render their app useless, so that's not an option.