{"data":{"id":"289c99aa-8b43-4fd8-9f32-12deeb38efd9","title":"Not Where You Think: Protecting Location Privacy Against Reasoning-Based Geolocation","summary":"Researchers show that large reasoning models can infer where ordinary photos were taken from visual content alone, even after metadata and obvious location cues are removed. Their GeoTrace attack localizes 25.71% of 525 images within 1 km with Gemini-3-Flash and 16.95% with GPT-5-mini. They also present GeoShift, a user-side defense that rewrites high-impact location clues before release, cutting street-level localization to 2.48% (GPT-5-mini) and 3.81% (Gemini-3-Flash).","solution":"GeoShift, a proactive user-side defense that breaks the visual clue chain before image release by preserving stable scene properties, selecting a visually compatible false target location, and strategically rewriting high-impact geo-revealing clues.","labels":["research","privacy"],"sourceUrl":"https://arxiv.org/abs/2610.30439v1","publishedAt":"2026-10-21T20:49:50.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google","OpenAI"],"affectedVendorsRaw":["Gemini-3-Flash","GPT-5-mini"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T20:49:50.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"model","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":"preprint","atlasIds":null}}