After gaining access to the Hidden assets, we can see that there are 3 photos and 1 video currently being hidden. In Figure #11 the Hidden assets utility is made visible and we can then check to see if any assets are hidden. We can verify this by reviewing the ist, being stored at \private\var\mobile\Media\PhotoData\CPL\.ĭoes this asset count include the hidden assets? In Figure #11, you will notice at the start of the video the Photo Library Recents indicates there are 92 Photos and 12 videos. We can also see a case statement which is included in the Photos.sqlite query that allows us to interpret/decode those values.įirst, I would like to discuss asset counts. A few of the assets have a ZHIDDEN value of 0 indicating these assets are not hidden. In Figure #8, we can see a sample from Photos.sqlite were some assets have a ZHIDDEN value of 1, which again indicates these assets are Hidden. This is the same behavior that has been observed during research within iOS 14 and iOS 15 Photos.sqlite. In my opinion, the most critical change to be aware of is when an asset is marked as Hidden, the value within Photos.sqlite > ZASSET table > ZHIDDEN column is changed from zero (0) to one (1) marking the asset Hidden. These results are consistent with what has been observed in my testing of iOS 14, 15, and 16.Īccessing the Passcode, Face ID, or Touch ID protected Hidden assetsįirst, let me point out, when assets are selected to be Hidden, a new album is NOT created. We can see the downloadAndKeepOriginals key is indicating False, meaning the device setting is not selected, indicating Optimize iPhone Storage is the selected setting. Figure #6īONUS: Additionally, being stored within this plist, we can see the device setting for Download and Keep Originals and the downloadAndKeepOriginals key. We can see the HiddenAlbumVisible key is indicating False, meaning the toggle switch is turned OFF. In Figure #6 we can see the device settings and the plist being displayed within ArtEx. We can see the HiddenAlbumVisible key is indicating True, meaning the toggle switch is turned ON. In Figure #5 we can see the device settings and the plist being displayed within ArtEx. \private\var\mobile\Library\Preferences\.To do that, we will analyze the following properties list (plist) being stored at the following location: How can we determine the Show Hidden Album device settings after a device acquisition has occurred? The description for this toggle switch indicates when turned on, “Face ID is required to view the Hidden album and the Recently Deleted.” In Figure #2 the toggle switch is in the ON position. We can see in Figure #2 the new toggle switch in iOS 16 titled, Use Face ID. If we navigate to settings > Photos, we can access some of the settings for the Photos Application (). The previous Apple ID (John Scooter Wick) was used to log into the test device and iCloud Photos were synced.ĭevice Settings and Properties List (plist) At 8:24 PM, the device finished the reset, and the device was restored as a new device and exited the setup at 8:32 PM. At 8:20 PM, the device settings were accessed, and the device was factory reset. On Tuesday, July 26, 2022, at approximately 8:19 PM, I performed an iCloud backup, signed out of Find My, and signed out from using the current Apple ID. After updating the device, I used it for some artifact generation, which included capturing and editing assets, and traveling around town. During that time, I also changed the Apple ID that was being used from Ben Scooter Gates to John Scooter Wick. On Monday, July 4 th, 2022, I upgraded the iPhone X (A1865) to an iPhone 12 (A2341). Unencrypted iTunes backup acquisitions were the only type of acquisitions used for this research and testing. There you have it folks, this is how you can enable Face ID protection for Hidden Album and Deleted Album, and put photos and videos in Hidden Album.The following tools were used to create data acquisitions and were used to analyze the acquired data: Question: Is Face ID for Hidden Photos feature available on iOS 15?Īnswer: No, Face ID or Touch ID for Hidden feature is only available on devices running iOS 16 or later. Question: Can I prevent Hidden Album from appearing in Photos app?Īnswer: Yes, you can prevent Hidden album from appearing in Photos app by going to Settings -> Photos -> Turn Off toggle for Show Hidden Album. Then tap on Hide option.Īfter hiding photos and videos, you can view them by accessing the Albums page on the Photos app, scrolling down and tapping on ‘ Hidden‘ under Utilities. To do so select them all and tap on the ‘…’ button from the top. Note: You can also hide multiple photos and videos at the same time. Now tap on the ‘ …‘ button located at top right corner of the screen. Open the Photos app and load up the photo or video that you want to hide.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |