Consumers who believe they are careful about what information they share online may be surprised to learn just how much information is revealed through their photos. In addition to the pictures many routinely post to social media, our online video meetings and Facebook live videos can reveal details useful to identity thieves and other criminals.
With so many of us working from home and connecting via Zoom and other video services, we do not always realize what others see in the background. An article in the Wall Street Journal detailed some of the information you may be giving away without even realizing it.
- Your address. Is that an Amazon package with your home address on it in the corner of that picture you posted?
- Personal information such as your date of birth. Birthday wishes from friends (some of which may contain your age) tell criminals what they want to know.
- Passwords are often based on pet names and hobbies. Clues in your photos can help bad guys take a good guess at your passwords. For example, if you have Liverpool Football Club posters around your room, criminals might guess that your password contains “liverpool.” By analyzing a list of breached passwords, easily found online, hackers can discover that most people with “liverpool” in their passwords add a significant numeral, such as liverpool11 or liverpool10, the numbers of two popular players.
- Your photos may reveal important information about your employer, too, including sensitive correspondence or webpages.
- Photos showing technical details about your computers, such as serial numbers, might allow criminals to pretend to be that employee and get the IT help desk to give them access or carry out other mischief.
- Knowing what software companies use makes it easier for the hackers to target attacks.
- And then there is old fashioned burglary. Knowing where you live, what expensive devices you have and where they are in proximity to doors and windows is a great help to burglars.
Beyond what is shown in the photos, digital photos often contain EXIF data that tells the date, time and location of the photo and other information. Although you cannot turn off EXIF in your phone, you can turn off geotagging (where the photo was taken) by turning off the location settings (how-to on iPhone or Android). After the fact you can remove the data by editing the image file or by taking a screenshot of the photo. The screenshot will not include EXIF. According to Consumer Reports, most social media platforms do not upload EXIF data with your photos, but you can bet that they are keeping and using that data themselves.
The first step to protecting your privacy is realizing just how much you may currently be sharing without realizing it. Once you know what you are exposing, take the appropriate steps to stop oversharing online.
