Let me get this straight...

The default setting for Signal on an iPhone allows law enforcement to see the content of all incoming messages, even after the app has been deleted? 🤔

https://www.404media.co/fbi-extracts-suspects-deleted-signal-messages-saved-in-iphone-notification-database-2/

@wdormann The default setting for the iPhone by the US company Apple is to pass messages through to their Notification functionality.

They could be retrieved by the FBI from the US company Apple's push notification database.

The US company Apple, not Signal, has a shoddy security model here.

PS: To any Apple fanboys who can't stand a single bad word about Apple, I'll block you permanently and happily if you even give a squeak.

#Apple #Signal #FBI #Fascism

@avuko @wdormann

Oh, but it's even worse than that. From TFA:

Authorities have turned to push notifications more broadly as an investigative strategy too; in June 404 Media reported Apple gave governments data on thousands of push notifications. Those were legal demands made to Apple, while the Prairieland case was about data from a device authorities had physical access to.

This suggests that your #notifications are sent home to #Apple. Why is that necessary?

I have further questions:

  • Why, and for whose benefit, were notifications stored on the phone after the #Signal app had been removed? They were useless to the other of the phone.
  • How much of this vulnerability is shared with Android phones?

@CppGuy @avuko

Apple gave governments data on thousands of push notifications

Is open to wide interpretation. Did they give information about thousands of push notifications? (i.e. metadata) (e.g. the App that sent the notification and the timestamp, and potentially account info tied to the request)

If they gave the actual notification content, then that's a whole other scandalous animal. Extraordinary claims require extraordinary evidence, and whatnot.