News for hackers. Stuff that matters.

A comment on Apple fixes bug that cops used to extract deleted chat messages from iPhones. Parent comment

Re:Apple fixes bug that cops used to extract deleted chat me... by Permik on Thursday April 23, 2026 @04:07AM (#47873304)
But in the real world, for maximal battery savings and therefore UX, routing any notification data via APNS is recommended.

Fortunately you can choose the payload by yourself and just send a notification "ping" without any data about the messages. But if we're serious about security, you just don't ping the client about new messages because even the time and existence of a notification can be compromising. _The user will know that they got a message, when they open the app and see that they got a new message._

[ Parent | on HN ]
Re:Apple fixes bug that cops used to extract deleted chat me... by sneak on Friday April 24, 2026 @07:42PM (#47897148)
Routing e2ee notification data via APNS is fine, it’s no different than routing e2ee notification data via HTTPs. Your ISP sees the outer ciphertext in both cases (APNS is also mTLS).
[ Parent | on HN ]