Slashdot Mirror
The Hidden Security Risk of Geotags
pickens writes "The NY Times reports that security experts and privacy advocates have begun warning consumers about the potential dangers of geotags, which are embedded in photos and videos taken with GPS-equipped smartphones and digital cameras. By looking at geotags of uploaded photos, 'you can easily find out where people live, what kind of things they have in their house and also when they are going to be away,' says one security expert. Because the location data is not visible to the casual viewer, the concern is that many people may not realize it is there; and they could be compromising their privacy, if not their safety, when they post geotagged media online."
While I agree with you, some metadata problems are much more subtle and insidious.
How many of you have ever written "my boss is an idiot" on a word document at work, as a joke, then erased it?
Better hope your boss isn't savvy.
Which is why I believe that any Joe-user program which processes documents or media should offer a checkbox and.or dialog explantion offering the user to strip the metadata from saved documents or media. Before any of you say, "stripping is already available", keep in mind how many co-workers don't even know what cookies are.
After selling it to their advertising partners, of course...
Seems kinda pointless. I already get pretty damned accurate location-specific ads, presumably by just looking at my ip. When I connect to my employer's VPN, I get ads for things in the region that that data center is in...
Would knowing, say, that the majority of interior shots (probably my home) are on one particular city block vs another really be worth that much more to an advertiser?
There aint no pancake so thin it doesn't have two sides.
I actually mean that literally. We go on and on about various privacy risks and on and on about how stupid "average people are" when there are some obvious patterns of behavior outside of computing/networking that shed some real light on where the problems originate.
People simply don't understand the world they live in. They don't understand their cars, their food (c'mon diet coke? really? that nutrasweet that slows your metabolism?) or just about anything? They might think they know some things but not really understand them and nor do they really care to. The people get "flu shots" every year not knowing what strains of influenza are actually being covered by this year's flu-shot-du-jour... they just expect "the experts" to know and to do what they are told.
So who are these experts that the masses follow? Whoever claims to be. The dairy council, for example (you know, the guys who make their living selling dairy products?) tell us every year to drink even more milk than last year. And Microsoft, the company who helped to make "computer virus" a household word and cares more about selling the same thing over and over again instead of redesigning an OS that is both easy and secure. And a lot more. The people who have the most to gain by people being stupid are the "experts." And of course, questioning is something that is beaten out of us by the time we get through the first years of public school so there's no chance of a renaissance happening any time soon... at least not without a dark ages preceding it.
The problem is much, much larger than just being aware of meta-data in a picture. And yes, I agree with some here who suggest that "these online services should really have our backs" on this sort of thing, but it's not really in their interests to do so... so why would they?
There's a pretty big site dedicated to the growing of marijuana, where the users post pictures of their grow operations from behind the "protection" of proxies. :)
Just for kicks one day I started checking their pictures. About 20 to 25 percent of them were geotagged. Some of those grows had hundreds, if not thousands of plants. So much for hiding behind a proxy.