Saturday, May 30, 2020

Sole Collector app for iOS: Awkward Error Messaging after Cancelling Out Apple Sign-In During Account Creation

iOS 13.5
Sole Collector app for iOS (version 1.7)
Date: 05/30/20

Description:

There's an odd error message displayed inside of the Sole Collector app when you cancel out of creating an account with the Apple Sign-in.

I've seen these mangled error messages for years when canceling out of the Facebook or Google prompts, but this is the first time I have seen it when canceling out of Apple's Sign-in.

It is interesting enough that I thought I should document it and grab a screenshot.

This is the error message:

The error messages reads:

"The operation couldn't be completed.
(com.apple.AuthenticationServices.AuthorizationError error 1001)"

Steps to Reproduce:

1. Download and launch the app
2. Select the "Register" option
3. Select the "Apple" option under "Or Continue With:"
4. Select "Cancel" and dismiss the Apple Sign-Up option
5. Note the error button that appears at the top of the screen

Result: A less-than-user-friendly error message appears after the user cancels out of the Apple Sign-In option during account creation. This red error message appears at the top of the screen and says:

Expected: Cancelling out of the Apple Sign-In should either result in no error message, or an informative one. I actually don't recall ever seeing an error message from cancelling out of the Apple Sign-in with any other app - and I certainly don't recall a jumbled error message

Launch the app...

Select the "Register" option...

Select the Apple Sign-In option...

Cancel out of this Apple ID Sign-In pop up...

Awkward error message at the top of the screen.




Thursday, May 28, 2020

YesStyle - Beauty and Fashion app for iOS: Not possible to exit out of PayPal login option

iOS 13.5
YesStyle - Beauty & Fashion app for iOS (version 4.2.9)
Date: 05/28/20

Description:

There's a minor problem with the YesStyle app for iOS. Curiously, this only seems to happen in the very initial landing pages after the app is launched.

The app provides an opportunity to use a PayPal login to create an account. The link to the problematic PayPal authorization page looks like this:

Select this PayPal option above. Then head to this page...

The "< Connect with PayPal" and the "Cancel and return to YesStyle.com" options on this page do not work for me.






Steps to Reproduce:

1. Download and launch the YesStyle app for iOS
2. Select "Register"
3. Select the PayPal option under "Sign up using your social media account"
4. Tap furiously on "< Connect with PayPal"
5. Scroll down and select "Cancel and return to YesStyle.com"

Result: Users can't seem to exit out of the PayPal login screen that accessible during the initial account creation on the YesStyle app. Neither the "< Connect with PayPal" back option or a "Cancel and return to YesStyle.com" link seem to do anything

Expected: Users should be able to exit out of the PayPal login screen. The "< Connect with PayPal" back option and the "Cancel and return to YesStyle.com" link should work and exit the user out of the PayPal account sign-in option

Wednesday, May 27, 2020

Uterqüe Shop Online app for iOS: Crash after adding blank gift cards to shopping bags

iOS 13.5
Uterqüe Shop Online app for iOS (version 7.3.1)
Date: 05/27/20

Description:

Easy to reproduce crash with the Uterqüe Shop Online app for iOS:



 The app has blank/empty gift cards listed for several countries supported in the app. If the user selects a blank gift card, and then adds a blank gift card to a shopping bag, the app crashes. See the video above.

Steps to Reproduce:

1. Launch the app
2. Select a country like Canada
3. Select "Menu" from the bottom
4. Select "Gift Card"
5. Select "Gift Cards"
6. With an "_ERR_PRODUCT_NOT_FOUND" message on screen, select "OK"
7. Select "Add to Bag"

Result: Easy to reproduce crash with the Uterque app after the user selects a blank gift card option, and adds it to a shopping bag

Expected: No crash

Saturday, May 23, 2020

Port Supply Co. app for iOS crashes with a Tookan Vendor message

iOS 13.5
Port Supply Co. app for iOS
Date: 05/23/20

Description:

There's an unusual crash that is happening at this moment with an app called Port Supply Co. for iOS.

Here's a video of the crash:


Based on the crash dump, I suspect that it could be a problem with a service called Tookan from a company called JungleWorks.

Here's the crash dump. From the dump, you can see it's pointing to this mysterious Tookan as the culprit:


Steps to Reproduce:

1. Download and launch the Port Supply Co. app for iOS
2. Select the side bar in upper left
3. Select "Guest User"
4. Select "Sign Up"
5. On the "Sign Up to Continue!" page press the phone drop down

Result: The Port Supply Co. app crashes if the user selects the phone drop down - crash dump mentions Tookan Vendor

Expected: That the Port Supply Co. app will not crash if the user selects the phone drop down

App crashes after the user taps on this option...

Tuesday, May 19, 2020

WSDOT app for iOS: Crash when selecting in-app YouTube feed option

iOS 13.4.1
WSDOT app for iOS (version 5.17.2)
Date: 05/19/20

Description:

There's an easy to reproduce crash with the current version of the WSDOT app for iOS.


This crash happens on the "What's Happening" page, when the user selects the YouTube option. There should be a link to WSDOT's YouTube feed, but instead of loading the app just crashes. 

Steps to Reproduce:

1. Download the WSDOT app for iOS
2. Launch the app and select "Traffic Map"
3. Select the slider in the upper right
4. From the "Traveling Information" page, select "Happening Now"
5. Select the "YouTube" option from the bottom right

Result: Selecting a YouTube option on the "Happening Now" page of the WSDOT app for iOS crashes the app

Expected: No crash - WSDOT's YouTube feed should load correctly

Here's the crash dump:




Merlin Bird ID app for iOS: XSS error from plaintext entry in Forgot Username/Password input boxes

iOS 13.4.1
Merlin Bird ID by Cornell Lab (version 1.7.3)
Date: 05/19/20

Description:

There is a cross-site scripting problem with the Merlin Bird ID app from Cornell Lab.

The app has a "Forgot username?" and a "Forgot password?" option at a sign-in screen. There is an XSS error if the user enters in <plaintext> into these input boxes:

Enter in plaintext into either the "Forgot username" or "Forgot password" input boxes...

HTML gets barfed up.

Steps to Reproduce:

1. Download the Merlin Bird ID app for iOS
2. Select "Sign in" from the side bar menu
3. Select either "Forgot Username" or "Forgot Password"
4. Enter in <plaintext>

Result: An XSS error appears after the user enters <plaintext> into either the Forgot Password or Forgot Username input boxes

Expected: No XSS errors!

Sunday, May 17, 2020

Ace Hardware app for iOS: Crash after selecting the Privacy Consent link

iOS 13.4.1
Ace Hardware app for iOS (version 1.0.6)
Date: 05/17/20

Description:

There's an easy to reproduce app with the Ace Hardware app for iOS that I keep running into.

Every time I tap on the "Privacy Consent" link, the app crashes for me.

Here's a video of what I am seeing:


Here's the crash dump:




Steps to Reproduce:

1. Download and launch the Ace Hardware app for iOS
2. Under the red "Create an Ace Account" button, click on the "Privacy Consent" link

Result: The Ace Hardware app for iOS crashes for me, when I select the "Privacy Consent" link on the landing page

Expected: The Ace Hardware app for iOS should not crash when I select the "Privacy Consent" link on the landing page


Thursday, May 7, 2020

Mike's Party Store app for iOS: Crashes the first time the user disallows camera access

iOS 13.4.1
Mike's Party Store app for iOS (version 0.0.120)
Date: 05/07/20

Description:

Looking for one of the easiest ways to find a crash with an iOS app?

Well, here you go:


This was from an app for a place called Mike's Party Store in Michigan. It was developed by a company called City Hive Inc., which develops many apps for locations that sell beer and wine. I am guessing that the same crash happens with other apps that they develop.

Truth be told, it's not that serious of an issue, as it only happens once, and how many people access the function only to deny access? Still, if you're looking for a crash with an iOS app, this is one of the most common. Has been for years!

Steps to Reproduce:

1. Download the Mike's Party Store app for iOS (version 0.0.120)
2. Select "Yes" to the over 21 prompt
3. Dismiss the notifications prompt
4. Select the slide bar/slider in the upper left hand corner of the screen
4. Select "Scan"
5. Select "OK" from the barcode prompt
6. From the "Mike's Party Store" prompt select "Don't Allow"
7. Tap the camera option in the bottom right hand corner of the screen

Result: The Mike's Party Shop app for iOS will crash, the first time the user selects "Don't Allow" from the camera permission prompt and then presses the camera icon on screen

Expected: Mike's Party Shop app shouldn't crash after the user disallows camera access

Here's the crash dump:



Product Hunt app for iOS: Facebook Login doesn't work

iOS 13.4.1
Product Hunt app for iOS (version 4.3.4)
Date: 05/07/20

Description:

I am having the exact same problem with the Product Hunt app for iOS that this reviewer has:

The Facebook login doesn't work for me. This happened a week ago, and again today. I've deleted and re-downloaded.

Here's a video of what I am seeing:



It's the same problem this Twitter user has:


Steps to Reproduce:

1. Download the Product Hunt app for iOS
2. Select the profile option in upper left
3. Click on the Facebook option

Result: The Facebook login option doesn't work for me - just an infinite spinning

Expected: The Facebook login option in the Product Hunt app for iOS should work 

Friday, May 1, 2020

RealSelf app for iOS: Share sheet - Dark Mode - Facebook Messenger UI

iOS 13.4.1
RealSelf app for iOS (version 6.3.1)
Date: 05/01/20
iOS device set to dark mode

Description:

Minor problem with the current (6.3.1) version of the RealSelf app for iOS.

The RealSelf app has the same problem that numerous other apps have. This problem is with the iOS Share Sheet.

This is how the RealSelf app displays the Facebook Messenger sharing dialog with the iOS device set to the dark mode:

When you compare it to how the RealSelf app displays this in light mode...

You can see that "Done" and "Send" are missing.

This is a common problem with Facebook Messenger and the iOS Share Sheet.

Steps to Reproduce:

1. Set the device to the dark mode
2. From inside the RealSelf app select any doctor, treatment, etc.
3. Select the share option
4. Select the Facebook Messenger option
5. Notice that "Done" and "Send" are not visible
6. Compare this to the light mode

Result: With the iOS device set to the dark mode, the "Done" and "Send " options on the Facebook Messenger UI is not visible when accessed via the share sheet by the RealSelf app

Expected: With the iOS device set to the dark mode, the "Done" and "Send" options on the Facebook Messenger UI should be visible when accessed via the share sheet by the Real Self app