diff --git a/docs/data-redaction.md b/docs/data-redaction.md index 02deb308..7e0ef666 100644 --- a/docs/data-redaction.md +++ b/docs/data-redaction.md @@ -5,11 +5,19 @@ icon: material/tag-remove description: Use these tools to remove metadata like GPS location and other identifying information from photos and files you share. cover: data-redaction.webp --- + Protects against the following threat(s): - [:material-account-search: Public Exposure](basics/common-threats.md#limiting-public-information){ .pg-green } -When sharing files, be sure to remove associated metadata. Image files commonly include [Exif](https://en.wikipedia.org/wiki/Exif) data. Photos sometimes even include GPS coordinates in the file metadata. +When sharing files, be sure to remove associated metadata. Most common file types (including documents, images, and videos) include metadata. Image files, for example, commonly include Exif data. Photos sometimes even include GPS coordinates in the file metadata. + +Windows has a built-in metadata remover, but unfortunately it cannot remove many types of data such as: + +- Documents: Comments, author names, tracked changes, hidden worksheets, slide notes, custom XML, and document revision histories. +- Images: Camera serial numbers, XMP/IPTC data, C2PA metadata, and image thumbnails (which can dangerously expose original details from cropped or erased areas). +- Audio & Video: XMP metadata, C2PA metadata, and certain ID3v2 tag fields. +- Embedded Files: Hidden metadata nested inside images that are embedded within documents.

Warning

diff --git a/includes/abbreviations.en.txt b/includes/abbreviations.en.txt index fa7cc368..3cf553d4 100644 --- a/includes/abbreviations.en.txt +++ b/includes/abbreviations.en.txt @@ -5,6 +5,7 @@ *[attack surface]: The total number of possible entry points for unauthorized access to a system *[AVB]: Android Verified Boot *[cgroups]: Control Groups +*[C2PA]: Coalition for Content Provenance and Authenticity *[CLI]: Command Line Interface *[CSV]: Comma-Separated Values *[CVE]: Common Vulnerabilities and Exposures @@ -48,6 +49,7 @@ *[IPv6]: Internet Protocol version 6 *[ISP]: Internet Service Provider *[ISPs]: Internet Service Providers +*[IPTC]: International Press Telecommunications Council *[JNI]: Java Native Interface *[KYC]: Know Your Customer *[LLaVA]: Large Language and Vision Assistant (multimodal AI model) @@ -107,6 +109,7 @@ *[VLAN]: Virtual Local Area Network *[VoIP]: Voice over IP (Internet Protocol) *[W3C]: World Wide Web Consortium +*[XMP]: Extensible Metadata Platform *[XMPP]: Extensible Messaging and Presence Protocol *[PWA]: Progressive Web App *[PWAs]: Progressive Web Apps