Archive for August 2011
Is There a Major Security Hole in Flickr’s New “Geo-Fences” Feature?
Today Flickr rolled out their latest new feature called “geofences.” Essentially the feature allows you to hide the geolocational data on some of your photos and creates a privacy setting for who will be allowed to view it.
So, for instance, if you want to go ahead and geotag where you live, or where your kids go to school, or other sensitive information, you can theoretically feel comfortable doing that — as long as you put up a “geofence” restricting who has access to this sensitive geolocational data on Flickr.
For the most part the new feature works as advertised. I tested it out today by restricting the geolocational information on this photo of mine in Boston, which I had previously geotagged.
After creating a geo fence around this location, Flickr asked me if I wanted to apply it only to photos going forward, or also to images that I’d already geotagged. I told flickr to go ahead and apply this setting to all of my past and future photos — which included a thumbnail of the photo I linked. So now when you go to this photo on flickr, indeed, the geotag seems to be removed from the photo page for the image.
Except that there is one pretty major security hole.
Although the geotag information is indeed pulled from the flickr photo page, ANYONE can potentially still get your geolocational data simply by downloading the original sized file and looking into the EXIF data.
This only seems to apply to images that were geotaged at the file level (i.e. by you or your device/phone, etc.) and not photos geotagged using flickr — but still, with cell phones and software that auto geotag things, you could easily be lulled into a false sense of security on Flickr when you should not be.
All anyone has to do is simply right click and download your original sized photo (flickr won’t let you disable original sized photo downloading if you use a creative commons license), open that file in Photoshop, go to the “File Info” menu, and look into the EXIF data and the geolocational data is still right there — even though this file came from a location that you’d put in your geofence.
To test this, on the above geo fenced image of mine I set it so that only my account could see the geolocation. Next I logged into another Flickr account of mine, went to the original size of the file, right clicked and saved it to my hard drive. I then opened up the image in Photoshop using the commands above to get the geolocational information from the file as evidenced in the screenshot above.
How could flickr fix this pretty serious security hole in their new feature? One way would be to strip the geolocational data from a photo’s EXIF data when it’s in a geofence and downloaded by anyone but you — but if they don’t want to do that, they really should probably include some sort of disclaimer with this new feature that even if a photo of yours is in a geofence, people still may be able to get the location on the photo simply by downloading the file.
Although it takes a little bit of work to get the geolocational data from a photo in a geofence, it would be unfortunate if someone were lulled into a false sense of security and uploaded photos to flickr, thinking that the location data was safe because of the flickr geofence, when it was in fact not.
There is a forum where flickr has set up a page to discuss this new feature, but I can’t post about this security flaw there because I’ve been permanently banned from Flickr’s Help Forum. Go figure.
Update: Apparently Flickr does have some language on one of the pages in the feature settings warning about this. It was up and to the left and I missed it when I set my geofence up. I think alot of other people will miss it as well. It reads, in part, “If you upload a photo with geo data, that info will be embedded in the EXIF data of the original file.”
Given that alot of people on Flickr have no idea what EXIF data even means, Flickr should be more clear about this than they are.
Also this disclaimer was not mentioned anywhere in the original blog post which highlighted sharing very sensitive geolocational data (where you live and where your kids go to school) — it should have been. To have it buried on a settings page is not good enough.
In fact, if you are using a geofence on a photo and the geolocational data is still easily accessible by downloading the file, in these cases I’d suggest flickr put a small disclaimer under the map on the photo page (that you can still see but others can’t) that reads: “this photo is in a geo fence, which means that you can see it’s location, but others cannot, others still can, however, download your file and view the location data.”
This way people would be warned right there on the photo page. It would be very likely that people could set up a geofence, miss the original disclaimer, and then two months later upload a photo from their iPhone (the number one camera on flickr) thinking that they were safe when they were not.
Finally, it sucks that Flickr will not let you opt out of hiding your embedded geolocational data on your file if you are using a Creative Commons license. At present the only way to hide your original file (with this geolocational data) on flickr is to change your licensing to all rights reserved and then prohibit the downloading of original files. Flickr should allow people who use Creative Commons licenses to also restrict the downloading of their original files, or at a minimum restrict the downloading of any of their original files that are in geofences.
Top 10 Ways for Photographers to Get Attention on Google+
Another week, another Google+ post.
Last week I wrote about 5 reasons why Google+ is winning the war in photosharing. In the comments to that post were a few people who said that they did not feel like they were getting traction even though they were getting involved.
Today I thought I’d put out a post on the top 10 ways for people to get attention on Google+. Some of these will apply to non-photographers too. Keep in mind that developing a large audience on the internet can take years of work, there is no magic bullet to automatically getting attention. There are, however, some best practices that may help you find more followers and get more attention.
1. Post great photos. “Great” is totally subjective though right? Post what you feel are the strongest photos you have. They don’t have to have been taken yesterday. You should strive to reserve your very best work for Google+. If you want attention as a photographer, make working on your craft a priority.
My friend Sly Vegas has only been shooting 6 months, but he has poured himself into photography in a huge way. He’s shooting every day, he’s devouring tutorials for Canon and Adobe Lightroom. He’s trying to step up his game. If you post mediocre photos none of the rest of this will count. Make sure dust spots are cloned out. Post process your work to make it look it’s best. Find unique and interesting subject matter to shoot. All of this matters.
Even if you’re not a photographer, consider posting strong and interesting visual imagery with your post. Tom Anderson does this. His posts are all about his thoughts and words, but with almost every post he makes he posts something visual to go with it. Google+ is heavily optimized to show the visual. Posts with photos do better than posts without.
Well now that we’ve got that out of the way…
2. Reciprocation. The number one way for you to get attention on Google+ is to reciprocate. Reciprocate like crazy. This is no different than Flickr, or Facebook, or Twitter or whatever. The most basic formula for every social network has always been reciprocation. Believe it or not, +1′s are *FREE* for you to give out. They don’t cost you anything! They are unlimited. +1 like crazy.
If you like a post or photo or whatever, +1 that sexy thing.
Comments are even more valuable than +1s. Don’t be shy. Even if all you have time to say is “nice!” A comment in someone’s post puts your link there for others to discover you.
If you want to ramp up attention to your own work, spend some time giving it out first. Have a philosophy of giving out 2, 3, 4 times, hell 100 or 1000 times when you’re starting out, what you get. Give and you shall receive. Don’t be disingenuous — comment when you really feel it and of course everyone always loves those super thoughtful, funny, positive comments too.
Also don’t forget to +name someone when you respond to them in a comment. It’s hard to keep up on every single conversation on Google+. If someone asks you a question or you are directing something at someone specifically, make sure to +name them. This way they are better notified (don’t abuse this).
3. Add a bunch of interesting people to your circles. Nothing gets you a follower quite like following somebody else first (again, see reciprocation). This will take some work. You have to be willing to work. My favorite way to find new people to add? I look for people who are making interesting and engaging comments on mine and other’s streams and I add them. The lists are a place to start too, but there are tons of people who are crazy talented who aren’t on these lists yet. (btw, you can add yourself to a lot of these lists, have you done that yet?)
It’s ok to add strangers. Put them in your “I Don’t Know These People Yet But They Seem Hella Talented and I’d Like to Get to Know Them More” circle.
Don’t just blindly add people, but actively look for interesting people and add them liberally when you find them.
4. How you post matters. Are you posting photos? Post them *directly to Google+* in order to get the huge big thumbnail. You have no idea how important this thumbnail is. Don’t just post a link to a flickr photo of yours, or a photo on 500px, or a photo on your blog. Bigger is better!
If you are so tied to these other places where you post, still upload the photo to G+ but add a link (if you must) to the site that you want to link out to.
I’ve heard a lot of people say things like, well if I post my photo to Google+ then I won’t get the traffic to my blog. Fine. But this post isn’t about how to get more attention on your blog, it’s about how to get more attention on Google+. A text link to your blog or a small thumbnail to a flickr or 500px will get far less attention than a big, bright, bold thumbnail image directly on G+.
5. Don’t overpost. I post 5 photos a day. That feels about right to me. I spread them out during the day. The best way to get people to ignore you is to flood their stream with 50 photos of your recent vacation (unless you’re Trey Ratcliff and they are all from Burning Man and you are posting them to make a point about how the comment on photo spam needs to be fixed by Google).
Resist the urge to post about what your eating like you do on Twitter — unless what you’re eating is raw sushi off Lady Gaga’s naked body on a table at the Playboy Mansion — again joking, I so would NOT post about that if I were actually doing it, which I wouldn’t be, I mean which I probably wouldn’t be.
6. Don’t post a GIF... unless it’s a really, really, really, really good GIF that nobody’s seen before. Seeing someone’s face morph into 14 other faces was sort of cool the first time you saw it. The 20th time, not as much. Resist the urge. I love a good Caturday GIF as much as the next guy, but a lot of people see these as noise.
7. Be a great curator. Guy Kawasaki is great at this. So is Morgaine LeFaye. So is Robert Scoble. Look for the best, most unique content that you can find on the web. Use your space to showcase work by other talented people on G+. When a new person shows up who you know has talent, make a post introducing them to the rest of the community.
8. Participate in hangouts. Hangouts are a great intimate way to get to know people. Somehow when you spend a little time with someone face to face (albeit with computers between you) you get to know them a little better.
9. Cross promote your Google+ account. Is there a link to your Google+ account on your flickr profile? Why not? That’s soooo easy to do. Have you posted a kick ass photo to flickr, reminding the people that follow you there that you are now on Google+, maybe even with a link to your invites url? Why not?
Have you tweeted out your Google+ posts page? Have you posted it to Facebook? Is it on your blog? Your tumblr?
What about people in real life (IRL, don’t you just hate that? I mean the web is in fact IRL if you ask me)? I hear people say that their family are not on Google+ yet, that they are still on Facebook. Whose fault is that? Yours. Get them on there. My sister just recently joined by the way. What about your co-workers? Ask them if they’ve heard of it and offer them an invite. You’d be surprised how many people are interested in G+ right now but just need that little personal touch and push over.
Are you a celebrity? Mention your Google+ account the next time you’re on the David Letterman show (joking), but you get the idea.
10. Make sure you are posting *PUBLICLY*. Alot of people make this mistake when they first post to G+. They aren’t aware that you have to type “public” into the little box below your status update. If you only put “your circles” or “your extended circles” or you leave it to the last way you sent something as a default, or whatever, you’ll miss getting your image out to a TON of people.
Unless there is a specific reason why you need to keep a photo limited, if you want attention, you are going to want to make sure it says “PUBLIC” down at the bottom, every time you post a photo.
Bonus tip: Be nice and be *positive*. Nobody likes a hater. Nobody wants to hear that their photo sucks and that it looks like crap (unless someone is *specifically* asking for this sort of criticism). Nobody wants to see someone saying that their model looks fat. Resist the urge to bash Obama on unrelated photos of the Grand Canyon.
It’s so easy for someone to uncircle you, move you to the “Don’t pay attention to these people because they are negative haters” circle, block you, or even use the new ignore feature that Google rolled out last week (for when you really do want to block someone but it might feel socially awkward).
People are on Google+ for a lot of reasons, to find interesting content, to meet interesting people, to promote their work, to get inspiration, to social network, but most of all they are on here *TO HAVE FUN*.
You can find me on Google+ here.
Five Reasons Why Google is Winning the War in Photosharing
“What is more pleasant than the benevolent notice other people take of us, what is more agreeable than their compassionate empathy? What inspires us more than addressing ears flushed with excitement, what captivates us more than exercising our own power of fascination? What is more thrilling than an entire hall of expectant eyes, what more overwhelming than applause surging up to us? What, lastly, equals the enchantment sparked off by the delighted attention we receive from those who profoundly delight ourselves? – Attention by other people is the most irresistible of drugs. To receive it outshines receiving any other kind of income. This is why glory surpasses power and why wealth is overshadowed by prominence.”
Yesterday my good friend Trey Ratcliff did an experiment. Granted, this is *TOTALLY* and *COMPLETELY* unscientific. His experiment was he posted one of his photos on two sites — the identical photo at the identical time. The two sites were Google+ and Facebook. Trey was trying to measure the difference in engagement between the two. Below are his results:
Results
Google+: 1193 +1s, 66 shares, 367 comments.
Facebook: 89 likes, ? shares, 40 comments.
Trey has more to say and mentions some interesting variables, but suffice it to say that Google+ is the *hottest* thing in the photo sharing space right now. I’ve been thinking alot about that and wanted to articulate some of the things that Google is doing right and why I feel that this is the case.

Firedancer, Barcelona Spain, by Trey Ratcliff
1. Images look great. Right out of the gate Google+ has gotten image presentation down. We get gorgeous, luscious, huge, oversized thumbnails in our streams that when you click on them almost instantaneously burst into the best looking lightbox on the web right now. Facebook by contrast gives us these tiny, stingy, little etsy weenie, microscopic thumbnails that when you click through present you with a smaller cluttered lightbox complete with all kinds of distracting material including advertisements. Flickr’s lightbox is ok, but its clunky and slow and when I click off of it it doesn’t always return me back to the photo page.
On Facebook photographs seem tolerated. On Google+ photographs seem celebrated. Our world is so visual. Google gets this in a big way.

Ferry Building, San Francisco, by Chris Chabot
2. The Google Photos team, well hell, everyone at Google is really excited, enthused and involved in the Google+ product — all day long! I’ve never quite seen anything like this. Literally *hundreds* of Googlers interacting like an army with all of us users. I think I know two people total who work for facebook and I haven’t spoken with either of them in years. I’ve traded some fun barbs with Daniel Bogan over at Flickr on Twitter, but my contact with anyone at Flickr ended years ago. (did I mention I’m permanently banned from the forum where there staff hangs out?)
I don’t think that this is an accident. I think Google is experimenting with one of the boldest experiments in customer service and evangelism of all time. I think it’s a culture thing and I think it comes from the top. In fact I know it comes from the top. Google has empowered their employees to become their PR machine.
We’re doing a great photowalk next Thursday at UC Berkeley — SIGN UP HERE. Who’s organizing it with me? Chris Chabot who works for Google — a super guy who I’ve gotten to know and consider a friend. When was the last time you saw someone from Flickr or Facebook leading a photowalk? Googlers were everywhere at Trey’s photowalk at Stanford a few weeks back.
I have never seen any company empower its employees to be so free and open with PR and communication channels. I totally credit all the individual Googlers who are making this happen, but I also credit leadership at Google for allowing this sort of a culture to thrive and flourish. It’s the exact opposite of the top secret controlled environment message ala Steve Jobs and Apple.

If My Sky Should Fall, by Lotus Carroll
3. The engagement just can’t be beat. As Trey’s experiment shows, you just get so much more engagement on every post at Google+ over what you post on Facebook and Flickr. Not just a little bit more — ALOT more.
I’ve heard some people who claim that they still get more on Facebook and Flickr, but they haven’t really engaged on Google+ yet. Everybody I’ve known who has actively engaged on Google+ agrees that you just get so much more engagement.
Yesterday in Trey’s post, Byron DL wrote “Thomas Hawk pronounced the death of Flickr. Millions of people just share photos to share them and don’t measure the stats or use them to get more followers are friends and influence. These numbers are like comparing the drawer full of polaroids at my mom’s house to another’s moms house.”
Byron may have a point. Maybe alot of the people on Flickr don’t really care about engagement (faves, comments, views, etc.), maybe photos are just a drawer full of polaroids after all — but I think he’s wrong. Even if people don’t want to admit it, they all do.
Caterina’s quote at the top of this article was the foundation of what made Flickr the success that it was.
We all want attention. Sure we want a place to just share photos with our friends and family — but the attention is the real drug, even if we’re too proud to admit it.
Before Flickr people *already* had a site to share photos with friends and family. It was called Webshots. Hell, CNET paid twice for Webshots what Yahoo paid for Flickr. Webshots is still a fine place to share photos with friends and family — the greeting card people bought the company I think. Likewise Flickr will be an ok place to share photos with friends and family too, but all the real action in photo sharing will move over to Google.
Some of My Favorites, by helen sotiriadis
4. The culture is positive. I’ve been super active in Flickr groups pretty much ever since Flickr started them. I’ve administered many. I’m not exaggerating when I say that I’ve spent thousands of hours literally in Flickr Groups.
Yesterday I quit the last Flickr group I was active in administering. A group with about 6,000 members. Why? Mostly because of the negativity.
Flickr groups are overrun by anonymous trolls and griefers. The IRL personal harassment and stalking that has come out of Flickr groups has convinced me to stay away from them. Even the people who aren’t harassing other people are frequently petty, negative haters — so much back bitting, pessimism, jealously and stupid crap.
By contrast the culture the culture at Google+ is incredibly positive. People helping each other. Talking about photography and cameras and lenses again. It’s like night and day. In part I think this culture is framed by Googlers setting such a positive tone to the network as it’s been rolled out. But I think there are design elements too.
It seems harder for people to set up 20 troll accounts and attack. If someone misbehaves they are quickly removed from circles and marginalized. I don’t know how it’s happening exactly, but it’s a nice change.
Robert Scoble says that Google+ is working because Google has focused on the interest graph and has allowed strangers to meet around common interests. I definitely see that with photography. I’ve met so many amazing new friends in the past six weeks on Google+ around photography that I never knew from any other social network. There’s wayyyy too many to name, and I love you all, but here’s talking about you Kelli Seeger Kim.

Wave Photos, by Eric Nelson
5. Photographers promoting other photographers. One of the most exciting things I see on Google+ is photographers promoting other photographers. I love it when this happens. I get to find somebody new and super cool to follow and it just makes me feel good inside.
I promote a lot of other people too. I love seeing great photographers get recognized. I can’t recognize everyone for sure, and hope I don’t offend people who I don’t recognize, but I love highlighting great work sometimes when I see it and it seems like alot of other people on Google+ do as well.
I’ve blogged a ton about Google+ over the past few weeks. Some people have said that they are tired of it — but this is what I do. I’m like a hungry seagull — when I’ve found the greatest dinner on the beach I have to squawk and squawk and squawk to get all the other seagulls to see what a great thing I’ve found. I evangelized Flickr just as hard back in the day (back when they seemed to care) and have been a big proponent of Twitter, Friendfeed, Google Buzz, and other interesting social media tech as it’s emerged.
I’ve never seen anything quite like Google+. Everyday it seems like another great Flickr/Facebook account is moving over and it makes me happy seeing more and more of my favorite friends hoping on board.
If you want to follow my work on Google+ you can circle me here.











