Deleted SMS

Was doing some work for the PFIC 2009 Conference, and I was looking at the SMS.db of a logical backup.  I was looking at the database in a Hex Editor, and to my surprise I saw a SMS that I received from my former Boss that I had deleted.  So I looked even further and found some more, not just the content of the text, the phone number associated, all what you normally find in a non-deleted text.   So, now one more item that can be retrieved from the logical data, and no need to conduct a intrusive search on the iPhone.  There is a utility for windows that claims to retrieve deleted SMS from the logical backup.  Haven't validated this tool yet.  When I have completed testing, I will post the results.

 

What did you think of this article?




Trackbacks
  • No trackbacks exist for this entry.
Comments

  • 12/17/2009 4:18 AM Henry wrote:
    I will wait for your result bro.
    I also try open SMS.db with Hex Editor.
    Although not easy to ready, at least can see the some of past sms.

    Thank you
    Reply to this
  • 12/17/2009 4:23 AM Henlie wrote:
    Waiting for your result bro. It's very usefull.
    I can see some of the old sms too in that file, hope you can lead to better way to view or retrive them.

    Thank you
    Reply to this
Leave a comment

Submitted comments will be subject to moderation before being displayed.

 Enter the above security code (required)

 Name

 Email (will not be published)

 Website

Your comment is 0 characters limited to 3000 characters.