Security · 8h ago
How to verify EXIF GPS is stripped before retry queue uploads
A developer outlines a testing protocol to ensure mobile apps strip GPS and other metadata from photos before the retry queue uploads them. The method uses synthetic JPEG and HEIC fixtures with known metadata, intercepting upload bytes to verify removal. It covers foreground uploads, background retries, app restarts, thumbnails, and cleanup policies.
Meridian48 take
The protocol highlights a common privacy gap where background retry queues may bypass metadata stripping, but it only covers synthetic fixtures, not all vendor codecs or OS version changes.
Read the full reporting
Prove Your Mobile Upload Removed EXIF GPS Before the Retry Queue Keeps a Copy →
DEV Community
exif-strippingprivacy-testing