This morning, a Russian forensics firm named Elcomsoft announced a way to extract years’ worth of web browsing records from Apple’s iCloud storage system, a method first reported by Forbes. Those records included site names, URLs, and when a given site was visited. Cleared browsing records are also visible in the records, although they are marked as “deleted” in the table. Mobile browsing records are also visible, although the sites themselves appear to be hashed in the most recent versions of iOS.

Elcomsoft did not disclose the new method to Apple, but the company responded quickly once news of the bug became public. Within hours of the Forbes report, a server-side fix began to stop the retrievals, apparently deleting all records older…

Continue reading…