GitHub keeps GPS metadata in photos attached to issues
A researcher pulled 12,011 attachments from hardware repo issues and PRs on GitHub: of 1,824 JPEGs, 306 carry GPS coordinates and 556 name the phone model. GitHub serves files byte for byte without stripping EXIF; among the forges tested, only GitLab removes it.
- 306 of 1,824 JPEGs in issues contain GPS coordinates
- 556 photos kept the phone model, 297 also the location
- GitLab strips EXIF from JPEG and TIFF, GitHub and Forgejo do not
- After a link is edited out of an issue, GitHub returns 404 within 2–3 minutes
Read next
Security