Slashdot Mirror

← Back to Stories (view on slashdot.org)

The Hidden Security Risk of Geotags

Posted by timothy on from the process-of-elimination dept.

pickens writes "The NY Times reports that security experts and privacy advocates have begun warning consumers about the potential dangers of geotags, which are embedded in photos and videos taken with GPS-equipped smartphones and digital cameras. By looking at geotags of uploaded photos, 'you can easily find out where people live, what kind of things they have in their house and also when they are going to be away,' says one security expert. Because the location data is not visible to the casual viewer, the concern is that many people may not realize it is there; and they could be compromising their privacy, if not their safety, when they post geotagged media online."

11 of 175 comments (clear)

  1. This is why... by Darkness404 · · Score: 5, Insightful

    This is why upload services should simply just strip out the un-needed info of the pictures. The original pictures still have the sometimes useful geolocation data, but your Facebook pictures won't.

    --
    Taxation is legalized theft, no more, no less.
    1. Re:This is why... by fuzzyfuzzyfungus · · Score: 5, Insightful

      After selling it to their advertising partners, of course...

    2. Re:This is why... by Anonymous Coward · · Score: 5, Insightful

      This is why people shouldn't be so casual about publishing every detail of their personal life for the world to see. These micro-celebrity wannabes should wake up and recognize that their lack of privacy makes them easy targets.

    3. Re:This is why... by betterunixthanunix · · Score: 4, Insightful

      Before any of you say, "stripping is already available", keep in mind how many co-workers don't even know what cookies are.

      You insensitive clod! My coworkers are all CS grad students.

      Seriously though, they don't take any steps to strip metadata, even though it is well within their technical ability to do so, and even though they are generally aware of the risks.

      --
      Palm trees and 8
    4. Re:This is why... by fuzzyfuzzyfungus · · Score: 3, Insightful

      Depending on how economically striated the city is, possibly, possibly not.

      I'd assume that they are more interested in pictures taken out and about. Where do you vacation, dine out, meet up with friends, etc?

      As you say, IP geolocation does a pretty decent job for wired connections(I don't know whether wireless carriers will sell out customer locations, and, if so, what the price is); but people take a lot of photos, possibly the majority, away from their primary wired ISP.

    5. Re:This is why... by Jah-Wren+Ryel · · Score: 5, Insightful

      Would knowing, say, that the majority of interior shots (probably my home) are on one particular city block vs another really be worth that much more to an advertiser?

      Yes. They can correlate it with property records and figure out who you are, what bank you have your mortgage with, how much you paid for your house, when you bought it, your likely income level, if you are married (more than one name on the mortgage) and that's just from the primary property records search in some states. Start cross-referencing it with other databases and my guess is that you'll have no secrets at all.

      --
      When information is power, privacy is freedom.
  2. The Hidden Danger of Post Marks on Letters by Palestrina · · Score: 5, Insightful

    OMG, letters have post marks and tell what town the sender lives in!

    OMG, caller ID gives my phone number to people that I call!

    OMG, the Registry of Deeds lists my address and how much I paid for the house!

    OMG, the phone book list my name, phone number and address!

    We've been dealing with stuff like this for decades, right? I think the danger is more about the contents of your tweets ("I am on vacation") than the metadata ("I live here"). I can probably find your address if I wanted, even without Flickr metadata.

    Of course, metadata can lie as well. Maybe I want to say, "I have a big coin collection" in Twitter and put photos of it all over the place on the web, but with false geotag data to make it look like it came from someone else's home. Because of that risk, even those who do not use Twitter, or the iPhone or Flickr are also at risk. Gee. maybe we should just lock our doors at night.

    1. Re:The Hidden Danger of Post Marks on Letters by grumbel · · Score: 3, Insightful

      The problem is that it allows correlation. Have two pseudonyms on the net that you use to post pictures? Now suddenly people can easily track you down by your GPS coordinates or better yet, the serial number of your camera or whatever other unique information one can grab from the metadata.

    2. Re:The Hidden Danger of Post Marks on Letters by PopeRatzo · · Score: 4, Insightful

      OMG, letters have post marks and tell what town the sender lives in!

      You believe that having a creep know the town you live in is the same as the creep knowing your GPS coordinates?

      No, we haven't been "dealing with stuff like this for decades", because until recently corporations have not had the capacity to have such persistent and precise data about you that they could monetize.

      That picture of your 8 year old daughters that you put on the Internet has data that somebody will sell to the highest bidder, and I doubt they're going to make sure the highest bidder isn't a registered sex offender. I'm usually very suspicious of these kind of "consider the children" appeals, but the personal minutiae that is being commoditized by businesses has reached a point where it's going to be very hard to roll back.

      You've got one of the biggest corporations in the world collecting very private information, selling it to the highest bidder and then getting into bed with the most repressive regimes on Earth and at the same time forming "strategic alliances" with other huge corporations to subvert the effective net "neutrality":that has been in place since the beginning. And Palestrina thinks that's the same as having your name and number voluntarily listed in the phone book. And his rationalization is that it's OK because if you know what you're doing you can falsify your metadata. Don't you see the problem here?

      --
      You are welcome on my lawn.
  3. Dangers to rare speciesand historical sites by jo7hs2 · · Score: 3, Insightful

    Potential security issues aside, geotags have always concerned me with the potential for unintended consequences. As someone with a passion for both native orchids and other rare life forms, along with history, I'm always concerned how an innocent snapshot by someone using geotagging might provide detailed location data to a poacher or pothunter. I've already seen a few plant populations decimated by a mere Flickr post, and I know I've seen geotags for the same species at other locations. I think it is a feature that should be disabled by default and used only with caution.

  4. That photo looks too good. I call BS. by tepples · · Score: 3, Insightful

    Gimp has an exif option, I have not used it.

    But if you take a photo for Wikimedia Commons and strip the Exif, and your photography skill looks professional, some regular might assume that you are fraudulently claiming copyright ownership of some other photographer's all-rights-reserved images. Preserving your camera's Exif data tends to shift the burden of proof to whoever is calling bullshit.