286
Signal messages retrieved from iOS notification, as seen in Prairieland federal trial (europe.pub)
submitted 6 months ago by to c/technology@lemmy.world
84 comments fedilink hide all child comments
 

TLDR: signal content in Apple notification can be retrieved even after signal app deletion.

I saw from this reddit thread: Signal messages retrieved from iPhone after uninstalling app. : signal

Referencing this news article: Pretti Killing May Affect ICE Prairieland "Antifa Cell" Terrorism Trial

The mention of signal is in court documents here: March 10: Federal Trial Day 12 - Support the Prairieland Defendants

Signal chat evidence from Sharp’s device (Exhibit 158):
Messages were recovered from Sharp’s phone through Apple’s internal notification storage — Signal had been removed, but incoming notifications were preserved in internal memory. Only incoming messages were captured (no outgoing).

you are viewing a single comment's thread
view the rest of the comments
[–] 54 points 6 months ago* (last edited 6 months ago) (10 children)

I learned about this a couple of months ago and I've since disabled previews in notifications. It's unfortunately the nature of how notifications are delivered to you. You should be fine by disabling message previews in your notification settings.

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 34 points 6 months ago (5 children)
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 14 points 6 months ago (4 children)

    I think on android, signal do not use Google's push notification. They simple send a dummy push, and the signal app wakes up to retrive the latest message directly from signal server.

    So Google never have your notification content. I am not sure if they do the same on iOS.

    That being said if your attack model includes people reading your notification lock screen, then you should disable showing signal notification.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 6 months ago (2 children)

    I think on android, signal do not use Google's push notification.

    Source?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 12 points 6 months ago (1 child)

    Does that actually prevent the app from sending the content through Apple’s servers or does it just prevent iOS from showing it in the notification area?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 6 points 6 months ago

    The only way apple is seeing it is when the notification is displayed. It only sees the contents of the notification itself. So it would still see who sent you a message, but it wouldn't say what it was

  • permalink
  • fedilink
  • source
  • parent
  • [–] 11 points 6 months ago* (last edited 6 months ago) (1 child)

    It's worth noting apps can avoid this on Android: https://tuta.com/blog/google-push-alternative#alternatives-to-google-push

    Any FDroid app cannot use Firebase for push notifications since it's proprietary: https://forum.f-droid.org/t/firebase-allowed-in-fdroid-apps/7540

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 7 points 6 months ago*

    It's not because of push notifications. the message is not sent to firebase, just a signal that the app should do a refresh.

    It's because the system saves the notifications apps posted to the notification menu.

    but yes. don't use firebase push notifications if you can avoid it. use a unifiedpush based system. base signal app does not support it, only molly. there are some difficulties though with that that are unique to signal.

  • permalink
  • fedilink
  • source
  • parent