Hi,
I have security concerns about the site. When viewing VIP profiles and photos they uploaded, it shows a little download icon on the top of right (or simply long pressing on it downloads it too). I discovered that the site doesn't reencode the photo and leaves all of the EXIF data intact. EXIF Data include for example the Camera being used, focal length, lens, shutter speed and more importantly GPS location data of where the photo has been taken. That means that anyone uploading a photo to their profile might be unknowingly sharing their location.
I’m not sure to whom in the staff team this could be useful to.
I have security concerns about the site. When viewing VIP profiles and photos they uploaded, it shows a little download icon on the top of right (or simply long pressing on it downloads it too). I discovered that the site doesn't reencode the photo and leaves all of the EXIF data intact. EXIF Data include for example the Camera being used, focal length, lens, shutter speed and more importantly GPS location data of where the photo has been taken. That means that anyone uploading a photo to their profile might be unknowingly sharing their location.
I’m not sure to whom in the staff team this could be useful to.
