The initial forensic analysis of the contents of May's phone yielded several items of
evidentiary value. An examination of the user dictionary- revealed it contained the terms
"joebidennnn" and the same email address that was used to register the Kik account for
usemame 'Joebidennnn69" on March 30,2024. HSI's forensic analysis also revealed that May's
phone contained evidence that the Kik application had been deleted from the device. May's
phone also contained a Telegram application and a Mega application at one point that were
subsequently deleted. Notably. Kik. Telegram, and Mega (as well as another application, ..Loki
Messenger")i were all deleted on April 4,2024,within seconds of each other.

I just learned that the only way to remove an app from my phone is to do a full factory reset 🙄

What model of iPhone or Android was it? Not all OS's are created equal.

>>2373
didn't know factory resets are still the only way to truly purge apps, what if they're logging every interaction with deleted services? seems like a cop-out, honestly.

... duh? I thought cyberix had tech guys on it who'd figure this would be the case...
File deletion just deallocates the file blocks, the actual data remains and can be recovered. It's possible to recover data that's been overwritten multiple times as well. When deleting sensitive data, use a tool like GNU shred to fill blocks with random data in multiple passes, and optionally do a zero pass at the end.
Not uncommon knowledge, but I felt obliged to bring something to this thread...

>>2373
full reset wipes even metadata, but you still have backups. think about how long ago those were made.

someone's forgetting that backups can be time-stamped. if there's a recent backup, you don't need to reset just to get past deleted files, just restore and use encryption if necessary.

nah, i mean think of it like the phone itself got pushed through the same process, once it resets, to factory settings, all that's left is what's actually, in its filesystem. backups only carry whatever was already there when they were made, and if the user didn't sync those services' data upfront (like calendar events or contact photos), well, nah, even if the system does delete after a reset, you'd still have to wait for any persistent data that gets overwritten to be re-sync-ed.

the thing is, when you think about it, some of this is just the same old tech problem: hardwrae has limits. memory's not infinite, so whatever hasn't been touched yet by other apps, or hasn't been fully loaded, can, still hang out in the background a littlee longer than you might expect.

No app deletion means not fully deleting everything; just swipes and goes into a temporary folder. Backups could be overwritten by subsequent additions, making some deleted app data unrecoverable long-term unless manually cleared or synced again.

Like the old tape thing - if you hit "delete" and don't go to "empty recycle bin", those files live on until the next sync or storage hits a threshold. Nah, factory reset is still the only way to be sure it's truly deleted... well if there's, nothing newer in that backup.