Re: Security issues posed by PNG metadata

On 15/01/17 06:56 PM, Glenn Randers-Pehrson wrote:
>
>
> On Sun, Jan 15, 2017 at 3:48 PM, John Bowler 
> <[email protected] 
> <mailto:[email protected]>> wrote:
>
>     On Sun, Jan 15, 2017 at 12:36 PM, Soni L. <[email protected]
>     <mailto:[email protected]>> wrote:
>
>         I'm sorry, how is copyright information a security issue?
>
>         I use copyright information all the time myself. It's useful
>         for, well, copyright.
>
>
>     It's a privacy issue.  It contains the name of the entity which
>     holds the copyright.
>
>
>
> i.e., if a whistleblower submits a photo to a "leak" site, and thinks 
> it is anonymous,
> they get their cover blown because their camera wrote a copyright line 
> in their
> image file.

Oh.

I mean, I personally always doublecheck my metadata, so it's not an 
issue for me... But I can see how that's an issue.

You can't do anything about it tho. "Ban the ppl who are doing evil 
things, not the tools that allow evil things to be done." and all.

>
>
>     That would not be "fakedme+png" or Soni L., it would be your full
>     legal name.
>
>     Of course that's not a privacy issue for me, but then I'm not
>     typical; so far as I know I am the only person on this list with a
>     signature like this:
>
>     -- 
>     John Bowler <[email protected]
>     <mailto:[email protected]>>
>     +1 (541) 450-9885 <tel:%28541%29%20450-9885>
>     PO BOX 3151
>     KERBY OR 97531-3151
>     USA
>
>
> Like this one I sent out yesterday?  It's not an "email signature" but
> it's pretty much like yours otherwise.
>
> 12. Editor
>
>    Glenn Randers-Pehrson
>    PNG Development Group
>    611 Rivershore Court
>    Edgewood MD 21040
>
>    Phone: (410) 676-6950
>
>    EMail: glennrp at gmail.com <http://gmail.com>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today. http://sdm.link/xeonphi
>
>
> _______________________________________________
> png-mng-misc mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/png-mng-misc

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi

_______________________________________________
png-mng-misc mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/png-mng-misc