search

urbit / landscape

Product board for Landscape.
20 stars 6 forks source link

Scrub metadata from all/any photos uploaded into Landscape #1355

Open urcades opened 2 years ago

urcades commented 2 years ago

I could have sworn this was an issue brought up formally in here as a feature request, but it doesn't look like it exists atm.

The request is simple: Any photo/image uploaded into Landscape should have any identifiable personal information scrubbed so people don't accidentally dox themselves, or reveal sensitive info malicious actors could make use of.

hey-kader commented 2 years ago

The quick way: extract the exif data, write it to /dev/null, and store the file in its native compression and size. You might have to subtract the length of what you remove from a total size value in the metadata in order for the picture to render

The other way: extract only the data from each image, compress jpg, tiff, heic & jpegs to png, make sure its size meets a fairly general criteria (min 500px x 500px, max 5k x 5k or something,) write everything that isn't raw pixel data to /dev/null. I suggest universal png compression because it is known to store the least metadata and is also a lossless means of compression

hey-kader commented 2 years ago

or! make sure that the user cant download bucket'd pictures, ever ( instagram does this )