Apple stops weirdly storing data that let cops spy on Signal chats

Apple has resolved a significant security vulnerability that allowed law enforcement to retrieve content from deleted Signal messages. Encrypted messaging apps like Signal are widely used by individuals looking to safeguard sensitive conversations from surveillance, making this issue particularly alarming for users. The problem came to light when 404 Media reported that Apple had been inadvertently storing push notifications containing fragments of encrypted messages for as long as a month, even after users deleted the messages and the app itself from their devices. This revelation stemmed from testimonies at a hearing where the FBI claimed it could extract incoming Signal messages from a defendant's iPhone, despite the app being removed. This case was notable for being one of the first instances where individuals were charged for alleged activities associated with the 'Antifa' movement, a term that has been controversially labeled as a terrorist organization by former President Trump. Following the reports, Apple confirmed that it had rectified the bug that allowed the FBI to access such data. The company advised affected users to update their devices to prevent push notifications, which Apple referred to as “notifications marked for deletion,” from being unexpectedly retained. According to Apple, these push notifications should not have been stored in the first place due to a “logging issue” that failed to properly redact the information. In a positive response, Signal expressed its appreciation for Apple’s prompt action to correct the issue. Signal stated on Bluesky that it was “very happy” with the swift resolution and acknowledged the importance of protecting users’ rights to private communication. The messaging platform reassured its users that no further action is required on their part after the update to ensure their privacy on iOS devices.