If you upload a picture or video to a social media, do you expect geolocation and other metadata to be stripped?
#blossom
Discussion
could it be encrypted and included in the hash to include even better assurances?
I would like metadata and geolocation stripped out and replaced with the names of Jeffrey Epstein’s clients and the geolocation of Epstein island.
i second this
Yes.
Yeah, that would be best.
Don’t trust the server to remove the metadata, do it yourself on the client side.
That’d be the most secure approach and wouldn’t be too hard for clients to support. Clients can remove the metadata.
You can’t verify what software the relay is running, so they could be keeping your meta-data secretly…
But you can verify the code of the client you’re running. This is why clients should remove the metadata, rather than relays.
yes
absolutely. non techies are unaware this is even a thing so stripping metadata by default is almost required.
That's a dangerous expectation. You should assume the opposite always.
only upload screenshots
Some devices add metadata to screenshots. I use metadata remover and exif viewer on android to be sure and never trust the server.
On #nostr yes I’d expect that
On other socials ! No , I’d expect them to save it and use it in as many ways possible to extract milk from me, then sell the drained remains to anyone who wants it.
Yes.
Also what is the Blossom spec?
just last night, while changing my pfp, i was wondering if the protocol saves the pictures i uploaded, even if it was for a few minutes. it would be nice to see the data the user has created and be able to nitpick what they want erased.
Option for user, with identifying data cleared by default to every extent possible on any ostensibly privacy-oriented software.
Yes
I think its the users responsibility to strip then before upload.
Both clients and servers should default to strip. To include the metadata should be explicit opt-in.
Yes, because it’s sexier !
If they upload to my server, of course 💜
100% yes
-heard that but certain CDN server admin by law need to collect/keep in certain places where it is hosted
#yestr