Privacy › Module 4 › Lesson 3
Photo Metadata & Location Leaks
Understand EXIF metadata in photos and strip location data before sharing
Opening
The picture is the payload; the map pin is in the header
A JPEG is not only pixels. EXIF (Exchangeable Image File Format) is a metadata block many cameras and phones write into the file: when it was taken, which device took it, and — if location was on — GPS latitude and longitude. You thought you shared a sunset. You may have shared a coordinate. This lesson uses a copy of one photo you own. You inspect it, then strip GPS before you would post. You never run EXIF tools on other people's photos to find their homes. That is stalking, not digital safety.
1. What EXIF actually carries — and what apps may or may not strip
Typical EXIF fields: DateTimeOriginal (timestamp), Make/Model (phone or camera), orientation, and a GPS IFD with lat/long/altitude when the camera app had location permission. That is enough to pin a house, a school gate, or a hotel. Repeated geotagged shots at the same coordinates are a pattern, not a one-off leak. Timestamps plus GPS are a travel diary: when you were away, when you returned. Social apps are inconsistent on purpose and by accident. Some strip GPS on upload. Some keep timestamp and camera model. Some keep everything on download-from-original. Direct messages, email attachments, and "send as file" paths often preserve more than a compressed feed upload. You do not outsource stripping to the platform. You strip on a copy you control, then post the copy — or you disable location for Camera so new originals never grow a GPS block.
Screenshots vs originals is a second mechanism. A screenshot of a photo is usually a new image file: often no GPS IFD, sometimes no camera model. It is a blunt tool (quality drops; you can still leak a street sign in the pixels). The original from the camera roll is the dangerous file. Background details in the pixels are not EXIF but they rhyme: a badge, a reflection, a unique curtain. EXIF is the hidden header; the scene is the visible header. Strip GPS either way. Think before the pixels name a place.
2. Wrong vs right: extracting GPS from a stranger's upload
Worked failure mode — using metadata literacy as a hunting license. Tools stay on copies of YOUR photos in your lab folder.
Wrong
Download a classmate's Instagram original, run exiftool to "see if they leaked home," or parse GPS from a photo someone emailed you as "OSINT practice." Publish coordinates. That is stalking. Do not inspect other people's files for location. Do not keep their photos in cyberlium-lab.
Right
Copy ONE photo you took into $HOME/cyberlium-lab. Inspect with exiftool or identify if installed; on Windows, right-click → Properties → Details. Strip GPS (or remove properties) on that copy. Post only the stripped copy if you post at all. Never extract GPS from other people's photos.
3. Practical: one of your photos, inspect, strip GPS
Copy, do not move, a photo you own. Work in $HOME/cyberlium-lab so the camera roll original stays untouched until you decide. exiftool prints the headers; exiftool -gps:all= writes a copy without the GPS IFD (keep -all= only if you intend to drop every tag). ImageMagick identify -verbose is a fallback for GPS lines. On Windows without those tools: Properties → Details → Remove Properties and Personal Information → create a copy. If neither CLI tool is installed, the Properties path still completes the lesson — install later if you want; do not download random "EXIF spy" apps.
Command guide
Inspect and strip GPS on a copy of YOUR photo only
Command — copy this
mkdir -p "$HOME/cyberlium-lab"
Optional command
Copy ONE photo YOU took (example name). Do not use other people's files. cp "/path/to/your-photo.jpg" "$HOME/cyberlium-lab/my-photo.jpg"
Command — copy this
cd "$HOME/cyberlium-lab" NOTES="$HOME/cyberlium-lab/exif-notes.txt"
Linux/macOS/WSL — if installed:
Command — copy this
exiftool my-photo.jpg > "$NOTES" 2>&1 || true identify -verbose my-photo.jpg 2>/dev/null | grep -i -E 'gps|date|model' >> "$NOTES" || true
Strip GPS into a new file (keeps pixels; drops location tags)
Command — copy this
exiftool -gps:all= -o my-photo-nogps.jpg my-photo.jpg 2>>"$NOTES" || true
Confirm GPS gone on the copy
Command — copy this
exiftool -gps:all my-photo-nogps.jpg >> "$NOTES" 2>&1 || true chmod 600 "$NOTES" my-photo.jpg my-photo-nogps.jpg 2>/dev/null || true
Windows (no exiftool): File Explorer → right-click the COPY → Properties Details → Remove Properties and Personal Information → Create a copy with all possible properties removed Then post/share that copy, not the camera-roll original.
NEVER: exiftool on photos you do not own NEVER: extract GPS from classmates, partners, or strangers NEVER: "verify" a leaked photo of someone else as a lab
Mission: strip GPS from a copy of your own photo
Copy one photo you took into $HOME/cyberlium-lab. Inspect EXIF with exiftool or identify if installed, or Windows Properties → Details. Strip GPS (exiftool -gps:all= -o … or Remove Properties on a copy). Note whether the original had GPS. Never extract location from other people's photos. chmod 600 the notes.
Stuck? Ask Cyberlium AI Mentor
If exiftool is missing or Windows Properties looks empty, ask Cyberlium AI Mentor for a hint — not a command to parse someone else's image. Try: "Hint only: I copied MY jpeg into cyberlium-lab; how do I tell GPS IFD from DateTimeOriginal, and which flag writes a no-GPS copy?"
You can name the dangerous fields (GPS, model, timestamp), you do not trust social upload to strip them, and you know a screenshot is a rough substitute while the original file is the one that still carries a map. Tools stay on your copies. Next — Quiz — Social Media & Data Brokers — APPLY audience, brokers, and EXIF, then Module 5 starts with Email Aliases.
Knowledge Check
APPLY: You email a full-resolution camera-roll JPEG to a group chat. Instagram last month seemed to strip location. What should you assume?
Multiple choice
Knowledge Check
APPLY: A teammate wants to run exiftool on photos scraped from a public profile "to teach GPS risk." What is the ethical lab?
Multiple choice
Knowledge Check
APPLY: True or False: On Windows, right-click → Properties → Details → Remove Properties on a copy is a valid strip path when exiftool is not installed.
True or False