From the course: Security Tips: Metadata

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Security risks of metadata

Security risks of metadata

- [Instructor] Throughout the course, we've seen a few different ways that information could be leaked accidentally through various kinds of metadata, and consequently, we've seen how we can discover information in metadata that might not have been intended for us to know. Embedded metadata while very useful, can contain sensitive data like geolocation information and custom or internal tags that clients and others shouldn't see. So this kind of sensitive information should be carefully removed or stripped before sharing files outside of a secure perimeter. We've also seen that metadata can be maliciously falsified, or simply be incorrect, and that it shouldn't be trusted on critically. Metadata stored by file systems can also present a risk of information loss or exposure in a variety of ways. Copying files secured with an ACL to a file system without ACL support, for example, can expose those files to the effects of that…

Contents