Posts

Photo-Picker

Image
Photo-Picker     While digging through an iPhone one day I came across an area that grabbed my attention. Looking at the following location:    Private\var\mobile\Contains\Data\PluginKitPlugin\<Application_GUID>\ com.apple.mobile_container_manager.metadata.plist MCMMetadataIdentifier key I was able to determine com.apple.mobileslideshow.photo-picke r is the application bundle ID using this file system location.   Inside the */Containers/Data/PluginKitPlugin/<Application GUID>/tmp/ folder in this location were several .mov files.   So I asked myself "What is Photo-Picker? and "How did these files get here?" What is Photo-Picker? "User Selected" User Intent" - Apple WWDC 2021 Bless the Apple dev's and their naming conventions. This plugin does exactly what it's called. The short version, for those not wanting to watch the video linked below, is this plugin was introduced in iOS 14 as a "privacy" feature. Photo-Picker allows ap
2 comments
Read more

Hack The Planet!

Image
Hola boys and girls, it is I, Mr. Eddie Vedder from Accounting making my first coast to coast world wide global blogging appearance. But why you ask? For world domination? Nay something far less sinister. (If you stick around long enough I'll eventually quote this entire movie)  The truth is I just wanted to start sharing some of my research (and have somewhere to point people  instead of retyping/copy & pasting responses) For the past few years I've been on the digital forensics discord and a few list serves helping people out whenever they come across an app or artifact I've previously worked with. I'd always try and keep active on it and follow up with people but lately I found myself slacking. Thanks to a much needed push by Scott Koeing (Twitter @Scott_Kjr ) I've finally got something started. 
Post a Comment
Read more