Hacker News new | ask | show | jobs
by ryandrake 72 days ago
I'm gonna die on this hill, but silently attaching very sensitive PII (including exact lat/lon) to photos has always been a terrible anti-feature. One of those "WTF were they actually thinking?" terrible anti-features. Imagine if you created a word document and Microsoft silently attached your home address to them as metadata. Awful and totally unexpected to the vast majority of users.
2 comments
Synthetic7346 71 days ago
Well Microsoft actually did attach metadata to word files, and it led to the arrest of a serial killer. Not saying they should do it, just found it funny that you picked the one example that did actually happen.

https://www.reddit.com/r/wikipedia/comments/am9mzq/its_neat_...

link
nullfield 71 days ago
As someone else mentioned it IS entirely problematic how advertisers/others abuse people, and I get WHY location gets stripped. I still think it's abusive to take away the user's choice.

(and why do they have to strip almost ALL EXIF data, instead of just location? [yes, yes, fingerprinting, but there are LOTS of iPhone {NUMBER} whatever out there])

It really just needs to be clearly communicated, opt-in at attach time. Probably with a severely hidden, developer-screen level, or BIG WARNING in security settings to totally disable stripping.

I assume most people won't want it, _usually_, so when adding photos just have it be a double-opt in - you have to both hit an extra button during attachment, then select "include location" or "include location and metadata", then a modal warning/confirmation.

Something like: "Confirm including photo location? This will permit the recipient to see where the pictures were taken. <yes/no>"

link
inhumantsar 71 days ago
I agree with you that, when sharing, location should be stripped by default with an option to include it.

After seeing this post I checked my recent photos. I'm using a Pixel 6 Pro with the most recent android release and the stock camera app. None of my recent photos have location in the EXIF, even locally, and there's no option to turn it on.

It's particularly galling that the Camera app still wants location permissions and if you view a photo in the Google Photos app, the location is still there. Google can have those exact locations, but no one, not even the user, can.

It's abusive as hell.

link
ChoGGi 71 days ago
> None of my recent photos have location in the EXIF, even locally, and there's no option to turn it on.

You don't have this option?

https://imgur.com/a/piFLtfD

link