Developer Creates Satirical S3-Compatible Storage Using Apple Shared Albums

Overview of icloud-s3

A new open-source software project named `icloud-s3` has drawn attention for implementing a satirical, S3-compatible object storage server backed entirely by Apple's iCloud Shared Photo Albums. Developed in Rust, the project leverages a quirk in Apple's published quota policy where content stored in iCloud Shared Albums does not count against a user's standard 5 GB iCloud Drive storage limit.

According to the project documentation, the software is explicitly described as a joke and is not affiliated with Apple or Amazon Web Services (AWS). It is not intended for production environments, sensitive data, or reliable backups.

How It Works

The utility translates Amazon S3 XML REST protocol requests (`aws s3`, `boto3`, `rclone`, `s5cmd`) and encodes data directly into the RGB pixels of lossless PNG carrier images. These carrier images are then uploaded to iCloud Shared Albums.

• Pixel Encoding: Data is embedded inside lossless PNG files rather than metadata chunks like EXIF or `tEXt`, which are often stripped by media upload pipelines.
• Visual HUD: Each generated image features a 64-pixel visual heads-up display (HUD) banner burned into the top, allowing users to inspect stored items visually within the Apple Photos application.
• Integrity Checks: The system uses embedded CRC32 and SHA-256 digests to detect any pixel alterations, failing closed with a checksum mismatch if changes occur.

Technical Specifications and Limits

Apple's published guidelines for Shared Albums outline specific operational boundaries:

• Album Capacity: An Apple ID can create up to 200 Shared Albums.
• Item Limits: Each album can hold a maximum of 5,000 items, with resolution capped at 2048 pixels on the long edge.
• Upload Thresholds: Limits include a maximum of 1,000 photos per hour and 10,000 photos per day across albums.

Practical Implications and Risks

The creator emphasizes that `icloud-s3` is an experimental proof-of-concept rather than a viable enterprise storage solution. Key risks include:

• Recompression Risk: If Apple's server-side pipelines transcode assets to lossy formats like JPEG or HEIC, least-significant bits change, causing data recovery to fail.
• Durability: A photo slideshow accompanied by acoustic guitar music does not constitute enterprise-grade data durability.

Users interested in reviewing the code or verifying the announcement can inspect the project repository on GitHub under the author `ashayas/icloud-s3`.