The expert warned about the danger of publishing images with geolocation

An ordinary smartphone photo can reveal not only the image, but also additional information about the person — the place and time of the shooting, the model of the device, as well as details of everyday life. "Izvestia" was informed about this on September 16 by Valentin Chernyaev, consultant to a system integrator in the field of information security, expert in auditing information security and information systems.

According to the expert, some of the information can be stored in EXIF metadata, which is automatically added by the smartphone camera or application when creating an image. Such data may contain GPS coordinates, date and time of shooting, time zone, device manufacturer and model, software version, and technical parameters of the camera.

"It's quite easy to get this information: no special knowledge or hacking of the device is required for this. Some of the metadata can be viewed directly in the "Photos" application, in the file properties on a computer, or using publicly available programs," Chernyaev said.

The expert noted that social networks and messengers often delete some of the metadata when uploading images, but this depends on the specific service and the method of sending the file. When transferring a photo as a document or source file, the probability of saving the EXIF is higher. However, the metadata itself cannot be considered absolute proof of the location and time of the shooting, since they can be changed or faked.

Even after deleting official information, a snapshot can reveal a person's identity or location. According to Chernyaev, signage, house numbers, road signs, architecture, window views, terrain features and vegetation can indicate this. Additional information can be provided by details in the frame: an employee's uniform, company logo, office interior, documents, car license plates, computer screens, or correspondence.

The expert noted that it is not a single photograph that poses a particular danger, but a collection of publications over a long period of time.

"The main danger lies in the combination of details. One element may mean nothing, but several photos allow you to link a name, address, place of work, trips and daily routine into a single picture," Chernyaev emphasized.

According to the expert, repeated images of the same courtyard, the view from the window, shops, cafes or bus stops can help determine a person's place of residence and habitual routes. Photographs of documents and payment data pose a separate risk. The images may contain your name, date of birth, signature, identification numbers, bank card information, booking numbers, QR codes, and barcodes. Chernyaev recommended not to publish such images in the public domain.

Before posting a photo on the Internet, the expert advises to carefully check the background, edges of the frame and reflections, as well as disable geolocation. Confidential data should be completely deleted or obscured in an opaque way, since simple blurring or pixelation does not always provide reliable protection.

The specialist also recommends against publishing photos from trips in real time.

"It is better to post photos from the trip after returning, rather than in real time. Even a closed profile cannot be considered a reliable repository: any recipient can save a snapshot and pass it on," the expert concluded.

The Russian Interior Ministry said on September 13 that freezes and spontaneous reboots of the phone may indicate possible signs of infection of the device with viruses. Such programs can provide attackers with access to the user's personal information and mobile banking data. In case of suspicion, Russians are advised not to enter bank card information on such a device and not to open banking applications.