Georgia Tech Creates Tool To Recover Deleted AI Chats

A team of researchers has developed a method to retrieve deleted conversations with AI assistants on Android devices. This breakthrough has significant potential for helping investigators uncover erased information during probes. The tool's capabilities may also raise concerns about the privacy of on-device AI chats.

Many users prefer to run AI assistants locally on their devices to keep their data private and avoid potential cloud-based vulnerabilities. However, it appears that some information from these local sessions can persist in a device's working memory even after the chats have been deleted.

The researchers designed an experiment using a fake note-keeping AI assistant and a set of fictional project information. They then deleted this information and used their tool to search for remnants of the data in the device's memory.

The tool, called ORISA, was able to find enough usable information to recreate a working session with a substantial number of fictional facts from the original set. This demonstrates the tool's potential for recovering deleted conversations and reconstructing the context of AI-assisted activities.

According to the researchers, ORISA can help establish what information was shared with an AI assistant and what assistance was received. This capability may be particularly useful in investigations where evidence of cybercrime activity has been deleted.

The development of ORISA addresses a cybersecurity gap related to the use of local AI, which lacks centralized logging and enforcement. This gap has made it challenging for investigators to recover useful evidence of cybercrime activity using forensic memory techniques.

While ORISA is primarily intended to aid investigators, its potential misuse by hackers is a concern. If a tool like ORISA were to fall into the wrong hands, it could potentially be used to gather deleted information from AI chats and recreate user queries. This article is based on reporting by ZDNET AI.