Skip to content

Squint 0.9.2

Choose a tag to compare

@TheBenMeadows TheBenMeadows released this 18 Oct 15:29
0da2f42

This release closes ways in which Remove Location Data left identifying metadata in a file while reporting it removed, found by two code audits and an outside review.

JPEG. A progressive JPEG may carry XMP or comment segments between its scans, and they survived; one holding a thumbnail could also cut the picture short. They are now removed and the scans kept whole. Adobe's colour-transform segment, which a CMYK JPEG needs to render with the right colours, is kept, and only when it is exactly that segment.

HDR gain maps. A gain map's own XMP was copied back whole, so a location written there survived. It is now kept only when it holds nothing but the parameters a renderer reads; a gain map whose XMP holds those and anything else is refused rather than written back without them. iPhone and Ultra HDR photographs strip exactly as before.

PDF. The JPEG pictures inside a PDF kept their EXIF, GPS included, also when stored under an ASCII or Flate filter. Comment authors and dates, private editing data and the file ID survived, as did an old cross-reference stream carrying the author. All of these are removed; form-field names are kept, because a form is filled and read by them. A PDF whose picture cannot be read through is refused.

TIFF. Pages after the eighth were left untouched, and several identity tags were not removed: IPTC inside Photoshop's resources, Windows title and author, the original capture time, the maker note, camera owner, body and lens serial numbers, and a DNG's embedded original raw file. Every page is now stripped, and the bytes a removed tag leaves behind are cleared.

HEIF and AVIF. C2PA content credentials and a sequence's movie metadata and capture times are removed.

A Strip that would make a file larger now says so, instead of reporting that there was nothing to remove.

Changes: #105, #106, #107, #108, #109, #110, #111, #112, #113, and #114, which installs the Mac App Store edition under its own name.

Apple silicon, macOS 14 or later. Signed and notarized.

SHA-256

210201e14ee9926b2e8d8a83d69ce58ae0649a721a0cf64aa6d76a99b7f6af6e  Squint-0.9.2.dmg
4da717a32d07f32e917717e0053c14cf55b52e296e119b5547b2a3940359de83  Squint-0.9.2.zip