TechSpot

iPhone security flaw brings dead email to life

By Justin
Aug 18, 2009
  1. If you've used a computer for any length of time, you should understand that merely deleting a file is insufficient to truly erase its existence. You might imagine a different story from a phone – you delete an email and expect it to be gone. As phones evolve into miniature PCs, however, data retention may become an issue. Thus it was interesting to read about a recently discovered flaw present on the iPhone, where it seems that even after you delete an email message it can be easily retrieved so long as you know the subject line.

    Read the whole story
     
  2. jobeard

    jobeard TS Ambassador Posts: 13,446   +324

    This is one of the issues that was discovered in the Watergate scandal -- deleted email was not 'erased' but only freed and disconnected from the email reader.
    There are two forms of client email readers:
    1) the inbox is a single file with all the messages stacked one upon the other and
    2) where the inbox is a folder and each message is in its own file.​
    When we compress our inboxes for (1), the messages in the middle get erase by moving those at the bottom up and removing those deleted.
    The old messages at the bottom however just join the HD freespace and could be recovered.
    Deleting from (2) is the same as any other 'file delete'... you can't find or see it, but it has joined the freespace per the above.
    Anyone using Domain environment with Exchange server has the bigger issue that the server has a copy AND --- the admin will be taking backups.
    Ergo: We've all lost privacy.
     
  3. Algoz

    Algoz TS Rookie Posts: 20

    Well, these phones etc are really micro-computers, no doubt. iPhone software is based on OS X. So, the deleting stuff not actually deleting stuff is going to follow the same (or at least similar) paradigm!
    And, we have evidently been warned!
     
  4. trparky

    trparky TS Rookie Posts: 70   +9

    The iPhone indexes the data on the iPhone which includes bookmarks, apps, email, SMS, address book, etc. This index is used at the search screen to allow for fast searching. The problem is that when you delete an email it isn't removed from the search index.
     
  5. This so called 'flaw' has already been discussed numerous times on other sites. It's no bug, when you delete a file in your inbox it automatically moves it to the trash bin, just like e.g. hotmail. The only thing the iphone search function does, is point to the file in the trash, when you empty your trash, it's simply gone, there's nothing to be found with search and no bug!!

    imho some people just do anything and believe anything to create some earth shattering story, when there's really nothing there at all.
     
  6. hellokitty[hk]

    hellokitty[hk] Hello, nice to meet you! Posts: 4,370   +125

    Free memory ftw?
     
  7. Darth Shiv

    Darth Shiv TS Evangelist Posts: 1,168   +176

    Sorry but you did not look at the video. The content of the message deleted was viewable. It had been deleted from trash. Search found the message that was supposedly deleted and he could use it to open the content. THAT is a bug. Search found the indexes that were in the inbox and trash.
     
  8. Darth Shiv

    Darth Shiv TS Evangelist Posts: 1,168   +176

    Yes definitely! And updating your search index tables would be handy too! (Or at least verifying the search returns indexes of valid items).
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.