In a world of containers and micro services, I do not understand why we cannot have independent databases and buckets per user, specially if we are talking about sensitive data.
I'm guessing it's an uninitialized buffer in a shared encoder instance, where independent storage wouldn't have helped much.
It looks like iCloud for Windows might remote-transcode HEVC down into a format that doesn't ask for a fee to be played back on that platform. In that case it's probably a good idea to stop using iCloud for Windows right now.
That’s what the photos page on icloud.com does unless you specifically request the original format
well clearly we can, and this is clearly a monstrous bug ?
Where do you keep the record of which container belongs to which user and how does that record avoid the same problem?
The encoder container / lambda would had been spawned for that particular user and it would have permissions to access only the content of that specific user.