4 ms·

https://www3.nhk.or.jp/shutoken-news/20191008/1000037432.html https://www3.nhk.or.jp/shutoken-news/20191008/1000037432.htm... appears to be the original source

by chippy 7y ago

https://www3.nhk.or.jp/shutoken-news/20191008/1000037432.html https://www3.nhk.or.jp/shutoken-news/20191008/1000037432.htm... appears to be the original source including a much better quote about the tech relevance: "Because the performance of smartphone cameras has improved and the image quality has become very fine, privacy information has leaked out in a completely unexpected manner. ... "Users need to be well aware that there is always a risk of privacy leaks, and new measures are required on the software side, such as the option of degrading image quality."

comboy 7y ago
Friendly tip if you are uploading any photo made by you to some untrusted site (works on linux and macos): exiftool -all="" filename.jpg Because oftentimes you don't need to look at the picture to figure out the location.
- sml156 7y ago
  exiftool tool also has a GUI for Windows, It's not pretty to look at but works great
  - ktta 7y ago
    On windows you can go into the properties window, and there's an option to clear the metadata of the image.
- giancarlostoro 7y ago
  You can also additionally configure your phone not to tag the geolocation on your photos.
- TomK32 7y ago
  Faking the geolocation might be more fun and frustrate any attacker :)
- codedokode 7y ago
  Why don't browsers do this? Firefox should implement this (warn about geolocation and suggest either remove it or fake it).
  - ourcat 7y ago
    A browser extension could do this. (Maybe one already does?)
    - mumblemumble 7y ago
      I'm guessing most of these sorts of photos are posted directly from a smartphone, though, these days. So fancy unix commands or browser extensions would help protect statistically zero people. Apple, though, with privacy ostensibly being their thing, would be pretty on-brand to set up an iOS capability for getting to see the original image files, with all apps you don't explicitly authorize instead getting to see degraded-resolution images with the exif data scrubbed. Android could do it, too, but it seems less likely to happen since all that extra information is valuable marketing and tracking signal.
      - lonelappde 7y ago
        Surely this should be a camera feature or image editing plugin (which Android already supports today). The swipe against Android is absurd, since Google could easily slurp that information before letting you edit it (as the do with your browsing activity) to prevent others from accessing that information, if they wanted to (which they don't).
        matt-attack 7y ago
        I don’t want that feature in my camera since the geo data is phenomenal for organizing and search. I want the metadata in my copy just not in the copy I upload.
        saagarjha 7y ago
- throwaway9d0291 7y ago
  Beware that this can strip colour profile information and lead to incorrect rendering of your image. I'm not quite sure how to address that properly.
  - PavlovsCat 7y ago
    It should be possible to use exiftool to write any color profile tags you want to keep to a separate file, strip all metadata from the image, and then copy the color profile metadata you saved out earlier back to the image.
- mike00632 7y ago
  Dumb question: do Twitter, Facebook and Instagram remove location exif data?
  - mytdi 7y ago
    They do, but that's not to say that they don't store the exif data for themselves.
  - jacquesm 7y ago
    They do, but you don't know at which stage and whether or not raw copies are kept. Most platforms will at least filter the egress.
throw0101a 7y ago
Another English article that's a little better: * https://www.tokyoreporter.com/crime/saitama-man-used-eye-reflection-in-online-image-to-stalk-idol/ https://www.tokyoreporter.com/crime/saitama-man-used-eye-ref...
ASalazarMX 7y ago
Woah, first Japanese site I've seen that doesn't look like a casino. To be frank, I don't visit many Japanese sites, I thought all looked the same.
- autoexec 7y ago
  The article is pretty clean but the main page is probably a little closer to what you're expecting. Japanese sites do tend to have a certain sort of "busy"/boxy look to them.
grawprog 7y ago
Yeah. It's pretty easy for dedicated people to do. I recently watched a bunch of people track down that was spamming a board's home address from a picture of their hand that showed a small patch of front yard in less than a half hour. This was with no exif info. You should always be careful where you post pictures to and what's visible in them.

by chippy 7y ago

comboy 7y ago

Friendly tip if you are uploading any photo made by you to some untrusted site (works on linux and macos): exiftool -all="" filename.jpg Because oftentimes you don't need to look at the picture to figure out the location.

sml156 7y ago
exiftool tool also has a GUI for Windows, It's not pretty to look at but works great
- ktta 7y ago
  On windows you can go into the properties window, and there's an option to clear the metadata of the image.
giancarlostoro 7y ago
You can also additionally configure your phone not to tag the geolocation on your photos.
TomK32 7y ago
Faking the geolocation might be more fun and frustrate any attacker :)
codedokode 7y ago
Why don't browsers do this? Firefox should implement this (warn about geolocation and suggest either remove it or fake it).
- ourcat 7y ago
  A browser extension could do this. (Maybe one already does?)
  - mumblemumble 7y ago
    I'm guessing most of these sorts of photos are posted directly from a smartphone, though, these days. So fancy unix commands or browser extensions would help protect statistically zero people. Apple, though, with privacy ostensibly being their thing, would be pretty on-brand to set up an iOS capability for getting to see the original image files, with all apps you don't explicitly authorize instead getting to see degraded-resolution images with the exif data scrubbed. Android could do it, too, but it seems less likely to happen since all that extra information is valuable marketing and tracking signal.
    - lonelappde 7y ago
      Surely this should be a camera feature or image editing plugin (which Android already supports today). The swipe against Android is absurd, since Google could easily slurp that information before letting you edit it (as the do with your browsing activity) to prevent others from accessing that information, if they wanted to (which they don't).
      - matt-attack 7y ago
        I don’t want that feature in my camera since the geo data is phenomenal for organizing and search. I want the metadata in my copy just not in the copy I upload.
        saagarjha 7y ago
throwaway9d0291 7y ago
Beware that this can strip colour profile information and lead to incorrect rendering of your image. I'm not quite sure how to address that properly.
- PavlovsCat 7y ago
  It should be possible to use exiftool to write any color profile tags you want to keep to a separate file, strip all metadata from the image, and then copy the color profile metadata you saved out earlier back to the image.
mike00632 7y ago
Dumb question: do Twitter, Facebook and Instagram remove location exif data?
- mytdi 7y ago
  They do, but that's not to say that they don't store the exif data for themselves.
- jacquesm 7y ago
  They do, but you don't know at which stage and whether or not raw copies are kept. Most platforms will at least filter the egress.

throw0101a 7y ago

Another English article that's a little better: * https://www.tokyoreporter.com/crime/saitama-man-used-eye-reflection-in-online-image-to-stalk-idol/ https://www.tokyoreporter.com/crime/saitama-man-used-eye-ref...

ASalazarMX 7y ago

Woah, first Japanese site I've seen that doesn't look like a casino. To be frank, I don't visit many Japanese sites, I thought all looked the same.

autoexec 7y ago
The article is pretty clean but the main page is probably a little closer to what you're expecting. Japanese sites do tend to have a certain sort of "busy"/boxy look to them.

grawprog 7y ago

Yeah. It's pretty easy for dedicated people to do. I recently watched a bunch of people track down that was spamming a board's home address from a picture of their hand that showed a small patch of front yard in less than a half hour. This was with no exif info. You should always be careful where you post pictures to and what's visible in them.