Twitter | Search | |
Edin Jusupovic
is embedding tracking data inside photos you download. I noticed a structural abnormality when looking at a hex dump of an image file from an unknown origin only to discover it contained what I now understand is an IPTC special instruction. Shocking level of tracking..
Reply Retweet Like More
Edin Jusupovic 10 Jul 19
Replying to @oasace
The take from this is that they can potentially track photos outside of their own platform with a disturbing level of precision about who originally uploaded the photo (and much more).
Reply Retweet Like
Edin Jusupovic 10 Jul 19
Replying to @oasace
I suppose the more concerning issue here is that there is already a variety of advanced techniques to inject data inside photos using steganography such that it would be impossible to forensically detect. If weaponized, it could be used for tracking; with zero proof.
Reply Retweet Like
Edin Jusupovic 11 Jul 19
The IPTC special instruction starts with FBMD; if you download a photo from facebook and dump it using any hex editior you'll see a unique IPTC special instruction, we don't know what it's for but it's very likely tracking of some sort considering every photo has a unique one.
Reply Retweet Like
Edin Jusupovic 12 Jul 19
CC Happy to comment further on it via edin+jusupovic@tutanota.com (remove + from email)
Reply Retweet Like
Edin Jusupovic 12 Jul 19
Nearly forgot
Reply Retweet Like
Edin Jusupovic 11 Jul 19
Replying to @BIGREDMURPHY
I can imagine a number of different applications, one such example would be identifying the uploader of a photo if that photo was uploaded to Facebook (again) by another person and then correlating the relationship between said photo and person or persons. Many more uses...
Reply Retweet Like
Pranesh Prakash 18 Jul 19
Replying to @oasace @PrivacyMatters
Discovered 4 years back at least. To see what they're tracking, you'll at least need to: 1) 🔺 same image from two accounts, 🔻 from same account 2) 🔺 two images from same account, 🔻 from different accounts. 3) 🔻 the same image at two different times from the same account.
Reply Retweet Like
Privacy Matters 19 Jul 19
Replying to @pranesh @oasace
That maybe but are you saying the practice no longer takes place or does not hold privacy implications ?
Reply Retweet Like