Here is Corn uploading my image via iOS Olas.

nostr:nevent1qqsgusdgpqd8yq9sh2ssavjap32646kz4auj926y0x48mr3sfkazhdcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygymlqc45vaqcqntrw3v8uxt3gmqz8uc28z0xg2efrn97ek3erl7rqpsgqqqqq2qstnjn8

And here is me uploading it via Android Olas.

nostr:nevent1qqsx6mx9dg9zpxwpuxa5tkvgk8plpcc33tk7a8z2hcn37y9tgqq5w6gpz9mhxue69uhkummnw3ezuamfdejj7q3q8ams6ewn5aj2n3wt2qawzglx9mr4nzksxhvrdc4gzrecw7n5tvjqxpqqqqqpgleztv4

Both using the same image to nostr.download Blossom. His version has GPS. Mine does not.

Reply to this note

Please Login to reply.

Discussion

The point is that blossom, using standard /upload API, does not allow for any manipulation of the media at all. If image is huge and has bunch of exif data in it, it will remain as uploaded. If client has a bug, or Android/iOS changes an api or something, the image will be exposed to potential leakage of metadata. Server could check and refuse, but I know that only nostr.build has it now for no_transform uploads using API (or account page). Some other servers may have it implemented too, but I don’t know of any.