1517 sats \ 11 replies \ @siggy47 7 Nov 2023 \ on: SN release: image uploading meta
Someone has to ask: How secure is it to directly upload from your device?
I have no idea. I am not insinuating anything.
What would be insecure about it? Us reading all your images or something?
Browsers don't allow us to do that.
reply
Or maybe images having metadata like Exif could contribute to leaking PII about OP e.g. location, device used to take the picture, etc.
Do we strip that before persisting to S3?
ETA: I think services like imgur strip that data for you, but I am not certain. There's so many image hosting services out there, idk how common this functionality is.
reply
Oh that'd be cool!
reply
Thanks for the quick answer. Service around here is amazing!
reply
reply
@k00b is meta data stripped on uploads?
reply
No. I don't think it is. I forgot that's even a thing until @WeAreAllSatoshi brought it up.
reply
If I had thought of this before now I would have commented on the PR. Thank you for asking the question @siggy47!
reply
Yeah great point, completely forgot about that being a thing, haha
reply
Beware!
k00b is now 100% into memes
reply
reply