Pictures from an unshared note can leak into shared notes on iOS

#1

Post by relbeek2 » Mon, Oct 02, 2023, 10:17 PM UTC

I recently discovered that if you add large videos or many images to a note in iOS 17, and delete that note before all images are attached to the note, the images get attached to the next note in the list, even if its a shared note.

I reached out to Apple thinking this could be a privacy concern and was told that it was a UI bug not a privacy concern, do you agree?

Re: Pictures from an unshared note can leak into shared notes on iOS

#2

Post by john_alan » Mon, Oct 02, 2023, 11:08 PM UTC

No I don’t agree. That is outrageous.

Re: Pictures from an unshared note can leak into shared notes on iOS

#3

Post by interestica » Tue, Oct 03, 2023, 12:03 AM UTC

Absolutely a privacy concern

Re: Pictures from an unshared note can leak into shared notes on iOS

#4

Post by Obscurity4340 » Tue, Oct 03, 2023, 1:14 AM UTC

This kind of pretty sloppiness is exactly why I avoid their defaults like the plague. Tell me you're being irresponsible with your position of power without telling me you're being irresponsible with your position of power. Sigh

Re: Pictures from an unshared note can leak into shared notes on iOS

#5

Post by relbeek2 » Tue, Oct 03, 2023, 1:16 AM UTC

interestica wrote: post #3

Absolutely a privacy concern

That is what I also thought; I submitted it a second time, and it was rejected again. I even showed them a video of the process.

Re: Pictures from an unshared note can leak into shared notes on iOS

#6

Post by 2rsf » Tue, Oct 03, 2023, 10:22 AM UTC

relbeek2 wrote: post #5

interestica wrote: post #3

Absolutely a privacy concern

That is what I also thought; I submitted it a second time, and it was rejected again. I even showed them a video of the process.

Can you reproduce it when the next note is shared?

Re: Pictures from an unshared note can leak into shared notes on iOS

#7

Post by relbeek2 » Tue, Oct 03, 2023, 6:31 PM UTC

2rsf wrote: post #6

relbeek2 wrote: post #5

Earlier quoted context omitted.

That is what I also thought; I submitted it a second time, and it was rejected again. I even showed them a video of the process.

Can you reproduce it when the next note is shared?

Yes and verified that the person the note is shared with gets it on their phone. So it’s not even just a ui bug