Wednesday, February 12, 2020

Glassdoor app for iOS: Invisible Cancel button on the iCloud interface from uploading resumes

iOS 13.3.1
Glassdoor app for iOS (version 7.10.6)
Date: 02/13/2020

Description:

Minor bug with the current version of the Glassdoor app for iOS.

The app has an option to upload a resume. The user can select "iCloud and more" to bring up a "Recents" page. I don't visibly see a "Cancel" option on the screen. The text is blank.

The "cancel" option does not appear - it is white in color and not visible...

Steps to Reproduce:

1. Download and launch the Glassdoor app for iOS
2. Create an account
3. Select "Saved"
4. From the "Saved" page, select "Upload resume"
5. From the "Import resume and save for later" pop-up, select "iCloud and more"

Result: The "Cancel" option is not visible on the iCloud Files option that is accessible from "Create collections"

Expected: The "Cancel" option should always be visible

Select the "Upload resume" option...

Select the "iCloud and more" option...


Sunday, February 9, 2020

Lomotif app for iOS: App crashes if the user attempts to use the Facebook option to create an account

iOS 13.3.1
Lomotif app for iOS (version 2.6.7)
Date: 02/09/2020

Description:

There is an easy to reproduce crash with the Lomotif crash for iOS. The app crashes after the user selects the Facebook option to create an account. This crash appears to occur 100% of the time.

Here's an image of the crash dump:


Steps to Reproduce:

1. Download the Lomotif app for iOS
2. Launch the app
3. Select the profile option in bottom right
4. Select the red "Sign Up| Log In" option
5. Select the red "Sign Up" option
6. Select the Facebook icon in the bottom left

Result: The Lomotif app crashes if the user selects the Facebook icon to create an account

Expected: The app should not crash if the user selects the Facebook icon to create an account

Select the user icon in the bottom right...

Select the "Sign up|Log in" option...

Select the "Sign up" option...

The app crashes after the Facebook icon is pressed.

Lomotif app for iOS: Informative Error message: Twitter error message is overly informative

iOS 13.3.1
Lomotif app for iOS (version 2.6.7)
Date: 02/09/2020

Description:

Here's an odd error message for you!


This is the error message that appears when a user tries to create an account for Lomotif, using a Twitter account creation option.

Oddly, there appears to be an expiration date of Tuesday, March 31st, 1981, listed in there. So, looks like there's a bad setting client side, I would assume. This unusual date has shown up in other bugs.

Steps to Reproduce:

1. Download Lomotif for iOS
2. Select the profile option on the bottom right of the screen
3. Select the "Sign up| Log in" option
4. Select "Sign up"
5. Select the Twitter option in bottom right

Result: Selecting the Twitter option while trying to create a Lomotif account results in an overly informative error message

Expected: Selecting the Twitter option should result in the user being able to create a new Lomotif account

Download Lomotif and select the "Sign up|Log in" options...

Select the "Sign Up" option...

Select the Twitter option.


TikTok app for iOS: Springboard: Chinese language options appear on Springboard even though iOS device is English and Region is set to US

iOS: 13.3.1
TikTok app for iOS (version 14.7.0)
Date: 02/09/2020
iPhone Language: English
Region: United States

Description:

Here's a wacky bug that I keep getting with the current version (14.7.0) of the TikTok app for iOS.

TikTok's Springboard suggestions has an odd feature - instead of showing English language commands, it shows empty/blank button, and one labeled in Chinese.

Bizarre. The app was downloaded from the US app store. The language on my iOS device is set to English. And the region of the device is US. How and why is one button blank, and one in English?

Steps to Reproduce:

1. Download the TikTok app for iOS
2. Head to the Springboard - scroll down to "Edit"
3. Add TikTok and select "Done"
4. Notice that TikTok's suggestions on the Springboard have one blank button and one in English

Result: TikTok's suggestions on springboard feature one blank button and one in the Chinese language - even with my device set to English and the region of my device set to the United States

Expected: There should never be a blank button on any feature of the iOS. There should not be a button in the Chinese language if the language of my device is set to English and if the region of my device is set to the United States


Tangi Quick Videos app for iOS: User restriction of camera roll access not respected

iOS 13.3.1
Tangi Quick Videos app for iOS (version - initial release)
Date: 02/09/2020

Description:

Here's a camera roll access bug with the new Tangi Quick Videos app from Google's Area 120.

The new Tangi app does not seem to respect the user declining camera roll access from the "Did you try it? Share it!" area of the app. After creating an account, the user can select an option to select "Try it!" from any video.

A slider UI rises from the bottom of the screen. There is a "+" which brings up a "Share Your Creation" prompt. Selecting the "Choose from Library" option automatically access the camera roll library. Selecting a photo THEN brings up a yes/no prompt. Selecting "Don't Allow" from the camera roll access prompt does nothing - the app now has full access to the camera roll.

Heading back to the settings area of the device shows "Never" for "Allow Photos Access" - yet the app has continual access to the camera roll from this point. This appears to go against the human interface guidelines for iOS.

I've seen this with other apps. I know that there is a specific exemption for accessing the camera roll for profile pictures, but I don't believe that this is supposed to happen in other areas of iOS apps. This looks to be a clear violation.

I've reported to these in private bug bounties. Only to be told that it isn't a security issue, and that Apple's "guidance" on this issue isn't clear. Only to see the issue rapidly fixed without explanation.

Steps to Reproduce:

1. Download and Launch Tangi for iOS
2. Sign in with a Google account
3. Go to any video in the app
4. Select the "Try it!" option from the right side of the screen on any video
5. From the slider, select the "+" option
6. From the "Share Your Creation" slider, choose "Choose from Library" (app has access to camera roll)
7. Select any video
8. From the "Tangi" would like to access your photos prompt select "Don't Allow"
9. Repeat steps 3 through 5 and then upload another video
10. Exit out of the app to the Settings area of the iOS device - note that app states "Never" for photos access

Result: Selecting "Don't Allow" to the camera roll access prompt does NOT restrict access to the camera roll with the Tangi app for iOS

Expected: If the user restricts camera roll access via an in app prompt, then the app should NOT have access to the camera roll

After creating an account. Select any video and choose the "Try it!" prompt from any video. A slider rises from the bottom of the screen. Choose the "+" option...

Select the "Choose from library" option. The camera roll option appears. Select any photo from the library...

Select the "Don't Allow" option from this prompt...

Upload the photo (at this point the app has full access to camera roll)....

Upload the photo...

The settings area for Tangi says that Photos access is restricted...

App claims to never have photo access. Yet, the app continues to have camera roll access after this point.

Friday, February 7, 2020

The Beet app for iOS: Share Sheet - no link in Tweets from articles in the app

iOS 13.3.1
The Beet app for iOS (version 1.0.2)
Date: 02/08/2020

Description:

There is a minor bug with Twitter sharing and The Beet app for iOS. If the user shares an article from inside of the app using the Twitter option from the iOS share sheet, there is no link in the tweet that is created.

There should be a link to the article. Please take a look at the attached screenshots.

Steps to Reproduce:

1. Download and launch The Beet app for iOS
2. Head to any article in the app
3. Select the share option
4. Select Twitter
5. Note that the created tweet lacks an active link/url

Result: Sharing an article from inside The Beet iOS app using Twitter from the iOS share sheet does NOT result in a tweet with an active link

Expected: There should be an active link to an article

Select the share option...

Select the Twitter option from the share sheet...

No link from the generated tweet!

Planet Blue app for iOS: No link from Facebook Messenger sharing

iOS: 13.3.1
Planet Blue app for iOS (version 1.2)
Date: 02/07/2020

Description:

There is a minor bug with the Planet Blue app for iOS. When you share a product via the share sheet, there is a valid link created. There is no valid link when something is shared using Facebook Messenger.

A message of: "I thought you might like this! Hurry, because it might sell out quick!" is generated, but there is no link to a product. It only does this with Facebook Messenger - not with regular Facebook, Twitter, email, or SMS messages. It only does it with Facebook Messenger.

Steps to Reproduce:

1. Download and launch the Planet Blue app for iOS
2. Head to any item for sale
3. Select the share option
4. Select the Facebook Messenger option
5. Note that NO active link to the product is created
6. Repeat with all other share options - note that an active link is created

Result: When sharing a product from inside of the Planet Blue app, an active link to the product is NOT created when sharing a product using Facebook Messenger


Head to any product, and select the share option...

Select the Facebook Messenger option...

There is no active link to a product created.