element-hq / element-hq/element-android

User is not informed when Exif is not scrubbed

Open
#3,539 8 comments 1 reaction 0 assignees View on GitHub
A-File-Upload Privacy
Dominant language
Kotlin
Stars
3.7k
Forks
917
PR merge metrics
No merged PRs in 30d

Description

1. Send image, uncheck `Send image with the original size`
2. Download, learn that Element auto-strips sensitive EXIF metadata, love it
3. Read no mention of `datetime, make and model, IDs` on the checkbox, infer it is safe to tick (false sense of security)
3. Send image to Mr Evil, do check `Send image with the original size`
4. Sensitive EXIF metadata was sent.

For clarity, lack of communication that EXIF was stripped is safe, the worst case is an inconvenience. This issue is about lack of communication that EXIF was **not** going to be stripped.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.