Location data (PII) exposed through image EXIF data #160372
Unanswered
deosrc
asked this question in
Other Feature Feedback, Questions, & Ideas
Replies: 1 comment
|
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Github is exposing location data through image EXIF data. I have reported this to support twice, but github insist it should be a feature request, and is not a security issue.
Location data is considered sensitive under most data protection regulations. Photos taken by users and uploaded to github is potentially leaking their location, including possible home address, along with extensive other information via image EXIF tags. Furthermore, this information, if accidentally posted as a comment, cannot be removed as github shows all versions of a comment. The only corrective action I believe is to delete the comment, but this does not address the comment being emailed to people who are subscribed to issues.
All reactions