Security researchers: Deleted Safari browsing history isn’t actually deleted

Posted 13 February 2017 18:57 CEST by Jan Willem Aldershoff

When the browser history of Apple devices is cleared, it remains on iCloud for up to a year and can easily be recovered, according to research by security company Elcomsoft. This is possible because the history is hidden and not actually deleted.

“We discovered that deleting a browsing history record makes that record disappear from synced devices,” Vladimir Katalov from Elcomsoft writes on the company’s website. “The record still remains available (but invisible) in iCloud. We kept researching, and discovered that such deleted records can be kept in iCloud for more than a year.”

The company sells Elcom Phone Breaker, a forensic tool that is able to retrieve iCloud backups. After its discovery Elcomsoft added a new ability to the application that makes it possible to retrieve deleted browsing history records from iCloud.

“Safari history is synced across devices. Once you delete a record on one device, it will disappear on all other devices in a matter of seconds (or minutes), provided that those devices are connected to the Internet,” Katalov explains.  “However, those same records will be kept in Apple iCloud for much longer. In fact, we were able to access records dated more than one year back. The user does not see those records and does not know they still exist on Apple servers.”

Elcomsoft was able to retrieve browsing history records that were more than a year old but stresses that users shouldn’t worry. If their iCloud account is properly secured with a strong password and two-factor authentication it should be impossible to gain access to their data.

 



coolcolors
MyCE Resident
Posted on: 14 Feb 17 15:53
Quote:
Originally Posted by DoMiN8ToR
We've just posted the following news: Security researchers: Deleted Safari browsing history isn’t actually deleted[newsimage]http://www.myce.com/wp-content/image...x435-95x75.png[/newsimage]

Read the full article here: http://www.myce.com/news/security-re...deleted-81457/

Please note that the reactions from the complete site will be synched below.
Quote:
iCloud for up to a year and can easily be recovered
Cool just open me up would ya Apple....gives new meaning to iCloud lifespan is beyond your lifespan usage.
1 Agree

TSJnachos117
MyCE Resident
Posted on: 19 Feb 17 02:52
Yet another reason not to trust the cloud.

Quote:
Elcomsoft was able to retrieve browsing history records that were more than a year old but stresses that users shouldn’t worry. If their iCloud account is properly secured with a strong password and two-factor authentication it should be impossible to gain access to their data.?
If only that were true. If Apple is storing your browsing history without telling you, it's a good bet they are selling that data to god-know-whom.
0 Agree

Reactions closed

Sorry, you can't comment on this item anymore. It's either too old or comments are disabled for this post.

Myce.com settings

Several settings at Myce.com can be changed, they are stored in cookies, which means they will be reset if you clear Myce.com cookies

Background

Change the background to a plain color or trianglified image (similar to the default image)

No tracking features

At Myce most social media feature are done server side and impose no privacy risk to the visitor when not used. Several features use Javascript with you can turn off here

Layout

Switch to the List layout for an index with chronologycally listed news items or Grid layout for a block based layout. To see the change you need to reload the page

×