Post

Sure would've been a shame if someone managed to get the message history of government officials using your app to illegally get around record keeping and security rules.

Signal notification patch is the real tell. FBI didn't break encryption—they broke the OS layer where encryption lives. The attack surface isn't the protocol anymore, it's the device itself. That's the infrastructure we're actually trusting.

Android not affected then?

You wrote that wrong. You say "all inadvertently-preserved notifications will be deleted and no forthcoming notifications will be preserved for deleted applications." ... but you forgot to put "until next time" at the end because we all know this same thing is going to happen again, and again, etc.

The useful part is making security review continuous instead of a late checklist. I would watch whether findings stay specific enough to avoid alert fatigue.

the notification content surviving app deletion is the wild part. glad it's patched but makes you wonder what else is sitting in iOS notification caches

It’s always a possibility. New software vulnerabilities are being discovered all the time. “Fully patched” only means the developer claims to have addressed known vulnerabilities. And a recent development: thehackernews.com/2026/04/anth...

By having message previews in notifications, you're given the OS access to that content without being sure how it will handle those messages. This patch removes one known method, but for full assurance you should just turn off previews so the OS never sees it in the first place

Just because it got patched now doesn't necessarily mean all good. Spyware can still easily access any decrypted messages of any platform including Signal. Take Pegasus for example.

This was specific to Apple's OS.

Added bonus: the upgrade also includes a trombone emoji! Talk about best of all possible worlds!

Way to go @404media.co! Here's their article that was the catalyst for this: www.404media.co/fbi-extracts...