ORISA recovers deleted local-AI chats from Android memory
Georgia Tech researchers developed ORISA, a forensic tool that reconstructs deleted conversations from AI apps running locally on Android by searching device memory for residual tokens and KV caches. In an experiment using a note-keeping assistant built with ChatterUI, the tool restored a working session containing 26 of 100 fictional facts, while the original session retained access to 14. The technique requires forensic access to device data, and recovery becomes less reliable as newer activity overwrites memory.
The research shows that deleting a local AI conversation may not remove all associated data, giving cybersecurity investigators a way to reconstruct AI-assisted activity while highlighting privacy limitations in on-device chat systems.
ZDNET’s key takeaways
- An experimental tool recovered deleted information from chats.
- It’s helpful for cybersecurity investigations.
- It also demonstrates limitations in perceived local AI security.
Trending Now
ServiceNow and Nvidia launch Arc, a new AI agent for enterprise 10/21/2026