[tor-bugs] #24965 [Applications/Tor Browser]: Automatically remove metadata from images (EXIF) before upload

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Mar 1 23:30:35 UTC 2018

#24965: Automatically remove metadata from images (EXIF) before upload
 Reporter:  arthuredelstein                    |          Owner:  tbb-team
     Type:  defect                             |         Status:  new
 Priority:  Medium                             |      Milestone:
Component:  Applications/Tor Browser           |        Version:
 Severity:  Normal                             |     Resolution:
 Keywords:  tbb-fingerprinting, gsoc-proposed  |  Actual Points:
Parent ID:                                     |         Points:
 Reviewer:                                     |        Sponsor:

Comment (by arthuredelstein):

 Replying to [comment:4 cypherpunks]:
 > By default, seems really great to protect users (would such a benefit
 apply to GlobaLeaks as well?). What if I want to have EXIF data uploaded?
 There should be some pref for that I can flip in such cases.

 Yes, I can imagine a checkbox in the upload dialog or a pref might be a
 possibility. I think it's important that metadata is stripped by default,

 > PS: What about PDFs as well?

 Yes! There's a list on https://mat.boum.org that could serve as

     Portable Network Graphics (.png)
     JPEG (.jpg, .jpeg, …)
     TIFF (.tif, tiff, …)
     Open Documents (.odt, .odx, .ods, …)
     Office OpenXml (.docx, .pptx, .xlsx, …)
     Portable Document Fileformat (.pdf)
     Tape ARchives (.tar, .tar.bz2, …)
     MPEG AUdio (.mp3, .mp2, .mp1, …)
     Ogg Vorbis (.ogg, …)
     Free Lossless Audio Codec (.flac)
     Torrent (.torrent)

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24965#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tor-bugs mailing list