redacted

[ghost]

redacted

[l3jyeo]

I agree. I have also uploaded a photo as a profile picture using riot-web, went on another user, downloaded the profile picture, and all the metadata was still there. This is a privacy concern.

[lampholder]

Thanks for your comments; feedback is always appreciated. Stripping exif data from images is a good idea, especially if it's a default setting people can change if they do want to upload their images with the metadata unmolested.

PS. Why on earth do I still have to waste time reporting this sort of obvious privacy problems and then wait years hoping they will get fixed?!

I understand your frustration, but please remember that we're a small team working on a lot of very complex problems - we're trying to priortise the best we can, but we can't work on everything at once. We don't always get our prioritisation right, but we're always trying to strike a balance between adding features, improving stability, enhancing privacy, growing our user base and supporting the ecosystem.

Also do remember - if you want to submit specific fixes for things, the project is open source and submissions are welcome. This might be a tricky one - you'd have to liaise with the core team to get the design right, 'cause (I think) we'd ideally want to implement this as an additional step in media upload (I think we'd want to strip exif on the way in rather than just on the way out).

[t3chguy]

Duplicate of #4426