iCloud for Windows Users Complain of Corrupted Videos, Photos From Strangers

idktbh said:
Images from strangers appearing in Photo Libraries? are you ****ing kidding me?
Click to expand...
Just when I was just starting to get comfortable with the idea of the cloud. Thought Apple had been really secure with it and was trusting it more and more.

Fortunately, I keep all of our "sensitive" content on an encrypted SSD with a strong password locked in a drawer.
 
Sounds like a bug reading from object storage. If true, this is a pretty significant mistake... iCloud Photos isn't end-to-end encrypted, so it is possible a bug could pull from other peoples photos. Hopefully the inverse of corruption spreading to random users photos isn't occurring or nobody is safe. Maybe time to look for a way to do local photo collection backups....
 
freedomlinux said:
Don't feed the troll, some users comment without reading or thinking, just to get that first/early post. Simply ignore user & move on.

This is clearly a back-end issue as there is *nothing* a client should be able to do to access content belonging to another user.
Click to expand...

Well, yes. But there is an assumption that the images seen are coming from other users in iCloud, when actually they could be images from the internet cache or other sources within the client environment.
I don’t really believe this is the case, but as unlikely as it might be it is possible nevertheless.
 
MrBrault said:
Are you for real!?! This is 100% Apple fault. Apple is backend and Microsoft frontend in this story. On top of this, Apple 1st party and Microsoft 3rd. A third-party frontend accessing unauthorized content from a firstparty backend is a big effing deal. It prove one thing, their architecture is garbage. This should be prevented by design so random bug doesn't trigger this. My feeling, they have a backdoor into iCloud and this bug exploit something around the backdoor.
Click to expand...
This would clearly be on Apple's side. I suspect they are mishandling some sort of reference in to an object database.
 
Godspeed8230 said:
Photos from other people? How is that even possible?
Click to expand...
Apple makes unimaginable privacy and security blunders possible.

In any case, this is why it is criminal not to implement REAL end to end encryption. Our data should be encrypted on device and then stored in the cloud in encrypted form, and Apple should not have the key to decrypt it.

And users here keep saying "What do you have to hide?" EVERYTHING. We have to hide everything from everyone, including Apple, because criminals and hackers are not the only enemies to privacy and security. Apple is also the enemy.
 
Wando64 said:
Well, yes. But there is an assumption that the images seen are coming from other users in iCloud, when actually they could be images from the internet cache or other sources within the client environment.
I don’t really believe this is the case, but as unlikely as it might be it is possible nevertheless.
Click to expand...

Nope, the partial images that were inserted into my corrupt icloud video downloads were definitely not anything "client" side. They were clearly someone else's personal images, and nothing that I've viewed on my PC before.
 
4nNtt said:
Sounds like a bug reading from object storage. If true, this is a pretty significant mistake... iCloud Photos isn't end-to-end encrypted, so it is possible a bug could pull from other peoples photos. Hopefully the inverse of corruption spreading to random users photos isn't occurring or nobody is safe. Maybe time to look for a way to do local photo collection backups....
Click to expand...

antiprotest said:
Apple makes unimaginable privacy and security blunders possible.

In any case, this is why it is criminal not to implement REAL end to end encryption. Our data should be encrypted on device and then stored in the cloud in encrypted form, and Apple should not have the key to decrypt it.

And users here keep saying "What do you have to hide?" EVERYTHING. We have to hide everything from everyone, including Apple, because criminals and hackers are not the only enemies to privacy and security. Apple is also the enemy.
Click to expand...
iCloud Photos ARE end-to-end encrypted: https://support.apple.com/en-us/HT202303
 
4FFCA934-4702-4511-AD97-42D8F1D8D8D8.jpeg
When the latest OS updates came out, I actually joked about this happening, thinking it would be way too ridiculous. Guess I was wrong.
 
Hidden photos also aren’t hidden in windows, they’re just part of the library. Could make for some very uncomfy situations…
 
vinegarshots said:
Interestingly, the problem seems to be gone today from testing on my end. Although, that's not exactly reassuring, because the fact that this happened at all, even once, gives me great concerns. Where is my guarantee that this isn't some intermittent issue that can occur whenever?
Click to expand...

Can confirm, issue seems resolved as of now.
 
PULL THE CORD — NOW!!

Or — Don't Do Windows™.

If this is only happening with the iCloud for Windows client, then it suggests that it's a bug on the client side, and not on the server. If it was a bug on the server, we'd be getting the same reports from users of other platforms, namely macOS and iOS.

It's possible that the Windows client is sending a corrupt request and therefore getting corrupted results. I don't expect much else from Windows. Garbage in, Garbage out.
 
vinegarshots said:
Nope, the partial images that were inserted into my corrupt icloud video downloads were definitely not anything "client" side. They were clearly someone else's personal images, and nothing that I've viewed on my PC before.
Click to expand...
Edit: I’ve just seen comments saying resolved now so maybe can’t tell anymore
Would be interesting to see what’s actually inside one of these corrupted files though

I only signed up after reading this;
I’m wondering, technically, from the reverse direction what you’re seeing and why.
This is all purely speculative, and I might just be showing my lack of understanding about modern video encoding and file transfer.

Are you getting someone else’s still photos in your video or are you getting one of their I-Frames from one of their videos and then somehow nothing else so it renders as a still image?

I can’t understand how that’s possible: just getting one I-Frame and no B or P for it.

So let’s say it’s a HEIF encoded photo that’s in there, surely that needs more data to be a renderable I-Frame.

I’m wondering if it’s multi part download mess ups. Getting someone else’s part. Server side mess up obviously.

So; if you delete the local video and download it again; do you get a different video or picture each time?
 
coolfactor said:
PULL THE CORD — NOW!!

Or — Don't Do Windows™.

If this is only happening with the iCloud for Windows client, then it suggests that it's a bug on the client side, and not on the server. If it was a bug on the server, we'd be getting the same reports from users of other platforms, namely macOS and iOS.

It's possible that the Windows client is sending a corrupt request and therefore getting corrupted results. I don't expect much else from Windows. Garbage in, Garbage out.
Click to expand...
If ANY client can do that, it's a server issue. If a bug on a client allows unauthorized access to someone else's photos, a malicious third party could create a "buggy" (on purpose) client and go to town on other people's photos and videos. The server should not be allowing unauthorized access to someone else's photos regardless of client "bugs" - the client code can always be altered by someone. Also, operating system has very little to do with this. Even if the client is buggy, Apple chose to write a crappy implementation on Windows rather than Windows made it crappy. It's like saying the plate made your food unhealthy. There are some things that Windows may make more difficult to implement, but this is not it. GoogleDrive and OneDrive are problem-free.
 
Maybe it’s time for big tech companies to realize those who pass leetcode interviews don’t necessarily translate to good software engineers.
 
.
No5tromo said:
If this is true, that is probably the most epic privacy fail a tech company has ever accomplished. Way to go Apple!

I'm losing trust in Apple in so many ways...
Click to expand...
Eufy gave access to your live security cameras and recorded video to other people
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Back
Top