Random iOS app complaints that no one will ever read: Tangi app

Tuesday, March 3, 2020

Tangi Quick Videos app for iOS: Share sheet - auto-generated subject line disappears the second time the email is dialog is activated

iOS 13.3.1
Tangi Quick Videos app for iOS (version 1.4)
Date: 03/02/2020

Description:

Here's a strange bug that I don't believe I have ever seen with an iOS app before.

With the current version of the Tangi Quick Videos app (version 1.4) for iOS, the auto-generated subject line on email messages generated via the share sheet will disappear the second time the user activates the message.

This is much easier to show than to describe, so please take a look at the attached screenshots. As I mentioned, I have played around with numerous apps to see how many auto-generate a subject line. Some apps do, and some don't. Tangi Quick Videos is the only app I have seen to have a generated subject line once, and then have the subject line disappear the second time the email message dialog is called up. Very odd!

Steps to Reproduce:

1. Launch the Tangi Quick Videos app for iOS
2. Head to any video
3. Click the share option
4. From the share sheet menu, select the "Email" option once
5. Note that the email message has an auto-generated subject line that is relevant to the video
6. Cancel out of the message, and select "Delete Draft"
7. Press the "Email" option from the share sheet a second time
8. Note that the auto-generate subject line is now blank

Result: The auto-generated subject line on emails created via the share sheet by the Tangi Quick Videos app disappears (is blank) the second time the email is activated

Expected: The subject line on an email from any video should not be blank. Other apps do not do this

Select any video in the app...

Select the "Share' option from any video...

Select the email option from the share sheet...

I see that the email has an auto-generated subject line!

I cancel out of the email, and select "Delete Draft"...

I select the "email" option a second time...

The second time the subject line is blank! I have never, ever seen this with any other iOS app!

Sunday, February 9, 2020

Tangi Quick Videos app for iOS: User restriction of camera roll access not respected

iOS 13.3.1
Tangi Quick Videos app for iOS (version - initial release)
Date: 02/09/2020

Description:

Here's a camera roll access bug with the new Tangi Quick Videos app from Google's Area 120.

The new Tangi app does not seem to respect the user declining camera roll access from the "Did you try it? Share it!" area of the app. After creating an account, the user can select an option to select "Try it!" from any video.

A slider UI rises from the bottom of the screen. There is a "+" which brings up a "Share Your Creation" prompt. Selecting the "Choose from Library" option automatically access the camera roll library. Selecting a photo THEN brings up a yes/no prompt. Selecting "Don't Allow" from the camera roll access prompt does nothing - the app now has full access to the camera roll.

Heading back to the settings area of the device shows "Never" for "Allow Photos Access" - yet the app has continual access to the camera roll from this point. This appears to go against the human interface guidelines for iOS.

I've seen this with other apps. I know that there is a specific exemption for accessing the camera roll for profile pictures, but I don't believe that this is supposed to happen in other areas of iOS apps. This looks to be a clear violation.

I've reported to these in private bug bounties. Only to be told that it isn't a security issue, and that Apple's "guidance" on this issue isn't clear. Only to see the issue rapidly fixed without explanation.

Steps to Reproduce:

1. Download and Launch Tangi for iOS
2. Sign in with a Google account
3. Go to any video in the app
4. Select the "Try it!" option from the right side of the screen on any video
5. From the slider, select the "+" option
6. From the "Share Your Creation" slider, choose "Choose from Library" (app has access to camera roll)
7. Select any video
8. From the "Tangi" would like to access your photos prompt select "Don't Allow"
9. Repeat steps 3 through 5 and then upload another video
10. Exit out of the app to the Settings area of the iOS device - note that app states "Never" for photos access

Result: Selecting "Don't Allow" to the camera roll access prompt does NOT restrict access to the camera roll with the Tangi app for iOS

Expected: If the user restricts camera roll access via an in app prompt, then the app should NOT have access to the camera roll

After creating an account. Select any video and choose the "Try it!" prompt from any video. A slider rises from the bottom of the screen. Choose the "+" option...