Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Are photos and videos converted to be PC compatible? If they are it could be an issue with this that the buffer is corrupted/not being flushed and combining many users images/videos during conversion. If it is this function Apple should be able to suspend it whilst the investigate. This could also be part of the new iCloud websites functionality doing the same thing. Either way, it needs to be offline till it’s fixed.
Windows reads HEVC with an extension from the MS store (free) and HEIF has been supported and built in since Windows 10 in 2018. iCloud on windows just downloads the original versions, at least for me.
 
  • Like
Reactions: emulajavi
It’s too early to simply jump to conclusions based on some anecdotal experiences. Investigation is warranted but keeping a clear head is also warranted. Considering how many years iCloud Photos has been around and how this has only seemingly just became an issue bears some review.

I would speculate it‘s brought about by shared photo libraries in iOS 16.
 
This is why passwords (and with iOS 16 now also passkeys) should not be stored in iCloud...
Apple's approach for passwords is a bad idea.
Not at all. The physical location is immaterial. What is important is to secure the iCloud servers and client machines. AFAIK iCloud servers have never been compromised. Securing access via Windows machines is another matter. Windows doesn’t exactly have a great reputation there. Stealing credentials (e.g. by phishing) is always going to be a thing. Trojan installations on Windows have always been a worry.
 
Someone hacks into a Windows user’s machine using a Trojan (not exactly unheard of). They post random pictures.
Maybe for record primary keys, they use single GUID or UUID fields which turn out to be not so "unique" after all. When retrieving a record using an ID in the backend, it selects a photo with the same ID belonging to a different account.
 
  • Like
Reactions: PhilBoogie
I've been using NAS from Synology and I see that I can't be happier with my choice. Apple is truly lost. I'm not sure what are they doing.. Mostly great but boring hardware, but much worse software than 10 years ago.
I also use a synology NAS and don't keep hardly anything in iCloud, but this still concerns me, if some certain pics migrate into your stuff, it could be a legal issue, both for yourself, and Apple.
 
I must admit I haven't used an Apple program on my Windows PC for a long time now (I'm very much platform agnostic using both Mac and Windows interchangeably), but I always found that Apple programmers were great at writing Apple programs for Apple computers but were pretty awful at porting Apple programs to Windows computers, perhaps because their internal culture is so Apple-centric.
 
Maybe for record primary keys, they use single GUID or UUID fields which turn out to be not so "unique" after all. When retrieving a record using an ID in the backend, it selects a photo with the same ID belonging to a different account.

That is excellent thinking! This could indeed be the case. What's strange to me is why the photos are appearing 'inside' a video? Why would one file have data from another file?

Wouldn't it make more sense this misery happens in transit? Transmitting network packets from two sources, ending up at one IP, hence the photo-within-a-video?
 
This is why passwords (and with iOS 16 now also passkeys) should not be stored in iCloud...
Apple's approach for passwords is a bad idea.
passwords and pass keys are in the iCloud Keychain, which is end to end encrypted. iCloud photos are not.

Photos from other people? How is that even possible?
Well, we don’t know yet. We don’t even know for sure if these photos are from other people’s libraries. Some comments above have some theories, but IMO we should wait for Apple to say something, or more data to be available.

Do you even know the principle of passkeys ? One passkey is public and stored in Apple’s server, another in the Application Processor of the user’s device and never leaves it
not quite, though. The public part resides with the service you are using (like github), whereas the private part resides on the device and in the iCloud Keychain, which is end to end encrypted.

Privacy…that’s iPhone.
although in this case it’s not “iPhone” but rather a cloud service for photo storage.

Try viewing any videos in iCloud photos - they play at 360p or 480p, regardless of the original quality. This is more than 10 years behind the times.
by “in iCloud photos” do you mean via the web client? Because after syncing down to other devices, they play just fine.

It cannot possibly be ISP, since it's supposedly end to end encryption.
iCloud Photo Library isn’t.

You can’t. They are permanently in Apple server now.
You can just delete them. Sure, you need to trust that Apple actually deletes them. If you don’t, I guess don’t use their services or even products.
 
  • Like
Reactions: tf_dc and Stevez67
I must admit I haven't used an Apple program on my Windows PC for a long time now (I'm very much platform agnostic using both Mac and Windows interchangeably), but I always found that Apple programmers were great at writing Apple programs for Apple computers but were pretty awful at porting Apple programs to Windows computers, perhaps because their internal culture is so Apple-centric.
I use iTunes on my Windows PC instead of the TV app on my Mac Studio, as it works better. (I really hate the "modern "TV" app, it's even worse than iTunes to me.)
 
If this is true this can’t be understated.

This is one of the worst data breaches I have heard of and incredibly concerning.
One bank in Poland, mBank, was assigning accounts to newly created accounts in last or 2 years ago.
As a result someone seen someone else data and money, not sure if was able to do something…

"More critical than critical" priority is often called "we're out of coffee" 😛

„People are dying priority”.
 
passwords and pass keys are in the iCloud Keychain, which is end to end encrypted. iCloud photos are not.


Well, we don’t know yet. We don’t even know for sure if these photos are from other people’s libraries. Some comments above have some theories, but IMO we should wait for Apple to say something, or more data to be available.


not quite, though. The public part resides with the service you are using (like github), whereas the private part resides on the device and in the iCloud Keychain, which is end to end encrypted.


although in this case it’s not “iPhone” but rather a cloud service for photo storage.


by “in iCloud photos” do you mean via the web client? Because after syncing down to other devices, they play just fine.


iCloud Photo Library isn’t.


You can just delete them. Sure, you need to trust that Apple actually deletes them. If you don’t, I guess don’t use their services or even products.
Indeed, iCloud Keychain is stored in a component called Application Processor which is end to end encrypted
 
I read this post couple hours ago and now I discovered an unknown account with a password in my icloud keychain. 100% sure it is not mine... This is scary.
 
  • Wow
Reactions: 5105973
I read this post couple hours ago and now I discovered an unknown account with a password in my icloud keychain. 100% sure it is not mine... This is scary.
Could you be a little more specific? Is it another Apple ID? I just looked through my keychain, and all looks normal to me.
 
When prioritizing bugs to fix, a crash is often categorized as critical.
But mixing Cloud data with other users... this is even more critical than critical. Is there a word for it?
A crash is categorised as critical if it has a big impact.
Photos getting mixed up with others photos is definitely critical.
 
If this indeed is only a iCloud on Windows problem, then it sounds like the iCloud app connects to iCloud and downloads files a little like bittorrent, where it gets parts of files from multiple servers. If the app then request the wrong parts, that could explain video with random images and random images in the photo library (image files are smaller and can be downloaded as single parts). But how would the wrong parts be requested?

Bigger question is still how a person's Apple ID is allowed to download other random people's files. There should be checks done mulige places but it sound like the content servers don't check if a client is a allowed to download the things that are requested.
 
  • Like
Reactions: 5105973
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.