iOS flaw lets apps with location permission access user photos

iphone 4s camera cropping

A newly-discovered loophole in Apple’s iOS operating system can enable app developers to access users’ photos without permission. Recent reports indicate Apple may already be working on a fix for its next update to iOS.

The gap in iOS privacy permissions seems to be much the same as the loophole exploited by Path and other applications that offered unrestricted access to users’s address books. While most people would consider access to their device’s address books and contact information sensitive and confidential, Apple’s iOS does not require developers obtain users’ explicit permission to access the data, whether through a dialog in every app that wants to access the information or through a system-wide setting.

It turns out iOS devices’ address books weren’t the only things available without explicit permission: if a user allows an application to access location information, the app then has access to the user’s entire photo library without any additional notification. Since iOS devices tag photos with timestamps and location information, in theory access to the photo library could be used to assemble a breadcrumb trail of a user’s movements — or at least where they’ve taken pictures.

Although the capability to access the entire photo library once permission had been granted to access location information has been known to developers for some time, the story was first broken by 9to5 Mac, and followed up by The New York Times.

While the address book loophole was discovered by examining network data transmitted by the popular app Path, so far there don’t appear to be any widespread apps that take advantage of the photo access loophole.

Apple introduced the ability for apps to access a users’ photo library in iOS 4. Apple screens applications for illicit behavior before allowing them to go on sale in its App Store, and could possibly detect and deny approval to apps that siphoned off a user’s photos. However, capturing a user’s address book was also against Apple’s guidelines, and the company nonetheless approved many applications that used the capability.

The Verge reports that Apple is working on a fix for both the address book and photo access problems in a future update of iOS, and that access to the photo library is an unintended side effect of granting permission to access location data, rather than an intended feature.


Updating to Apple’s iOS 12 will make your iPhone a whole lot smarter

iOS 12, the latest version of Apple’s iOS, is officially here. We took it for a spin to check out its new noteworthy features, and if it truly changes our smartphone habits for the better.

Google Maps is available on Apple CarPlay with iOS 12

After months of betas, the final version of iOS 12 is here to download. The new OS comes along with tons of new capabilities from grouped notifications to Siri Shortcuts, here are all the features you'll find in iOS 12.

Handy iOS 12 tips and tricks to master Apple's latest update

Apple's iOS 12 mobile operating system introduces a ton of new features, with more options to help boost productivity. But updating to it can be overwhelming, so we're here to make it easier with some iOS 12 tips and tricks.

Putting the app in Apple: Check out our favorite new and updated iOS 12 apps

Get ready for some huge changes to your iPhone or iPad. Apple is releasing iOS 12 on September 18. The latest iOS features a number of updated apps, as well as a few new ones. Here's some of our favorite apps in iOS 12.

Save up to $1,000 with the best smartphone deals for September 2018

Need a better phone but don't want to spend a fortune? It's never a bad time to score a new smartphone and save some cash. We rounded up the best smartphone deals available that can save you as much as $1,000.

Here are the iPads and iPhones that support Apple’s iOS 12

iOS 12 is officially here and it has iPhone and iPad devices feeling brand new again. But which iOS devices support the update? We've complied a list of 22 devices compatible with iOS 12.

Report: President Trump to spare Apple from tariffs on Chinese goods

According to a new report, Apple and other tech firms may be spared from the Trump administration's upcoming tariffs on Chinese goods. While devices like the Apple Watch were on a preliminary list, they have reportedly been removed.

iOS 12 is now available -- here's how to install it on your Apple device

Apple unveiled iOS 12 at this year's WWDC and it's now ready for everyone. Here's how to install iOS 12 on an iPhone, iPad, or iPod Touch using your device's settings or with iTunes on your computer.

WatchOS 5 is now available -- here's everything we know so far

Months after Apple announced its latest software at WWDC, you can now download WatchOS for the Apple Watch. WatchOS 5 brings a number of new features including new watch faces and improved health tracking.

Overheating problems may force Apple to extinguish the AirPower charger

At its September event last year, Apple unveiled the AirPower -- its new wireless charging mat that will allow you to charge multiple devices at one time. It has not yer been released. Here's everything we know about the device so far.

Google’s Family Link expands globally, now works on more devices

Google's Family Link app makes it easier for parents to keep track of their kids' smartphone usage. They can restrict them from downloading apps, see which services they use the most, and more. Here's everything you need to know.

Memoji in iOS 12 lets you create an avatar that looks and moves just like you

Apple's Memoji feature on iOS 12 allows you to send a customize Animoji that looks exactly like you. In comparison to other apps that allow you to make your own custom avatar, Memoji doesn't overcomplicate it.

Here’s how to use Apple’s augmented reality Measure app in iOS 12

Included within iOS 12, the Measure app uses Apple's ARKit to measure objects and spaces in the real world with your camera. Using the app, you can measure a piece of furniture, the distance between points, and more.

How to downgrade your iPhone or iPad from iOS 12 to iOS 11.4

Apple's iOS 12 may be the latest and greatest version of the mobile operating system, but perhaps it's not right for you right now. If that is the case, thankfully there are some ways to go back to iOS 11.4.