Uploaded image for project: 'Titanium SDK/CLI'
  1. Titanium SDK/CLI
  2. TIMOB-9580

Android: Images captured using Ti.Media.showCamera() are written to SD card on Android

    Details

    • Type: Bug
    • Status: Closed
    • Priority: High
    • Resolution: Fixed
    • Affects Version/s: Release 2.0.1
    • Component/s: Android
    • Labels:
    • Environment:

      Titanium SDK: 2.0.1.GA2
      Platform OS: Android 2.3.3
      Device: HTC ADR6400L (Thunderbolt), Motorola Droid 4

      Description

      Problem

      Captured images are written to the Android device's SD card at /DCIM/Camera/<app name>. (even with saveToPhotoGallery option as false)

      From the customer:

      This is a potential security issue for us because we are capturing images of checks, which contain bank account numbers. We need a way to disable this behavior.

      For our purposes it is not sufficient to delete the image after writing it to the file system. Forensics tools can still recover the data from the file system even if the file is deleted. The image can never be written to storage at all.

      Here is a sample app.js that reproduces the problem:

       
      Titanium.Media.showCamera({
      success:function(event)
      {
      alert('Success - now check SD card for captured image');
      },
      cancel:function()
      {
      alert('cancelled');
      },
      error:function(error)
      {
      alert(error);
      },
      saveToPhotoGallery:false,
      mediaTypes:[Ti.Media.MEDIA_TYPE_PHOTO]
      });
      
      

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                joshroesslein Josh Roesslein
                Reporter:
                vjoshi Varun Joshi
              • Watchers:
                0 Start watching this issue

                Dates

                • Due:
                  Created:
                  Updated:
                  Resolved:

                  Backbone Issue Sync

                  • Titanium SDK/CLI <> Titanium Mobile
                    Synced with:
                    TIMOB-13729
                    Sync status:
                    ERROR
                    Last received:
                    Last sent:

                    Git Integration