[tbb-bugs] #24965 [Applications/Tor Browser]: Automatically remove metadata from images (EXIF) before upload

[Tor Bug Tracker & Wiki]

#24965: Automatically remove metadata from images (EXIF) before upload
-----------------------------------------------+--------------------------
 Reporter:  arthuredelstein                    |          Owner:  tbb-team
     Type:  defect                             |         Status:  new
 Priority:  Medium                             |      Milestone:
Component:  Applications/Tor Browser           |        Version:
 Severity:  Normal                             |     Resolution:
 Keywords:  tbb-fingerprinting, gsoc-proposed  |  Actual Points:
Parent ID:                                     |         Points:
 Reviewer:                                     |        Sponsor:
-----------------------------------------------+--------------------------

Comment (by arthuredelstein):

 Replying to [comment:4 cypherpunks]:
 > By default, seems really great to protect users (would such a benefit
 apply to GlobaLeaks as well?). What if I want to have EXIF data uploaded?
 There should be some pref for that I can flip in such cases.

 Yes, I can imagine a checkbox in the upload dialog or a pref might be a
 possibility. I think it's important that metadata is stripped by default,
 though.

 > PS: What about PDFs as well?

 Yes! There's a list on https://mat.boum.org that could serve as
 inspiration:

     Portable Network Graphics (.png)
     JPEG (.jpg, .jpeg, …)
     TIFF (.tif, tiff, …)
     Open Documents (.odt, .odx, .ods, …)
     Office OpenXml (.docx, .pptx, .xlsx, …)
     Portable Document Fileformat (.pdf)
     Tape ARchives (.tar, .tar.bz2, …)
     MPEG AUdio (.mp3, .mp2, .mp1, …)
     Ogg Vorbis (.ogg, …)
     Free Lossless Audio Codec (.flac)
     Torrent (.torrent)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24965#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online