I used to manually remove for example the GPS location when using Reddit since I don’t trust them. Does Lemmy or any Android client remove it by default?

  • Ultrawipf
    link
    fedilink
    English
    arrow-up
    12
    ·
    1 year ago

    Uploaded this test image in the comment with modified metadata (no gps tag but added software, date, vendor info as exif tags) and after downloading it does not contain any metadata anymore. So seems like at least that server does remove it?

    • SalzkrebsOP
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 year ago

      Thanks for your effort :) So it seems like you have to trust your instance?

      • Ultrawipf
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        Yeah probably. Seems like the image is not stored in its original form in this case but might depend on server settings and the image file. So as always private data like geo tags should be removed before uploading.

        • SalzkrebsOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          1 year ago

          Would be much easier if clients like Jerboa would remove them by default. Maybe it’s already implemented but if not I will probably write a feature request or implement it by myself.

      • TedvdB@feddit.nl
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        Yes, but that’s something anyway;

        • DM’s are unencrypted and stored in the database.
        • If the instance owner decides to pull the plug it’s all gone.

        So by joining an instance you’re putting trust in the owner of the instance either way.

        • SalzkrebsOP
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago

          But there is still a difference between the owner being able to take my public content offline and them knowing my private location. However, since my instance is non commercial and doesn’t make any money by tracking it shouldn’t be that bad to trust them on that.