Nearly:
> it was the amount of detail in the content of push notifications
It wasn’t the information in the push notification. This goes via Apple’s server and is a one-bit signal that says ‘there may be some messages waiting for you, you should go and check’ (may be, because Signal sends some spurious push notifications to make traffic correlations harder).
The Signal app then gets the message and asks the local OS notification mechanism to display the notification. If the permissions are set up to display Signal notifications on the lock screen, these are also persisted in a database on iOS (I have no idea why. Is there some way of searching them?). If you’re worried about people with physical access to your device reading your messages, I would suggest that turning off the thing that shows them on the lock screen is probably a good idea.
David Chisnall (*Now with 50% more sarcasm!*)
npub13g…dk50d
2026-04-16 07:26:41 UTC
in reply to nevent1q…gsfe
Author Public Key
npub13gcwraghdcw9xzkg3tky24feu0lzkhtlt57wpdn58y4m4tyr9qdsxdk50dSeen on
wss://relay.momostr.pinkPublished at
2026-04-16 07:26:41 UTCEvent JSON
{
"id": "44c53def0c8e45ed083220e725a761545402bcad9fdca70625402450f86e6640",
"pubkey": "8a30e1f5176e1c530ac88aec455539e3fe2b5d7f5d3ce0b674392bbaac83281b",
"created_at": 1776324401,
"kind": 1,
"tags": [
[
"e",
"2eb0e4ce046031041cd876528812b90eb9d97c9f2bd546eaff5ad54c52ee6436",
"",
"reply",
"acd325d74d283498e051157f322a5359cdda6183f84969cc25869e4c9640bf19"
],
[
"proxy",
"https://infosec.exchange/@david_chisnall/116413195967938202",
"web"
],
[
"e",
"2c3adf418557a7ecef96ebe8e33a23009ee80c73992e0f1a6460476dfa77acd2",
"",
"root",
"acd325d74d283498e051157f322a5359cdda6183f84969cc25869e4c9640bf19"
],
[
"p",
"acd325d74d283498e051157f322a5359cdda6183f84969cc25869e4c9640bf19"
],
[
"p",
"9ed3d23d7ddf4580fd6647d8f4c7841810259db10359f33397ef42a064bac3e7"
],
[
"proxy",
"https://infosec.exchange/users/david_chisnall/statuses/116413195967938202",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/david_chisnall/statuses/116413195967938202",
"pink.momostr"
],
[
"-"
]
],
"content": "Nearly:\n\n\u003e it was the amount of detail in the content of push notifications\n\nIt wasn’t the information in the push notification. This goes via Apple’s server and is a one-bit signal that says ‘there may be some messages waiting for you, you should go and check’ (may be, because Signal sends some spurious push notifications to make traffic correlations harder). \n\nThe Signal app then gets the message and asks the local OS notification mechanism to display the notification. If the permissions are set up to display Signal notifications on the lock screen, these are also persisted in a database on iOS (I have no idea why. Is there some way of searching them?). If you’re worried about people with physical access to your device reading your messages, I would suggest that turning off the thing that shows them on the lock screen is probably a good idea.",
"sig": "63cc6afdeaaa55a928642a9c9b315ab6f44c017d3fca9ea58438d1eda8badb8515a2bf0d95a35217047f305835f8c919e5c03267c646655a0edc3caf77aa43e6"
}