Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

A lot of folks accepting image uploads don't realize they need to remove the exif data from the images, as that often leaks gps coordinates if they were taken using a cell phone. With imagemagick, you can use the `-strip` flag[0] when processing the images to remove that info.

[0] https://imagemagick.org/script/command-line-options.php#stri...




It's shame all exif info is stripped. I like to see the camera info, such as focal length, aperture and what lens too for interchangeable lens cameras.


A responsible site will strip this on the user’s behalf, but no one should rely on that.

If I want to be lazy about it and quality doesn’t matter, I’ll take a screenshot as a quick way to strip EXIF data, the location being the key piece I want gone.


I don't grant my camera app location permissions, so the images are never tagged with gps in the first place, but I also will screen shot pictures before sending them anywhere.


IIRC This is how John McAfee's location was leaked when he was on the run, a Vice reporter took a selfie with him and uploaded it to the website without stripping the EXIF data




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: