104 lines
3.1 KiB
Markdown
104 lines
3.1 KiB
Markdown
# Metadata Privacy Risks
|
|
|
|
Understanding why metadata removal matters for privacy and security.
|
|
|
|
## What is Metadata?
|
|
|
|
Metadata is "data about data" - hidden information embedded in files that describes when, where, how, and by whom a file was created or modified.
|
|
|
|
## Common Metadata Types
|
|
|
|
### 📸 Images (JPEG, PNG)
|
|
|
|
| Metadata Type | Privacy Risk |
|
|
|---------------|--------------|
|
|
| **GPS Coordinates** | Reveals exact location where photo was taken |
|
|
| **Camera Model** | Can identify specific device, linked to owner |
|
|
| **Date/Time** | Reveals when photo was taken |
|
|
| **Software** | Shows editing tools used |
|
|
| **Thumbnail** | May contain original uncropped image |
|
|
|
|
### 📄 Documents (Word, PDF)
|
|
|
|
| Metadata Type | Privacy Risk |
|
|
|---------------|--------------|
|
|
| **Author** | Reveals creator's name/username |
|
|
| **Company** | Exposes employer information |
|
|
| **Last Modified By** | Shows who edited the document |
|
|
| **Comments** | May contain internal notes |
|
|
| **Revision History** | Can expose previous versions |
|
|
|
|
### 📊 Spreadsheets (Excel)
|
|
|
|
| Metadata Type | Privacy Risk |
|
|
|---------------|--------------|
|
|
| **Author** | Reveals creator identity |
|
|
| **Company** | Exposes organization |
|
|
| **Keywords** | May reveal document purpose |
|
|
| **Custom Properties** | Internal tracking data |
|
|
|
|
### 📽️ Presentations (PowerPoint)
|
|
|
|
| Metadata Type | Privacy Risk |
|
|
|---------------|--------------|
|
|
| **Author** | Creator identity |
|
|
| **Title/Subject** | May reveal confidential topics |
|
|
| **Comments** | Presenter notes, internal feedback |
|
|
|
|
---
|
|
|
|
## Real-World Examples
|
|
|
|
### Case 1: Location Leak via Photo
|
|
A journalist shared a photo online. The embedded GPS coordinates revealed their safe house location, putting sources at risk.
|
|
|
|
### Case 2: Internal Document Exposed
|
|
A company released a redacted PDF. The author metadata still showed an employee's full name and the legal department.
|
|
|
|
### Case 3: Anonymous Submission Failed
|
|
A whistleblower submitted documents "anonymously" but the Word metadata contained their username and computer name.
|
|
|
|
---
|
|
|
|
## High-Risk Scenarios
|
|
|
|
1. **Sharing photos on social media** - GPS can reveal home address
|
|
2. **Sending documents to clients** - Author reveals internal usernames
|
|
3. **Publishing reports externally** - Revision history may expose drafts
|
|
4. **Submitting anonymous tips** - Metadata can identify the source
|
|
5. **Legal discovery** - Metadata is often requested in litigation
|
|
|
|
---
|
|
|
|
## What This Tool Removes
|
|
|
|
| Category | Removed Properties |
|
|
|----------|-------------------|
|
|
| **Identity** | Author, Last Modified By, Creator |
|
|
| **Location** | GPS Latitude, Longitude, Altitude |
|
|
| **Device** | Camera Model, Software, Device ID |
|
|
| **Tracking** | Comments, Keywords, Custom Properties |
|
|
|
|
### Preserved (Intentionally)
|
|
|
|
- **Created Date** - Often needed for file organization
|
|
- **Modified Date** - Required for version tracking
|
|
- **Language** - Accessibility purposes
|
|
|
|
---
|
|
|
|
## Best Practice
|
|
|
|
**Always scrub metadata before sharing files externally.**
|
|
|
|
```bash
|
|
# Check what metadata exists
|
|
mst read document.pdf
|
|
|
|
# Remove metadata
|
|
mst scrub document.pdf --output ./clean
|
|
|
|
# Verify removal
|
|
mst verify document.pdf ./clean/processed_document.pdf
|
|
```
|