There's a little genre of bug report on GitHub where someone notices an app doesn't strip location data from uploaded images. OpenSourcePOS has one that's been open since June 2024. It's filed on a site that doesn't strip it either.

I made a JPEG this afternoon with a made-up iPhone and made-up coordinates (the Royal Observatory in Greenwich), attached it to an issue on my own repo with the GitHub CLI, then pulled it back down without logging in:

$ gh issue create --repo NotAFlightRisk/blog --attach ./board.jpg ... $ curl -sL -o back.jpg https://github.com/user-attachments/assets/a4f9b89e-... $ sha1sum board.jpg back.jpg 0bf77bdd7d88984dde14adc8b148888ea72d72e4 board.jpg 0bf77bdd7d88984dde14adc8b148888ea72d72e4 back.jpg

Enter fullscreen mode

Exit fullscreen mode

Same file, byte for byte, GPS and all, to anyone with the link. GitHub's page on attaching files doesn't mention metadata at all.…