Iphone photo number...
 
Notifications
Clear all

Iphone photo numbering system

4 Posts
3 Users
0 Likes
3,476 Views
(@tackleberry)
Posts: 30
Eminent Member
Topic starter
 

Are there any "natural" circumstances in which the apple image file number would not be in sequential order based upon when they were taken ( on that specific device)?
Under what conditions would a lower file number have a date that is after other files with a higher file number.
Obvious answer is EXIF editor. but what else could explain it, if we ignore the first conclusion.

Photos were allegedly taken on Iphone6+

for simplicity…
IMG_0001 taken date 4/20/17
IMG_0009 taken date 4/01/17

1. EXIF editor
2. Could of come from another Iphone 6+ device

**No phone has been forensically dumped or examined. (yet)
We only have the 2 photos at this time to compare.

I have read in a white paper that images sent, for example thru airdrop, will be renumbered by the receiving device current number scheme.
I do not have precise date range yet in which the discrepancy occurred.
I have not yet seen the exif data for myself yet.

 
Posted : 17/05/2017 7:37 am
SamBrown
(@sambrown)
Posts: 97
Trusted Member
 

Yes, airdrop would have been my guess.

 
Posted : 17/05/2017 9:08 am
(@tackleberry)
Posts: 30
Eminent Member
Topic starter
 

UPDATE
i have viewed EXIF data in reader program.
BOTH indicated model "iPhone 6s Plus"

img_0001 HAS ORIGINAL taken date of 12-19-2016,
*there is matching change date and digitized date in Exif viewer fields
Software field in EXIF viewer says Camera+ 9.0.1 ( which is 3rd a party APP)
App change-log below..
06-22-16 V# 8.0.2 released
12-14-16 v# 9
12-17-16 V# 9.0.1
12-22-16 V# 9.0.2
03-22-17 V # 9.1
So I would believe it was taken with this 3rd party APP 2 days after the iphone had this app either installed, or update.

img_0002 has ORIGINAL taken date of 11-23-16.
*again other matching fields in EXIF viewer to this date.
Software field in EXIF viewer say 10.1
my best estimate on IOS 10.1 release was Oct. 24th 2016. It "appears" the IOS update was done in a timely fashion and this image was taken with the OEM camera app, so probably the 3rd party app had yet to be installed.

Comes back to WHY does img_0002 have a creation date the precedes the img_001.

I adjusted image # for simplicity. Actual img numbers are as follows.

IMG_6577 = IMG_0001
IMG_6578 = IMG_0002

but the higher file eliminated the possible logic that the photos files were simply rolled back to first image of camera's life..

 
Posted : 17/05/2017 6:46 pm
(@principle3notes)
Posts: 4
New Member
 

Im not sure if im following your question correctly but wonndering if this help

http//www.controlf.net/content/uploads/PhotoStream-attribution-DRAFT-14-NOV-2016.pdf

 
Posted : 20/05/2017 2:08 am
Share: