Apple fixes bug that cops used to extract deleted chat messages from iPhones

Apple has rolled out a crucial software update for iPhones and iPads, rectifying a vulnerability that permitted law enforcement to retrieve messages that users thought were permanently deleted. This issue stemmed from the caching of message notifications, which could linger on devices for up to a month, even after the messages themselves were erased from messaging applications. In a security notice posted on its website, Apple acknowledged that the flaw allowed 'notifications marked for deletion could be unexpectedly retained on the device.' This announcement follows a report by 404 Media, which revealed that the FBI had successfully extracted deleted messages from the Signal app on an iPhone by leveraging forensic tools. The extraction was made possible due to notifications that had displayed the message content and were subsequently stored in the device's database. Meredith Whittaker, president of Signal, emphasized the importance of addressing this issue, stating, 'Notifications for deleted messages shouldn’t remain in any OS notification database.' Her comments came in response to the revelation of the security flaw, prompting Signal to urge Apple to take action. While the reason for the initial retention of notification content remains unclear, Apple's swift response suggests it was an oversight. The company also backported the fix to users of older iOS 18 versions. Privacy advocates expressed concern over this vulnerability, particularly as it poses a risk to individuals who rely on secure messaging features, including automatic message deletion. Messaging apps like Signal and WhatsApp offer users the ability to set timers for message deletion, a crucial feature for maintaining privacy, especially for those who may face scrutiny from authorities.