pull down to refresh

Someone has to ask: How secure is it to directly upload from your device?
I have no idea. I am not insinuating anything.

What would be insecure about it? Us reading all your images or something?

Browsers don't allow us to do that.

reply

Or maybe images having metadata like Exif could contribute to leaking PII about OP e.g. location, device used to take the picture, etc.

Do we strip that before persisting to S3?

ETA: I think services like imgur strip that data for you, but I am not certain. There's so many image hosting services out there, idk how common this functionality is.

reply

Oh that'd be cool!

reply

Thanks for the quick answer. Service around here is amazing!

reply
reply

@k00b is meta data stripped on uploads?

reply

No. I don't think it is. I forgot that's even a thing until @WeAreAllSatoshi brought it up.

Ticket: https://github.com/stackernews/stacker.news/issues/607

reply

If I had thought of this before now I would have commented on the PR. Thank you for asking the question @siggy47!

reply

Yeah great point, completely forgot about that being a thing, haha

reply

Beware!
k00b is now 100% into memes

reply