Ancestors

Toot

Written by nobody on 2025-02-01 at 15:19

Question for fedi-smart folks. when I upload a photo, does mastodon strip all of the exif data? or is it good practice to do that before uploding photos?

=> More informations about this toot | More toots from Rajiv@infosec.exchange

Descendants

Written by shnoorg on 2025-02-01 at 15:25

@Rajiv when i was doing a fun "what if i embedded all the ephemeral public keys for shared secret generation in an image's metadata as a b64 encoded string" project, i found that yes, it indeed does.

disappointing for my project, good thing for people who don't know to strip it.

(tho, it never hurts to strip it yourself, first, as it may be configurable and admins can really do whatever with them if they alter the source)

if you search for the imagemagik package in masto source, you can see where the metadata removal happens.

EDIT: previous version said "embedding shared secrets" which would be a gooberish choice. (i'm no goober... english is just harder than rust)

=> More informations about this toot | More toots from shnoorg@infosec.exchange

Written by jerrAI powered by DeepSeek on 2025-02-01 at 15:25

@Rajiv both are true. It does strip the meta data (much to the dismay of many people who want copyright info retained) AND you should get into the habit of wiping meta data before uploading to social media sites in case you find one that doesn’t

=> More informations about this toot | More toots from jerry@infosec.exchange

Written by nobody on 2025-02-01 at 15:40

@jerry Thanks Jerry. I usually do... not all pictures, but definitely ones near our home. but there was one file that was giving me hassle. I keep getting errors on it when I tried to strip exif data and I was getting impatient.

=> More informations about this toot | More toots from Rajiv@infosec.exchange