MaxiHuHe04 / iTunes-Backup-Explorer

A graphical tool that can extract and replace files from encrypted and non-encrypted iOS backups
MIT License
457 stars 37 forks source link

Date of photos does not appear correctly #28

Open aviv926 opened 10 months ago

aviv926 commented 10 months ago

I want to say thanks again for this amazing extension! There is something I noticed that when I export any photo the original date the photo was taken does not appear and instead the date the backup was taken appears Even in the EXIF of the photo, the original date does not appear

Do you know how to fix it? Thank you for your wonderful work

MaxiHuHe04 commented 10 months ago

Hey @aviv926, that's interesting. This should have been fixed in v1.3 by the commit https://github.com/MaxiHuHe04/iTunes-Backup-Explorer/commit/b450c64d45a6b790451a94751cc08757f32e0b6e. Could you please provide the following information?

Are you sure the photos have the right date on the phone itself? Normally, this program should not change any EXIF data in the extraction process.

aviv926 commented 10 months ago

Hey

Thanks for your response @MaxiHuHe04 , here is more info about the problem:

My operating system is Windows 10 iTunes Backup Explorer latest version - 1.4 Device and iOS version - iPhone 11, ios 16.1 Non-encrypted backup

I have now retested with version 1.4 and I am experiencing the same problem, the images arrive without their original EXIF the images were extracted from: MEDIA/DCIM/.MISC/100APPLE I tried a picture in JPG format and in addition, also a video in MOV format This is the EXIF data that I got using exiftool on these files

image

In order to check that there is no problem with my backup, I used iBackupViewerSetup

on the same photos, and I was able to get the correct EXIF details

MaxiHuHe04 commented 10 months ago

Have you tried extracting photos from Media/DCIM/100APPLE? I think the images in Media/DCIM/.MISC/100APPLE are not the original ones but thumbnails or something like that. The resolution of 900x1600 also doesn't seem right. The backup of my phone doesn't even have any files in .MISC.

aviv926 commented 10 months ago

Thanks for your response @MaxiHuHe04

Sorry, this is my mistake, the picture is not in Media/DCIM/.MISC/100APPLE, there is really nothing in it. These are the meaning in the previous response that the images I checked are in Media/DCIM/100APPLE

But the situation is still the same and the photos are exported without their original EXIF

And again when I tried to export with iBackupViewerSetup I was able to get the original EXIF of the photos, I will put a comparison here iBackupViewerSetup vs. iTunes Backup Explorer

Exif from iBackupViewerSetup extract image

Exif from iTunes Backup Explorer 1.4 extract image

MaxiHuHe04 commented 10 months ago

My guess is that maybe you edited that photo on January 1st. Could that be the reason for the different dates? Then iBackupViewer apparently takes the capture date of the EXIF data of the photos which would be November 15th. Currently, my program just uses the last modified date of the original files in the backup database for the extracted ones. It doesn't interact with or change any EXIF data. This could change when a separate photo viewer feature were added at some point. Actually, neither of the screenshots you posted show any EXIF data. Those dates are just Windows file system attributes. DateTimeOriginal, location, device or camera settings like ISO, shutter speed, etc. would be EXIF tags.

MaxiHuHe04 commented 10 months ago

Could you please check whether there is any difference in the content of the extracted files by typing in Get-FileHash .\iBackupViewerSetup.PNG ".\iTunes Backup Explorer.PNG"?

aviv926 commented 10 months ago

I was able to figure out what the problem was When I export photos that were taken from the phone's camera, everything is exported correctly, including the EXIF

But when I export WhatsApp photos/photos sent to the device, their EXIF is removed (for an unknown reason)

It happens with all the types of extensions I tested

For example, if I export a photo/video taken through the iPhone's camera, both through iTunes Backup Explorer 1.4 and through iBackupViewer, the EXIF appears correctly

But if I export a screenshot or a picture that is through WhatsApp, the EXIF does not come out properly through iTunes Backup Explorer 1.4, but the EXIF does come out properly through iBackupViewer

for example this is a Exif of an image from Whatsapp: image

this is the Get-FileHash: image

MaxiHuHe04 commented 10 months ago

Alright, that makes sense. WhatsApp removes EXIF data probably for privacy reasons and/or maximum compression. And again, these screenshots still don't show any real EXIF data in both of them. The files themselves are identical as Get-FileHash shows. The only difference is that iBackupViewer sets the File Modification and Creation date file system attributes to other values. It probably uses the file Birth date instead of LastModified.

aviv926 commented 10 months ago

Alright, that makes sense. WhatsApp removes EXIF data probably for privacy reasons and/or maximum compression. And again, these screenshots still don't show any real EXIF data in both of them. The files themselves are identical as Get-FileHash shows. The only difference is that iBackupViewer sets the File Modification and Creation date file system attributes to other values. It probably uses the file Birth date instead of LastModified.

It sounds like it's really like that because the date that iBackupViewer sets on the image is really the date the image was received on the device (I verified it by viewing the date of the original image as sent via WhatsApp) as you can see in the image I attached image

This is something that can be added to iTunes Backup Explorer because it can be really good for keeping the original appearance order of the photos

I would love to know what you think