Romero Lab 1 Part 2 - Exif Tools

Class: CYBR-405

Notes:

Q1

Using the image file "DSCN0012.jpg", look up the GPS coordinates of that picture and answer below where it was taken.

Run the following:

$ exiftool DSCN0012.jpg

The output would look something like this:

From this, we know that the GPS Position of the image is 43 deg 28' 1.76" N, 11 deg 53' 7.42" E. Now lets look that location up

Answer:
Using exiftool on this image, we determined the GPS position to be 43 deg 28' 1.76" N, 11 deg 53' 7.42" E. By converting these coordinates into an address using a coordinate converter, we found that the location of the picture is precisely Via Madonna Laura, Arezzo, Tuscany, 52100, Italy.

Q2

Using the file explorer (not the command line) write below what the picture is.

Answer:
By examining the image file on the file explorer or using feh, I can observe that the image accurately corresponds to the apparent GPS position. I can see some trees and bushes following what appears to be a path where some of the tree leaves have fallen. On the left side, we can see a bit more of the blue-white sky and what seems to be a stone house or structure. There are also some lanterns following the path. This aligns with the coordinates indicated by exiftool, as it appears that this is near a green zone and there is a path for walking.

Q3

What kind of camera was used to take the pictures?

This is the output from the previous exiftool command:

Here we see the camera used was a Nikon Coolpix P6000 Digital Camera

Answer:
Upon examining several of the pictures with exiftool I determined that the camera used to capture these images is a Nikon Coolpix P6000 Digital Camera.

Q4

After removing the EXIF data from the photo, what data is left? And is it important?

To remove the EXIF data from the image file we run:

$ exiftool -all= DSCN0012.jpg

Output:

	1 image files updated

• What that command does is it takes all the points of EXIF data in the image and replaces it with a blank space.

Now to check what data is left we just use exiftool again:

$ exiftool DSCN0012.jpg

You will see that the only data remaining is: